Privacy Policy

Introduction

Cortiqo ("we," "our," or "us") is committed to protecting the privacy and security of personal data entrusted to us by clients, website visitors, and business contacts. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information in accordance with Thailand's Personal Data Protection Act (PDPA) and applicable data protection regulations.

By using our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy. If you have questions or concerns about our data practices, please contact us at [email protected].

Information We Collect

Personal Information Provided Directly

We collect information that you voluntarily provide when contacting us, requesting services, or engaging in business communications:

• Full name and professional title
• Business email address and phone number
• Company name and business address
• Project requirements and business needs described in inquiries
• Communication preferences and correspondence history

Automatically Collected Information

When you visit our website, we automatically collect certain technical information:

• IP address and approximate geographic location
• Browser type, version, and operating system
• Pages viewed, time spent, and navigation patterns
• Referring website and search terms used to find us
• Device identifiers and connection information

How We Use Your Information

We process personal data for specific, legitimate business purposes under applicable legal bases:

Service Delivery (Contractual Basis)

• Responding to service inquiries and providing project quotations
• Delivering consulting services and technical implementations
• Managing project communications and documentation
• Processing invoices and maintaining financial records

Legitimate Business Interests

• Improving our website functionality and user experience
• Analyzing service usage patterns to enhance offerings
• Conducting internal quality assessments and process improvements
• Maintaining security and preventing fraudulent activities

With Your Consent

• Sending occasional updates about our services (you may opt out at any time)
• Using analytics cookies to understand website performance
• Sharing anonymized case studies with your explicit approval

Data Sharing and Disclosure

We do not sell, rent, or trade personal information. We may share data in limited circumstances:

Service Providers

We engage third-party service providers who assist with business operations, including cloud hosting providers, email communication platforms, and analytics services. These providers are contractually obligated to protect data and use it only for specified purposes.

Legal Requirements

We may disclose information when required by Thai law, legal process, or governmental request, or when necessary to protect our legal rights, prevent fraud, or ensure safety.

Business Transfers

In the event of a merger, acquisition, or sale of business assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

Data Security Measures

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction:

• Encryption of data in transit using TLS/SSL protocols
• Secure storage with access controls and authentication requirements
• Regular security assessments and vulnerability testing
• Employee training on data protection and confidentiality obligations
• Incident response procedures for potential data breaches

Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law:

• Active client records: Duration of business relationship plus 7 years for financial records
• Inquiry and communication records: 3 years from last contact
• Website analytics data: 26 months
• Marketing consent records: Until consent is withdrawn

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance functionality and analyze usage. We use the following types:

• Essential Cookies: Required for basic website functionality and security
• Analytics Cookies: Help us understand how visitors use our site (with your consent)
• Preference Cookies: Remember your settings and choices

You can manage cookie preferences through our Cookie Policy page or your browser settings. Note that disabling certain cookies may affect website functionality.

Your Rights Under Thai PDPA

As a data subject under Thailand's Personal Data Protection Act, you have the following rights:

• Right to Access: Request confirmation of what personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your data under certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw previously given consent at any time
• Right to Restrict Processing: Request limitation of processing in specific situations
• Right to Lodge a Complaint: File a complaint with the Personal Data Protection Committee

To exercise any of these rights, contact us at [email protected]. We will respond to your request within 30 days, as required by Thai law.

Third-Party Links

Our website may contain links to external sites operated by third parties. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our services are directed to businesses and professionals. We do not knowingly collect personal information from individuals under 18 years of age. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or business operations. Significant changes will be communicated through our website with an updated "Last Updated" date. Continued use of our services after such changes constitutes acceptance of the revised policy.

Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact: