Privacy Policy

1. Introduction

Khwan Cloud Co., Ltd. ("Khwan Cloud", "we", "us", "our") is committed to protecting the personal data of individuals who interact with our services. This policy describes what personal data we collect, why we collect it, how we use and protect it, and what rights you have under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

If you have questions about this policy or about how we handle your data, please contact us at [email protected].

2. Data We Collect

We collect personal data through the following means:

Information you provide directly: When you submit our contact form, you provide your name (required), email address (required), and optionally your phone number and a message. We use this information solely to respond to your enquiry.

Cookies and analytics: We may collect usage data about how you interact with our website through analytics cookies. This data is aggregated and does not identify you personally. See our Cookie Policy for full details.

Data retention: Enquiry data is retained for a maximum of 24 months from the date of submission, or until you request deletion — whichever comes first. Analytics data is retained for 14 months.

3. How We Use Your Data

We use personal data for the following purposes:

• Responding to enquiries submitted through our contact form
• Communicating with prospective and current clients about our services
• Understanding how our website is used so we can improve it
• Fulfilling any contractual obligations where an engagement is agreed
• Complying with legal obligations under Thai and applicable international law

We do not sell personal data to third parties. We do not use personal data for automated decision-making that produces legal or similarly significant effects.

4. Legal Basis for Processing

We process personal data on the following legal bases under the PDPA:

• Consent: For analytics and optional cookies, where you have provided consent via our cookie banner
• Legitimate interests: For responding to direct enquiries where you have initiated contact with us
• Contractual necessity: Where data processing is required to fulfil an engagement agreement
• Legal obligation: Where applicable law requires us to retain or process certain data

5. Data Protection Measures

We implement the following technical and organizational security measures:

• HTTPS encryption for all data transmitted through our website
• Access controls limiting personal data to team members who require it
• Individual team member NDAs covering client data
• Regular review of data access logs
• Prompt notification procedures in the event of a data breach, in accordance with PDPA requirements

6. Cookies

We use essential cookies necessary for our website to function, and optional analytics and preference cookies which you may accept or decline. Full details of cookie types, purposes, and durations are provided in our Cookie Policy.

7. Third Parties

We may share personal data with the following categories of third parties where necessary:

• Analytics service providers (e.g. Google Analytics) — aggregated, non-identifiable data only
• Hosting and infrastructure providers operating our website
• Legal or regulatory bodies where we are required to disclose information by law

Where we share data with third-party processors, we require them to handle data in accordance with applicable data protection law.

8. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you have the following rights:

• Right to access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data where no legal basis for retention exists
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent for any processing that relies on consent as its legal basis

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and recommend you review their privacy policies independently.

10. Children's Privacy

Our services are directed at business organizations and their representatives. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have received data from a minor, please contact us promptly so we can delete it.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via a notice on our website. Continued use of our website following any update constitutes acceptance of the revised policy. The date at the top of this page reflects when the policy was last revised.

12. Contact

Data Controller: Khwan Cloud Co., Ltd.

Address: 44/7 Pracha Uthit Road, Huai Khwang, Bangkok 10310, Thailand

Privacy enquiries: [email protected]