Privacy Policy

1. Introduction

Mekong Logic Co., Ltd. ("we," "us," "our") is committed to handling your personal data with care and transparency. This Privacy Policy describes how we collect, use, store, and protect information you provide when accessing our website or engaging our services.

This policy is consistent with Thailand's Personal Data Protection Act B.E. 2562 (PDPA). If you have any questions about how we handle your data, please contact us at [email protected].

2. Data We Collect

We may collect the following categories of personal data:

• Contact details: name, email address, and phone number provided via our enquiry form
• Communication records: messages you send us and notes from meetings or calls
• Technical data: IP address, browser type, device type, and pages visited (collected via analytics cookies where you consent)
• Business information: organization name and role, provided voluntarily during engagement discussions

We do not collect sensitive personal data (as defined under PDPA) through this website.

3. How and Why We Use Your Data

We process your personal data for the following purposes:

• Responding to enquiries and arranging discovery conversations
• Delivering our consulting services where an engagement has been agreed
• Sending service updates or relevant industry information where you have consented
• Improving our website based on anonymized analytics
• Complying with applicable laws and regulatory requirements

Our legal bases for processing under the PDPA include: your consent (for marketing communications and analytics cookies), the performance of a contract (for service delivery), and our legitimate interests (for responding to enquiries and managing client relationships).

4. Data Retention

We retain personal data only for as long as necessary for the purposes described above:

• Enquiry data (no engagement commenced): up to 12 months from last contact
• Client engagement records: up to 5 years from engagement close, for legal compliance purposes
• Analytics data: up to 26 months, in anonymized form
• Marketing consent records: until consent is withdrawn

5. Data Sharing

We do not sell personal data. We may share data with:

• Service providers supporting our operations (email, CRM, document storage) under data processing agreements
• Analytics providers, where you have consented to analytics cookies
• Legal or regulatory authorities where disclosure is required by law

We do not share personal data with AI vendors, partners, or third parties for marketing purposes without your explicit consent.

6. Data Protection Measures

We apply the following security measures to protect your personal data:

• Encrypted transmission (HTTPS/TLS) for all data in transit
• Access controls limiting data access to authorized staff only
• Regular review of data handling practices
• Vendor selection criteria that include data security standards

In the event of a data breach affecting your rights, we will notify the Office of the Personal Data Protection Committee (PDPC) and, where required, affected individuals in accordance with PDPA obligations.

7. Cookies

We use cookies to improve website functionality and, where you consent, to collect analytics data. You can manage your cookie preferences through our Cookie Policy page, which includes a preferences manager. Essential cookies required for basic website operation cannot be disabled.

8. Your Rights

Under the PDPA, you have the right to:

• Access personal data we hold about you
• Rectify inaccurate personal data
• Request erasure of personal data we no longer have a legal basis to hold
• Restrict processing in certain circumstances
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with the Office of the Personal Data Protection Committee (PDPC Thailand)

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Third-Party Links

Our website may link to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

10. Children's Privacy

Our services are directed at business professionals aged 18 and above. We do not knowingly collect personal data from individuals under 18 years of age.

11. Policy Updates

We may update this policy from time to time. Where changes are material, we will notify users via a notice on our website. Continued use of our services after the effective date constitutes acceptance of the updated policy.

12. Contact

For privacy-related inquiries: