DOCUMENT

Privacy Policy

Effective Date / Last Revised: August 28, 2026

1. Introduction & Data Controller

Console Vertex Point Co., Ltd. (“we,” “our,” or “us”), registered at Office 7, 76 Placeholder Road, Phuket 00000, Thailand, acts as the Data Controller for personal data collected through our corporate website (https://consolevertexpoint.digital) and direct client communications.

We are committed to maintaining the highest standards of data privacy, in full compliance with the Thailand Personal Data Protection Act B.E. 2562 (2019) (PDPA) and internationally recognized data protection principles (including GDPR where applicable).


2. Categories of Information We Collect

A. Information You Provide Voluntarily

  • Contact & Consultation Data: When you submit a diagnostic inquiry or contact form on our website, we collect your full name, business email address, organization name, application platform type, estimated monthly active journey volume, and your specific technical project description.
  • Contractual & Invoicing Data: Billing contact names, corporate tax identification numbers, physical registered address, and bank routing details necessary for engagement execution.

B. Analytical Telemetry in Client Engagements (Data Processor Capacity)

During active diagnostic sprints, clients may grant us access to application event streams or data warehouse tables. We mandate that clients provide only pseudonymized, non-PII records (e.g., hashed user IDs, event names, timestamp sequences, device attributes). We act strictly as a Data Processor for such telemetry and process it exclusively for the agreed analytical objectives.

C. Automatically Collected Technical Data

When you browse our public website, our web servers collect standard, non-identifying server logs (IP address, browser type, referring URL, pages visited, and access timestamps).


3. Lawful Basis & Purposes for Data Processing

We process personal data based on the following legal grounds under Thai PDPA:

  1. Performance of a Contract: Fulfilling diagnostic scopes of work, delivering forensic reports, and scheduling technical walkthroughs.
  2. Legitimate Interests: Responding to business inquiries, securing our digital infrastructure against malicious requests, and improving our analytical methodologies.
  3. Legal Compliance: Retaining financial and tax documentation required under Thai statutory accounting laws.
  4. Consent: Utilizing non-essential cookies where you have explicitly opted in via our Cookie Consent banner.

4. Data Retention Periods

  • Inquiry & Form Submissions: Retained for twelve (12) months following the conclusion of initial communications, after which records are permanently deleted.
  • Client Engagement Artifacts & Telemetry: Raw client event logs ingested during diagnostic audits are securely erased within thirty (30) business days following final milestone sign-off.
  • Statutory Accounting Records: Retained for seven (7) years in compliance with Thai corporate taxation laws.

5. International Data Transfers

As our diagnostic center operates in Phuket, Thailand while serving global software companies, data provided by international clients may be processed in Thailand. We ensure that all international transfers adhere to adequate security safeguards, including encrypted transport protocols (TLS 1.3), access controls, and contractual data protection agreements.


6. Your Rights Under Thai PDPA & GDPR

As a data subject, you possess the following statutory rights regarding your personal information:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete records.
  • Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data where retention is no longer legally required.
  • Right to Restrict or Object to Processing: Object to specific processing activities based on legitimate interests.
  • Right to Data Portability: Request transmission of your data in a structured, machine-readable format.
  • Right to Withdraw Consent: Withdraw consent previously granted for optional cookie tracking at any time.

To exercise any of these rights, contact our Data Privacy Officer at hello@consolevertexpoint.digital.


7. Data Protection Office Contact

Data Privacy Officer
Console Vertex Point Co., Ltd.
Office 7, 76 Placeholder Road, Phuket 00000, Thailand
Telephone: +66 76 000 307
Email: hello@consolevertexpoint.digital