Privacy Policy

1. Introduction

Kanya Digital ("we", "our", "us") is committed to handling personal data with care and transparency. This Privacy Policy describes what personal information we collect, how we use it, and the choices available to you.

This policy applies to information collected through our website at kanyadig.club, our contact forms, and any direct communication with our team. By using our website or contacting us, you confirm that you have read and understood this policy.

We operate under the Thailand Personal Data Protection Act B.E. 2562 (PDPA), which came into full effect on 1 June 2022. We also apply principles consistent with international data protection standards where relevant.

Questions about this policy may be directed to [email protected].

2. Data We Collect

Information you provide directly

• Full name
• Email address
• Phone number (if provided)
• Message content submitted through our contact form
• Business or organisation name (if mentioned)

Information collected automatically

• IP address and approximate geographic location
• Browser type and version
• Pages visited and time spent on the site
• Referring website or source
• Cookie data (where consent has been given — see Section 5)

Legal basis for processing

We process personal data on the following legal bases under PDPA Article 24:

• Consent — when you submit a form or accept cookies
• Contractual necessity — when processing is needed to respond to your enquiry or deliver a service
• Legitimate interests — for basic website analytics and security monitoring

Retention periods

• Contact form data: retained for up to 24 months from last interaction
• Analytics data: retained for up to 14 months
• Cookie consent records: retained for 12 months from the date of consent

3. How We Use Data

We use the personal data we collect for the following purposes:

• To respond to your enquiry and maintain communication throughout a project or assessment
• To provide our AI integration services (Health Review, Observed Integration, Watch Service)
• To send service-related updates, such as project progress or scheduled maintenance reports
• To improve the quality and performance of our website
• To meet legal obligations, including PDPA compliance requirements

Marketing communications

We do not send unsolicited marketing emails. If you have expressed interest in a service, we may follow up once regarding your enquiry. You may opt out at any time by replying to any of our emails or contacting us at [email protected].

Third-party data sharing

We do not sell or trade your personal data. We may share data with:

• Email and communication service providers (for sending replies)
• Analytics platforms (where consent has been given)
• Legal and regulatory authorities, if required by law

4. Data Protection Measures

We take reasonable and appropriate measures to protect personal data from unauthorised access, alteration, disclosure, or destruction. These include:

• HTTPS encryption across all pages of this website
• Access controls limiting who within our team can view submitted data
• Secure handling of data in transit and at rest
• Regular internal review of data handling processes

In the event of a data breach that poses a risk to your rights, we will notify you and the relevant supervisory authority within the timeframes required by the PDPA.

5. Cookies

We use cookies to operate essential site functions and, where consent is given, to understand how visitors use our website. Cookies are small text files stored in your browser.

• Essential cookies — required for basic site function; always active
• Analytics cookies — help us understand site usage; active only with your consent
• Preference cookies — remember your choices; active only with your consent
• Marketing cookies — support advertising platforms; active only with your consent

You can manage your cookie preferences at any time on our Cookie Policy page.

6. Your Rights

Under the PDPA, you have the following rights regarding your personal data:

• Right to access — you may request a copy of the personal data we hold about you
• Right to rectification — you may request correction of inaccurate data
• Right to erasure — you may request deletion of your data, subject to legal retention requirements
• Right to data portability — you may request your data in a structured, machine-readable format
• Right to object — you may object to certain types of processing, such as analytics
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior processing
• Right to lodge a complaint — you may contact Thailand's Personal Data Protection Committee (PDPC) if you believe your rights have been violated

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

7. Third-Party Links

Our website may include links to external websites or services. These links are provided for your convenience. We are not responsible for the privacy practices of any third-party site and encourage you to review their privacy policies before sharing any personal information.

8. Children's Privacy

Our services are intended for business use and are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has submitted data through our website, we will delete it promptly. If you believe a minor has provided us with their information, please contact us.

9. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our services or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page. Continued use of our website following any update constitutes acceptance of the revised policy.

We recommend reviewing this page periodically. For significant changes, we will make reasonable efforts to notify active contacts by email.

10. Contact Us

Kanya Digital is the data controller for personal data collected through this website. For privacy-related enquiries, to exercise your rights, or for any questions about this policy: