Privacy Policy

1. Personal data we collect

Craft Web Co., Ltd. ("we" or "the company") collects your personal data when you use our services, as follows:

• Data you give us directly: Name, surname, email, phone number, company name and anything you enter in our contact or enquiry forms.
• Website usage data: IP address, browser type, pages visited, time spent on the site and cookie data.
• Communication records: Chat history, emails and messages you send us.

2. How we use your data

We use your personal data for the following purposes:

• Providing the web design and development services you asked for
• Communicating about your project, quotations and service delivery
• Improving the quality of our services
• Sending news, promotions and marketing content, where you have consented
• Analysing site usage to improve the experience
• Meeting our legal obligations

3. Sharing data with third parties

We may disclose your personal data to third parties in the following cases:

• Service providers: Companies providing web hosting, email, analytics and marketing tools, such as Google Analytics.
• Government authorities: Where required by law or by court order.
• Business partners: Where coordination is needed to deliver your service, such as developers and designers.

We do not sell, rent or trade your personal data to third parties for marketing purposes without your consent.

4. Your rights as a data subject

Under the Personal Data Protection Act B.E. 2562 you have the following rights:

• Right of access: Request access to and a copy of the personal data we hold about you.
• Right to rectification: Ask us to correct data that is inaccurate or incomplete.
• Right to erasure: Ask us to delete your personal data in certain cases.
• Right to restrict processing: Ask us to pause the use of your data temporarily.
• Right to object: Object to the processing of your data in certain cases.

5. How we keep data secure

We apply appropriate technical and organisational measures to protect your personal data, including:

• Encryption in transit with SSL/TLS (HTTPS)
• Access limited to authorised staff only
• Backups and system recovery procedures
• Regular security updates
• Staff training on personal data protection

6. Cookies and tracking technology

Our website uses cookies and similar technology to:

• Remember your settings and preferences
• Analyse site usage through Google Analytics
• Improve the browsing experience
• Show relevant advertising

You can set your browser to refuse cookies, though some parts of the site may then not work as intended.

7. How long we keep data

We keep your personal data for as long as needed for the stated purposes, or as required by law.

• Customer data: for the duration of the service and five years after the project ends
• Communication records: two years, or until you ask us to delete them
• Analytics data: 26 months, following the Google Analytics policy
• Accounting records: seven years, as required by tax law

8. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our services or in the law.

Continuing to use the website after a change means you accept the updated policy.

9. Contact us

If you have questions, concerns, or wish to exercise any of your rights over your personal data, please contact us at: