Northkite Get in Touch
Legal

Privacy Policy

Last Updated: 12 May 2025  ·  Effective: 12 May 2025

Northkite ("we", "us", "our") is committed to handling your personal data responsibly and in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA). This policy describes how we collect, use, and protect information provided to us through our website and through our client engagements.

1. Data Controller

The data controller for your personal information is:

2. Data We Collect

Information you provide directly

Information collected automatically

3. Legal Basis for Processing

We process your personal data on the following legal bases:

4. How We Use Your Data

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

5. Data Sharing

Your personal data may be shared with the following categories of parties only where necessary:

All third-party processors are required to handle your data in accordance with applicable data protection laws.

6. Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected:

7. Data Protection Measures

We maintain appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, disclosure, or destruction. These include:

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant Thai supervisory authority within 72 hours of becoming aware of it, and will notify you directly where required.

8. Cookies

Our website uses cookies to support basic functionality and to understand how visitors use the site. For full details, please see our Cookie Policy. You can manage your cookie preferences at any time through the cookie settings on our site.

9. Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you have the following rights:

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. If you believe your rights have not been respected, you have the right to lodge a complaint with the Personal Data Protection Committee of Thailand.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and we recommend reviewing their privacy policies separately.

11. Children

Our services are intended for businesses and individuals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have done so, we will delete that data promptly.

12. International Transfers

Our primary operations are based in Thailand. If personal data is transferred outside Thailand (for example, to cloud service providers), we ensure that appropriate safeguards are in place in accordance with the PDPA's requirements for international data transfers.

13. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. The updated version will be posted on this page with a revised date. We encourage you to review this policy periodically. Continued use of our website or services after changes are posted constitutes acceptance of the updated policy.

14. Contact

For questions about this policy or to exercise your data rights, please contact: