Privacy Policy

1. Introduction

Krung Code ("we", "us", "our") is committed to handling personal data with care. This policy explains what information we collect, how we use it, and the choices available to you. It applies to data collected through our website at krungcod.club, through our contact form, and in connection with the services we provide.

Our services — the Quarter Review, Bridging Integration, and Heritage Support Plan — involve working closely with clients and their teams. The data we collect is limited to what is necessary for this work. We do not collect more than we need, and we do not keep it longer than necessary.

For questions about this policy, contact us at [email protected].

2. Data We Collect

We collect personal data in the following ways:

• Contact form submissions: Name, email address, phone number (if provided), and message content.
• Service engagements: Business name, contact details of team members involved in reviews and integrations, and operational information relevant to workflow analysis.
• Website analytics: Anonymised data about website usage, collected via cookies with your consent (see Section 5).
• Email communications: Content of messages sent to and from our team during the course of an engagement.

Legal basis: We process personal data on the basis of your consent (where you have provided it), for the performance of a contract (where you have engaged our services), and where we have a legitimate interest in maintaining our business records.

Retention: Contact form data is retained for 12 months. Engagement-related records are retained for up to 3 years from the end of an engagement for legal and accounting purposes, then deleted.

3. How We Use Your Data

• Service delivery: To conduct reviews, build integrations, produce documentation, and maintain ongoing support arrangements.
• Communication: To respond to enquiries, send service-related updates, and share monthly summaries under the Heritage Support Plan.
• Analytics: To understand how our website is used and improve it. This is done using anonymised data only.
• Legal compliance: To meet obligations under Thai law and to maintain records as required.

We do not sell personal data. We do not share it with third parties for marketing purposes. We do not send unsolicited marketing communications.

4. Data Protection

We take reasonable steps to protect personal data against unauthorised access, loss, or disclosure. These include:

• Use of encrypted storage for client records
• Access controls limiting who within our team can view engagement data
• Secure transmission of data between our team and clients where applicable
• Regular review of who has access to what data

In the event of a data breach that is likely to affect your rights, we will notify you as soon as practicable and take steps to limit any harm.

5. Cookies

Our website uses cookies. Essential cookies are required for the site to function and cannot be disabled. Optional cookies — for analytics and preference management — are used only with your consent, which you can provide or withdraw via the cookie banner or our Cookie Policy page.

We use Google Analytics (anonymised) to understand site usage. No personal identifiers are included in analytics data.

6. Your Rights

Under Thai personal data protection law (PDPA, B.E. 2562), and where applicable under international frameworks, you have the following rights in relation to your personal data:

• Access: You may request a copy of the personal data we hold about you.
• Rectification: You may ask us to correct inaccurate or incomplete data.
• Erasure: You may ask us to delete your personal data, subject to any legal retention obligations.
• Restriction: You may ask us to limit how we process your data in certain circumstances.
• Portability: Where technically feasible, you may ask us to provide your data in a portable format.
• Objection: You may object to processing based on legitimate interests.
• Withdrawal of consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).

7. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies directly.

8. Children's Privacy

Our services are directed at business organisations and their adult representatives. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.

9. Policy Updates

We may update this policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Significant changes will be communicated to active clients via email. Continued use of our website or services after an update constitutes acceptance of the revised policy.

10. Contact

Data Controller: Krung Code

Address: 199 Yaowarat Road, Samphanthawong, Bangkok 10100, Thailand

Privacy Email: [email protected]