Privacy Policy

1. Overview

Naga Logic ("we", "us", "our") is an AI integration consultancy based in Bangkok, Thailand. We are committed to handling personal data responsibly and transparently. This Privacy Policy applies to all personal data we collect through our website at {{DOMAIN}}, through enquiry forms, by email, by telephone and in the course of providing our services.

We operate in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and give weight to the principles that underlie comparable international frameworks. If you have any questions about this policy, please see Section 13 for contact details.

2. Data Controller

The data controller for personal data collected through this website and in connection with our services is:

3. Data We Collect

Information you provide directly

When you contact us, fill in a form on our website or engage our services, we may collect:

• Your name and the name of your organisation
• Your email address and telephone number
• Your job title or role
• The content of messages you send us
• Service preferences and requirements you describe
• Billing and payment information where a commercial engagement begins

Information collected automatically

When you visit our website, our hosting infrastructure may record:

• Your IP address and approximate location derived from it
• Browser type and version
• Pages visited and time spent on each page
• Referring website address
• Date and time of your visit

We also use cookies and similar technologies. Please see Section 9 and our Cookie Policy for full details.

Information from third parties

We do not purchase or acquire personal data lists from third parties. On rare occasions a mutual contact may introduce us to you; in those cases we collect only what you choose to share in subsequent correspondence.

4. How We Use Your Data

We use personal data only for purposes that are fair and proportionate. The main purposes are:

• Responding to enquiries and providing information about our services
• Preparing and delivering consulting engagements under agreed contracts
• Sending relevant updates where you have asked to receive them
• Improving our website and understanding how visitors use it
• Keeping records as required by Thai law and accounting obligations
• Protecting the security and integrity of our systems

We do not use personal data for automated decision-making that produces significant effects on individuals, and we do not sell or rent your data to any third party.

5. Legal Basis for Processing

Under Thailand's PDPA, we rely on one or more of the following lawful bases when processing personal data:

• Consent — where you have freely given specific, informed and unambiguous agreement, for example by submitting our contact form or opting into communications.
• Contractual necessity — where processing is required to perform a service contract with you or to take steps at your request before entering one.
• Legal obligation — where processing is necessary to comply with Thai law, including tax and financial record-keeping requirements.
• Legitimate interests — where we have a genuine business interest that does not override your rights, such as improving our website security or analysing aggregate usage patterns.

6. Sharing Your Data

We share personal data only where necessary and with appropriate safeguards in place. Categories of recipients include:

• Service providers — hosting, email and analytics providers who process data on our behalf under data processing agreements.
• Professional advisers — lawyers and accountants bound by confidentiality obligations, where required for legal or financial compliance.
• Authorities — regulatory or law-enforcement bodies where required by Thai law or a valid legal order.

We do not transfer personal data outside Thailand except where the destination country provides an adequate level of protection or appropriate safeguards are in place, in accordance with the PDPA.

7. Data Retention

We keep personal data for as long as it remains necessary for the purpose for which it was collected, or as required by law. As a general guide:

• Enquiry and contact records: up to 2 years from last contact if no engagement began
• Client engagement records: up to 7 years from the end of the engagement, for accounting and legal purposes
• Website log data: up to 12 months
• Marketing communications consent records: until consent is withdrawn, plus a reasonable period thereafter

When data is no longer needed we delete or anonymise it in a secure manner.

8. Your Rights

Under Thailand's PDPA you have the following rights regarding your personal data:

• Right to be informed — to know how your data is collected and used.
• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to have inaccurate or incomplete data corrected.
• Right to erasure — to request deletion of your data in certain circumstances.
• Right to restrict processing — to ask us to pause use of your data while a concern is resolved.
• Right to data portability — to receive your data in a structured, commonly used format.
• Right to object — to object to processing based on legitimate interests.
• Right to withdraw consent — to withdraw consent at any time where processing is consent-based, without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@{{DOMAIN}}. We will respond within 30 days. We may need to verify your identity before acting on a request.

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) in Thailand.

9. Cookies

Our website uses cookies to remember your preferences and understand how visitors navigate the site. We group cookies into categories: strictly necessary, analytical and functional. You can manage your cookie preferences at any time. For full details of which cookies we use and how to control them, please read our Cookie Policy.

10. Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration or destruction. These include encrypted connections (HTTPS), access controls on systems that hold client data, and staff awareness of data handling responsibilities.

No method of transmission over the internet is completely secure. If you believe your data has been compromised in connection with our services, please contact us immediately so we can investigate and respond appropriately.

11. Children

Our website and services are directed at business professionals and organisations. We do not knowingly collect personal data from anyone under the age of 20. If you believe a minor has submitted personal data through our website, please contact us so we can arrange for it to be deleted.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal obligations. When we make material changes we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this policy, want to exercise your rights or have a concern about how we handle your data, please get in touch:

We aim to respond to all privacy enquiries within 30 days of receipt.