Who We Are and What This Policy Covers

Desktop Digital Connect operates from our offices in Hat Yai, providing AI-powered financial risk assessment services to businesses across Thailand. We've built our reputation on trust, and that means being completely transparent about how we handle your personal information.

This policy explains exactly what data we collect, why we need it, how we protect it, and what rights you have regarding your personal information. We've written this in plain language because we believe you shouldn't need a law degree to understand what happens to your data.

Information We Collect

We collect different types of information depending on how you interact with us. Here's the complete breakdown:

How We Use Your Information

We use your information for specific, legitimate business purposes. We don't sell your personal data to third parties, and we don't use it for purposes beyond what's necessary to provide our services.

Data Protection and Security

Protecting your data isn't just a legal requirement for us—it's fundamental to our business. We've implemented comprehensive security measures because we understand that your trust depends on it.

• Encryption: All data is encrypted both in transit and at rest using industry-standard protocols
• Access Controls: Strict employee access controls with regular reviews and updates
• Regular Security Audits: Quarterly security assessments and vulnerability testing
• Secure Hosting: Data centers with physical security, backup systems, and disaster recovery plans
• Employee Training: Regular privacy and security training for all staff members

While we implement strong security measures, no system is completely foolproof. If we ever experience a data breach that affects your personal information, we'll notify you within 72 hours and provide clear information about what happened and what steps we're taking.

Your Rights and How to Exercise Them

Under Thailand's Personal Data Protection Act (PDPA) and international privacy standards, you have significant rights regarding your personal data. Here's what you can do and how to do it:

To exercise any of these rights, simply email us at info@desktopdigitalconnect.com with your request. We'll respond within 30 days and won't charge you unless your request is clearly excessive or repetitive.

Data Sharing and Third Parties

We believe in transparency about who has access to your data. Here are the only circumstances where we share personal information:

• Service Providers: Carefully vetted partners who help us deliver services (all under strict data processing agreements)
• Legal Requirements: When required by Thai law or valid legal processes
• Business Protection: To protect our rights, property, or safety (or that of our clients)
• With Your Consent: Any other sharing only happens with your explicit permission

We never sell, rent, or trade your personal information to third parties for their marketing purposes. When we work with service providers, they're contractually bound to protect your data and use it only for the specific services they provide to us.

Data Retention and Deletion

We don't keep your personal data longer than necessary. Our retention periods depend on the type of information and why we collected it:

• Client Service Data: Retained for the duration of our business relationship plus 7 years for legal and tax purposes
• Marketing Communications: Until you unsubscribe or request deletion
• Website Analytics: Anonymized after 26 months
• Support Communications: 3 years after the last interaction

When we delete your data, we ensure it's completely removed from our systems, including backups, unless we're legally required to retain certain information.

International Data Transfers

While our primary operations are in Thailand, some of our service providers may process data internationally. When this happens, we ensure adequate protection through:

• Standard contractual clauses approved by privacy authorities
• Adequacy decisions recognizing equivalent protection standards
• Certification schemes and binding corporate rules where applicable

We only transfer data internationally when necessary for service delivery, and we always ensure the receiving party provides adequate protection for your personal information.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve your experience and help us understand how our site is used. You can control cookie settings through your browser, though some functionality may be limited if you disable certain cookies.

Changes to This Policy

We review this privacy policy regularly and update it as needed to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you by email (if we have your email address) and post the updated policy on our website with a new "last updated" date.

We encourage you to review this policy periodically, especially before sharing new personal information with us. Your continued use of our services after policy changes indicates your acceptance of the updated terms.