At ExcelOnward, we take your privacy seriously because we know trust
matters. This document outlines how we collect, use, and protect your
personal data when you work with us or visit our website.
We operate in Thailand and comply with applicable data protection
laws, including the Personal Data Protection Act (PDPA). But beyond
legal requirements, we're committed to being transparent about what
happens with your information.
Information We Collect
When you reach out to us or engage our services, we collect certain
information. Here's what that typically includes and why we need
it.
Information You Provide
Directly
- Contact details like your name, email address, phone number, and
business address
- Project specifications and creative briefs when you inquire about
our multimedia services
- Payment information for invoicing purposes
- Communications you send us through email, contact forms, or phone
calls
- Feedback and testimonials if you choose to share them
Information Collected
Automatically
When you visit our website, we collect some technical
information:
- IP address and general location data
- Browser type and device information
- Pages you visit and how long you spend on them
- Referring websites and search terms
We don't use intrusive tracking methods. Basic website analytics
help us understand what content is useful and where we can improve
the user experience.
How We Use Your Information
We're not in the business of selling data or sending endless
marketing emails. Your information serves specific purposes related to
our work together.
Service Delivery
To complete multimedia projects, communicate about deliverables,
and ensure we meet your expectations
Communication
To respond to inquiries, provide project updates, and share
relevant information about our services
Business Operations
To process payments, maintain records, and fulfill contractual
obligations
Website Improvement
To understand how visitors use our site and make it more helpful
Legal Compliance
To meet regulatory requirements and protect our legitimate
business interests
We won't use your information for purposes you haven't agreed to. If
something changes, we'll let you know.
Data Sharing and Third Parties
We keep your information in-house as much as possible. However, some
situations require sharing with trusted partners.
When We Share Your Data
- Service Providers:
Payment processors, hosting services, and cloud storage platforms
that help us run our business
- Legal Obligations:
When required by Thai law or to respond to valid legal requests
- Business Transfers: In
the event of a merger or acquisition, though we'd notify you
first
- With Your Consent:
When you've explicitly approved sharing for a specific purpose
We don't sell personal data to advertisers or data brokers. That's
not our business model, and frankly, it never will be.
Any third parties we work with are carefully vetted and
contractually required to protect your information with the same care
we do.
Your Rights and Choices
Your data belongs to you. Under Thailand's PDPA and our commitment
to transparency, you have several rights regarding your personal
information.
Access Your Data
Request a copy of the personal information we hold about you.
We'll provide it in a readable format within 30 days.
Correction Rights
If something's wrong or outdated, let us know. We'll update your
information promptly.
Data Portability
Request your data in a format that lets you transfer it to
another service provider if needed.
Deletion Requests
Ask us to delete your personal information, subject to legal
retention requirements.
Processing Restrictions
Limit how we use your data in certain circumstances while
maintaining essential records.
Objection Rights
Object to processing based on legitimate interests or withdraw
consent for specific uses.
To exercise any of these rights, contact us using the details at the
end of this policy. We'll respond within 30 days and won't charge a fee
unless your request is excessive or repetitive.
Data Security Measures
Protecting your information isn't just about compliance. It's about
maintaining the trust you place in us when sharing sensitive project
details or business information.
Technical Safeguards
- Encrypted data transmission using industry-standard SSL/TLS
protocols
- Secure cloud storage with access controls and authentication
- Regular security updates and system monitoring
- Firewall protection and intrusion detection systems
Organizational Practices
- Limited access to personal data on a need-to-know basis
- Employee training on data protection practices
- Confidentiality agreements with team members and contractors
- Regular review of security policies and procedures
No system is completely bulletproof, and we can't guarantee absolute
security. But we take reasonable steps to protect against unauthorized
access, disclosure, or loss of your information.
Data Retention
We don't keep information longer than necessary. Retention periods
depend on the type of data and why we collected it.
General Guidelines
- Client Project Data:
Retained for the duration of our engagement plus 3 years for
reference and potential follow-up work
- Financial Records:
Kept for 7 years to comply with Thai accounting and tax
regulations
- Marketing
Communications: Maintained until you unsubscribe or request
deletion
- Website Analytics:
Aggregated and anonymized after 26 months
When retention periods expire, we securely delete or anonymize your
data so it can't be traced back to you.
International Data Transfers
Most of our operations are based in Thailand, but some service
providers may process data outside the country. When this happens, we
ensure appropriate safeguards are in place.
Cloud hosting and email services sometimes involve servers in other
jurisdictions. We work with providers that maintain strong security
standards and comply with international data protection frameworks.
If you're concerned about where your data is stored or processed,
reach out. We're happy to discuss the specifics of your situation.
Cookies and Tracking
Technologies
Our website uses minimal tracking. We're more interested in creating
great content than following you around the internet.
What We Use
- Essential cookies that make the website function properly
- Analytics cookies to understand which pages are visited most
often
- Session cookies that remember your preferences during a
visit
We don't use advertising cookies or share browsing data with
third-party marketing platforms. You can disable cookies through your
browser settings, though some website features might not work as
smoothly.
Children's Privacy
Our services aren't directed at children under 13. We don't
knowingly collect personal information from kids, and if we discover
we've received such data, we'll delete it promptly.
If you're a parent or guardian who believes your child has provided
us with personal information, please contact us immediately.
Changes to This Policy
Privacy practices evolve, and we may update this policy
occasionally. When we make significant changes, we'll notify you
through email or a prominent notice on our website.
The "Last Updated" date at the top tells you when the most recent
version was published. Continued use of our services after changes take
effect means you accept the updated terms.
We won't reduce your rights under this policy without your explicit
consent.
