1. Introduction
This Privacy Policy is prepared in compliance with the Thailand Personal Data Protection Act B.E. 2562 (PDPA) and describes how we collect, use, disclose, and protect your personal data.
Yotha Makpichai ("we", "us", or "our") is committed to protecting your privacy and ensuring that your personal data is handled responsibly and in accordance with applicable data protection laws.
By using Client's Desk, you acknowledge that you have read and understood this Privacy Policy.
2. Data Controller
For the purposes of the Thailand Personal Data Protection Act (PDPA), the data controller responsible for your personal data is:
Yotha Makpichai
Contact: LINE Official Account
As the data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring compliance with PDPA requirements.
3. Information We Collect
We collect the following categories of personal data:
Information You Provide
- Account Information: Name, email address, phone number
- LINE Profile: Display name, profile picture, LINE User ID
- Project Data: Communications, documents, files you upload
- Identity Verification: Documents submitted for verification purposes
Information Collected Automatically
- Device Information: Browser type, operating system, device identifiers
- Usage Data: Pages visited, features used, timestamps
- Log Data: IP address, access times, error logs
- Cookies: Session data, preferences (see Section 10)
4. Legal Basis for Processing
Under PDPA, we process your personal data based on the following legal grounds:
| Processing Purpose | Legal Basis |
|---|---|
| Service delivery and account management | Contract performance |
| Security and fraud prevention | Legitimate interests |
| Legal compliance and reporting | Legal obligation |
| Marketing communications | Consent |
| Service improvement and analytics | Legitimate interests |
5. How We Use Your Data
We use your personal data for the following purposes:
- To provide, maintain, and improve our services
- To process transactions and send related information
- To send service notifications and project updates
- To verify your identity and prevent fraud
- To respond to your inquiries and provide support
- To analyze usage patterns and improve user experience
- To comply with legal obligations
- To protect our rights and prevent misuse
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption of data in transit and at rest
- Secure authentication mechanisms
- Regular security assessments and updates
- Access controls and authorization procedures
- Employee training on data protection
While we strive to protect your data, no method of transmission over the Internet is completely secure. We cannot guarantee absolute security but will promptly notify you of any data breach as required by PDPA.
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
| Data Type | Retention Period |
|---|---|
| Account information | Duration of account + 2 years |
| Project data and communications | Duration of project + 5 years |
| Transaction records | 7 years (legal requirement) |
| Log and usage data | 12 months |
After the retention period, data will be securely deleted or anonymized.
9. Your Rights Under PDPA
Under the Thailand Personal Data Protection Act, you have the following rights:
Right of Access
You may request access to and obtain a copy of your personal data we hold.
Right to Rectification
You may request correction of inaccurate or incomplete personal data.
Right to Erasure
You may request deletion of your personal data when it is no longer necessary for the purposes collected.
Right to Restriction
You may request restriction of processing in certain circumstances.
Right to Data Portability
You may request to receive your data in a structured, commonly used format.
Right to Object
You may object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
Right to Lodge a Complaint
You have the right to lodge a complaint with the Personal Data Protection Committee if you believe your rights have been violated.
To exercise any of these rights, please contact us via LINE Official Account. We will respond within 30 days as required by PDPA.
11. Third-Party Services
Our service integrates with the following third-party services:
LINE Login
We use LINE Login for authentication. When you sign in with LINE, we receive your profile information as permitted by your LINE privacy settings. Please review LINE's Privacy Policy for their data practices.
We are not responsible for the privacy practices of third-party services. We encourage you to review their privacy policies.
12. International Transfers
Your personal data may be transferred to and processed in countries outside Thailand. When we transfer data internationally, we ensure:
- Adequate data protection measures are in place
- Transfers comply with PDPA requirements
- Recipients provide sufficient data protection guarantees
13. Children's Privacy
Our services are not intended for individuals under 20 years of age. We do not knowingly collect personal data from minors without parental consent.
If we become aware that we have collected data from a minor without proper consent, we will take steps to delete that information promptly.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be effective immediately upon posting to this page.
We will notify you of material changes through:
- A notice on our website
- Email notification (if you have an account)
- LINE notification
Your continued use of the service after changes constitutes acceptance of the updated policy.
15. Contact Us
For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
- LINE Official Account: Contact via LINE
We are committed to resolving any complaints about our collection or use of your personal data. We will respond to your inquiry within 30 days as required under PDPA.