Privacy Policy

Digital Setup Co.,Ltd. (Headquarters) ("Digital Setup", "we", "us") operates this website and is the data controller for any personal data collected through it. This policy explains what we collect, why we collect it, and the choices you have, in line with Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA").

When you contact us through the form on this website, we collect:

• Your name, phone number, and email address
• The topic you select and the project details you write

When you browse the website, our hosting and security provider automatically processes technical data such as your IP address, browser type, device information, and the pages you request. We also attach your IP address to contact form submissions to help prevent spam and abuse.

We do not ask for sensitive personal data, such as health, religious, or biometric information. Please do not include it in your message.

We use your personal data to:

• Reply to your inquiry and discuss your project
• Prepare proposals, quotations, and agreements
• Deliver and support the services you engage us for
• Protect the website and our systems against spam, fraud, and misuse
• Meet our legal, tax, and accounting obligations

Under the PDPA, we rely on the following legal bases:

• Contract: to take steps you request before entering into a contract with us, and to perform that contract
• Legitimate interests: to run, secure, and improve our website and business, where these interests do not override your rights
• Legal obligation: to comply with laws that apply to us, such as tax and accounting rules
• Consent: where none of the above applies. You may withdraw your consent at any time

We do not sell, rent, or trade your personal data. We share it only with:

• Service providers who host our website, deliver content, and store or process inquiries on our behalf, under contracts that require them to protect your data
• Professional advisers, such as accountants and lawyers, when necessary
• Government authorities or courts, when required by law

Some of our service providers operate infrastructure outside Thailand. When your data is transferred abroad, we take steps to make sure it receives a level of protection consistent with the PDPA.

We keep inquiry data for up to 2 years after our last contact with you, unless it becomes part of a project. Data related to a contract is kept for as long as the contract lasts and afterwards for the period required by law. When data is no longer needed, we delete or anonymise it.

We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls, and limiting access to staff who need it. No method of transmission over the internet is completely secure, but we work to protect your information and respond promptly to any incident.

We do not use advertising or tracking cookies. Our hosting provider may set strictly necessary cookies to keep the website secure and available. If you switch between light and dark mode, your choice is saved in your browser's local storage. It is never sent to us, and you can clear it at any time through your browser settings.

Under the PDPA, you have the right to:

• Access your personal data and request a copy
• Receive your data in a portable format, or have it sent to another controller
• Correct data that is inaccurate or incomplete
• Request deletion, destruction, or anonymisation of your data
• Restrict or object to how we process your data
• Withdraw your consent at any time, where processing is based on consent
• Lodge a complaint with the Personal Data Protection Committee (PDPC)

To use any of these rights, please contact us using the details below. We will respond within 30 days.

Our website links to external platforms such as Facebook and LINE. These platforms have their own privacy policies, and we are not responsible for how they handle your data.

Our services are intended for businesses and are not directed at children under 20, the age of majority in Thailand. We do not knowingly collect their personal data. If you believe a minor has sent us information, please contact us and we will delete it.

We may update this policy from time to time. The latest version will always be available on this page, with the effective date shown at the top.