Privacy Policy — Andaman AI

Andaman AI Co., Ltd. ("we", "our", "us") takes the handling of personal information seriously. This Privacy Policy explains how we collect, use, protect, and share data relating to visitors to our website and clients who engage our services. By using our website or enquiring about our services, you indicate your acceptance of the practices described here.

1. Data We Collect

Information you provide

When you use our contact form or communicate with us directly, we may collect your name, email address, telephone number, and any other information you choose to include in your message.

Information collected automatically

We use cookies and similar technologies to collect basic usage data — pages visited, time on site, and general geographic location. This data does not identify you personally. See our Cookie Policy for more detail.

Client project data

In the course of delivering AI integration services, we may handle business data you provide for the purpose of setup and testing. This data is used solely for the agreed project scope and is not retained beyond project completion unless otherwise agreed in writing.

2. Legal Basis for Processing

We process personal data on the following bases under Thailand's Personal Data Protection Act B.E. 2562 (PDPA 2019):

Consent — for marketing communications and analytics cookies, where you have agreed
Contractual necessity — to deliver the services you have engaged us for
Legitimate interest — to respond to enquiries and improve our website
Legal obligation — where processing is required by applicable Thai law

3. How We Use Your Data

To respond to enquiries sent through our contact form
To deliver and manage the AI integration services you have requested
To send you relevant updates about your project or our services, where you have agreed to receive them
To understand how our website is being used and where it can be improved
To comply with applicable legal obligations

We do not use your personal data for automated decision-making that has a legal or similarly significant effect on you.

4. Data Sharing

We do not sell personal data. We share data with third parties only where necessary:

Analytics providers — to understand website usage (data is anonymised where possible)
Service providers — where required to deliver a contracted service, under data processing agreements
Legal authorities — where required by Thai law or a lawful order

Any third parties we engage are required to handle data in a manner consistent with this policy.

5. Data Retention

We retain personal data only as long as necessary for the purpose for which it was collected:

Enquiry data: up to 24 months from the date of enquiry, unless a service agreement is entered
Client project data: for the duration of the project, then deleted within 30 days of completion unless retained by written agreement
Analytics data: up to 26 months, consistent with our analytics provider's standard retention

6. Data Protection Measures

We take reasonable steps to protect personal data from unauthorised access, disclosure, or loss. These steps include:

Use of encrypted connections (HTTPS) for all website traffic
Limiting access to personal data to team members who need it to perform their work
Secure handling and disposal of data when no longer needed
Prompt notification to affected individuals if a data breach occurs that creates a risk to their rights or interests

7. Cookies

We use essential cookies for basic site functionality and optional analytics cookies to understand how our site is used. You can manage your cookie preferences at any time through our Cookie Policy page.

8. Your Rights

Under Thailand's PDPA, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data, where no lawful basis for retention exists
Object to or restrict processing in certain circumstances
Withdraw consent at any time, where processing is based on consent
Lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand

To exercise any of these rights, contact us at privacy@{{DOMAIN}}. We will respond within 30 days.

9. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to read their policies separately.

10. Children's Privacy

Our services are directed at business operators and are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that data from a minor has been submitted, we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with a revised "Last updated" date. Continued use of our website following a change constitutes acceptance of the updated policy.

12. Contact

For any questions about this Privacy Policy or how we handle your data, please contact:

Andaman AI Co., Ltd.
73 Thaweewong Road, Patong, Phuket 83150, Thailand
Email: privacy@{{DOMAIN}}
Phone: +66 76 295 7138