Legal
Privacy Policy
Last updated: 15 May 2026 | Boon Bytes, Bangkok, Thailand
1. Introduction
Boon Bytes ("we", "us", "our") is committed to protecting the personal data of individuals who visit our website or engage with our services. This policy explains what data we collect, why we collect it, how we use it, and the rights available to you under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and other applicable frameworks.
If you have questions about this policy, please contact us at [email protected].
2. Data We Collect
We collect the following categories of personal data:
- Contact information: name, email address, and phone number submitted through our contact form.
- Communications data: the content of messages you send us, and our responses.
- Technical data: IP address, browser type, pages visited, and time spent on site — collected via analytics cookies where consent is given.
- Cookie preferences: your consent choices stored locally in your browser.
We do not collect sensitive personal data (health, financial, or identity documents) through our website.
3. How We Use Your Data
Personal data is used for the following purposes:
- Responding to enquiries submitted through our contact form
- Providing and managing the services you have engaged us for
- Sending service-related communications (invoices, documentation, summaries)
- Improving our website based on anonymised analytics data
- Complying with legal obligations under Thai law
We do not use your data for automated decision-making or profiling.
4. Legal Basis for Processing
- Consent: used for analytics cookies and marketing communications (where applicable).
- Contract performance: processing necessary to deliver the service you have requested.
- Legitimate interests: responding to unsolicited enquiries and maintaining business records.
- Legal compliance: retaining records as required under Thai law.
5. Data Retention
We retain personal data only as long as necessary for the stated purpose:
- Contact form enquiries: up to 12 months from last contact, unless an ongoing engagement begins.
- Client engagement records: 5 years from the end of the engagement, in line with Thai commercial law.
- Analytics data: retained in anonymised form for up to 26 months.
6. Data Sharing
We do not sell personal data. We share data only in the following circumstances:
- Service providers: email and hosting providers who process data on our behalf under data processing agreements.
- Legal requirements: where disclosure is required by Thai law or a competent authority.
Client data is never shared with third parties for marketing or commercial purposes.
7. Data Protection Measures
- All data transmitted through our website is encrypted via HTTPS.
- Access to personal data is restricted to authorised team members.
- We do not store payment card information on our systems.
- In the event of a data breach affecting your rights, we will notify you and the relevant authority in accordance with PDPA requirements.
8. Cookies
We use essential cookies to keep our website functioning, and optional analytics cookies where you have given consent. You can manage your cookie preferences at any time through our Cookie Policy page.
9. Your Rights Under the PDPA
Under Thailand's PDPA, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request erasure of data where there is no legitimate basis for retention
- Object to processing based on legitimate interests
- Withdraw consent at any time (without affecting processing that occurred before withdrawal)
- Request data portability where technically feasible
- Lodge a complaint with Thailand's Personal Data Protection Committee
To exercise any of these rights, contact [email protected]. We will respond within 30 days.
10. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.
11. Children's Privacy
Our services are intended for business use by persons aged 18 or older. We do not knowingly collect data from minors. If you believe a minor has submitted data through our site, please contact us and we will remove it promptly.
12. Policy Updates
We may update this policy from time to time. Material changes will be noted at the top of this page with a revised date. Continued use of our website following an update constitutes acceptance of the revised policy.
13. Contact
Data controller: Boon Bytes
Address: 76 Asok Montri Road, Khlong Toei Nuea, Bangkok 10110, Thailand
Email: [email protected]
Phone: +66 2 261 5037