Privacy Policy

1. Introduction

Wichai Systems Co., Ltd. ("Wichai Systems", "we", "us", "our") is committed to protecting the personal data of individuals who interact with our website and services. This Privacy Policy explains what data we collect, how we use it, and what rights you have under applicable Thai law, including the Personal Data Protection Act B.E. 2562 (PDPA).

This policy applies to data collected through our website at https://wichaisy.biz, through our contact forms, and through any service engagement with Wichai Systems. For questions, contact us at [email protected].

2. Data We Collect

We collect the following categories of personal data:

• Contact details: Name, email address, and phone number submitted through our contact form.
• Enquiry content: The message text you provide when contacting us.
• Usage data: Technical data collected through analytics tools, including IP address, browser type, pages visited, and time on site (subject to cookie consent).
• Client data under contract: For service engagements, we may access specific business data necessary for the integration work, as defined in the data processing agreement signed before each project begins.

Legal basis for processing:

• Contact form data: your consent (given by submitting the form)
• Service delivery data: contractual necessity
• Analytics data: your consent (cookie consent mechanism)
• Record-keeping: legitimate interests and legal obligations

3. How We Use Your Data

• To respond to your enquiries and communicate about our services
• To deliver the services you have engaged us for under a signed agreement
• To improve our website using aggregate, anonymised analytics data
• To meet legal obligations, including tax and accounting records
• We do not sell personal data to third parties
• We do not use personal data for unsolicited marketing without your consent

4. Data Retention

• Contact form enquiries: Retained for 24 months from the date of enquiry, then deleted.
• Client project data: Access to client systems is removed within 7 days of project closure. Project documentation is retained for 5 years for legal and operational reference.
• Analytics data: Aggregated and anonymised after 12 months.
• Financial records: Retained for 7 years as required by Thai accounting law.

5. Data Protection Measures

Wichai Systems follows ISO 27001-aligned practices for information security. Our measures include:

• Encrypted data in transit (TLS) and at rest for client-related systems
• Access controls limiting system access to the specific engineer(s) assigned to each project
• Revocation of all client system access within 7 days of project completion
• Periodic internal security reviews
• In the event of a data breach affecting personal data, we will notify relevant parties within 72 hours of becoming aware, as required by the PDPA

6. Cookies

We use cookies on our website. These fall into the following categories:

• Essential cookies: Required for basic site functionality. These are always active.
• Analytics cookies: Used to understand how visitors interact with the site. Only placed with your consent.
• Preference cookies: Used to remember your settings. Only placed with your consent.

You can manage your cookie preferences at any time via our Cookie Policy page.

7. Third-Party Services

We may use the following third-party services on our website:

• Google Analytics: For website usage analytics, subject to cookie consent.
• Google Maps: Embedded map on our homepage, loaded with no API key and subject to Google's privacy policy.

We are not responsible for the privacy practices of third-party services. We encourage you to review their policies separately.

8. Your Rights Under the PDPA

As a data subject under Thailand's PDPA, you have the following rights:

• Right to access: Request a copy of personal data we hold about you.
• Right to rectification: Request correction of inaccurate data.
• Right to erasure: Request deletion of your data, subject to legal retention obligations.
• Right to restriction: Request that we limit processing of your data.
• Right to data portability: Request transfer of your data in a structured format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent.

To exercise these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Personal Data Protection Committee of Thailand.

9. Children's Privacy

Our services are directed at businesses and professional users. We do not knowingly collect personal data from individuals under 18 years of age. If you believe we have inadvertently received data from a minor, please contact us immediately at [email protected].

10. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of our website or services after an update constitutes acceptance of the revised policy. Material changes will be communicated via email where we hold your contact details.

11. Contact

For any privacy-related questions or to exercise your rights: