Privacy Policy

1. Introduction

quiillixxxes is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, and protect information when you use our AI integration services or visit our website. We process personal data in accordance with Thailand's Personal Data Protection Act (PDPA) and applicable data protection regulations.

This policy applies to all individuals who interact with quiillixxxes, including prospective clients, current clients, website visitors, and business contacts. By using our services or providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy.

For questions about this policy or our data practices, please contact us at privacy@quiillixxxes.

2. Data Controller

The data controller responsible for your personal information is:

quiillixxxes
73 Charoen Krung Soi 36
Bang Rak, Bangkok 10500
Thailand
Email: privacy@quiillixxxes
Phone: +66 2-874-6213

3. Information We Collect

We collect and process the following categories of personal data:

3.1 Information You Provide Directly

• Contact information (name, email address, phone number, business address)
• Company information (organization name, position, department)
• Communication content (messages, inquiries, feedback)
• Service-related information (project requirements, business objectives, data samples for analysis)
• Account credentials (if you create a client portal account)

3.2 Information Collected Automatically

• Website usage data (pages visited, time spent, navigation paths)
• Technical information (IP address, browser type, device information, operating system)
• Cookies and similar tracking technologies (see our Cookie Policy for details)
• Referral source (how you found our website)

3.3 Information from Third Parties

• Business contact information from professional networks
• Information from analytics providers
• Data from marketing platforms (with your consent)

4. How We Use Your Information

We process personal data for the following purposes, based on specific legal grounds:

4.1 Service Delivery (Contractual Necessity)

• Providing AI integration services (customer insight mining, document intelligence, enterprise maturity programs)
• Communicating about projects and deliverables
• Managing client relationships and accounts
• Processing payments and maintaining financial records

4.2 Business Operations (Legitimate Interest)

• Responding to inquiries and consultation requests
• Improving our services and methodologies
• Website analytics and performance optimization
• Internal business administration

4.3 Marketing Communications (Consent)

• Sending newsletters and service updates (with opt-in consent)
• Providing information about new services or capabilities
• Invitations to events or webinars

4.4 Legal Compliance (Legal Obligation)

• Complying with Thailand PDPA and other applicable laws
• Responding to legal requests from authorities
• Maintaining records for tax and accounting purposes
• Protecting legal rights and preventing fraud

5. Data Sharing and Disclosure

We do not sell personal data. We may share your information with:

• Service Providers: Cloud hosting, email services, analytics tools (bound by confidentiality agreements)
• Professional Advisors: Legal, accounting, and consulting services (when necessary)
• Business Partners: Technology vendors for service integration (with your consent)
• Legal Authorities: When required by law or to protect legal rights

All third parties are required to maintain appropriate security measures and use data only for specified purposes.

6. Data Security

We implement comprehensive security measures to protect personal data:

• Encryption: Data encrypted at rest and in transit using industry-standard protocols
• Access Controls: Role-based access following principle of least privilege
• Authentication: Multi-factor authentication for system access
• Monitoring: Continuous security monitoring and logging
• Training: Regular security awareness training for all team members
• Audits: Periodic security assessments and penetration testing
• Incident Response: Documented procedures for data breach notification

While we maintain high security standards, no system is completely secure. We cannot guarantee absolute security but commit to promptly addressing any identified vulnerabilities.

7. Data Retention

We retain personal data for specific periods based on purpose:

• Client Project Data: Duration of engagement plus 3 years (or as required by contract)
• Financial Records: 7 years (Thailand tax law requirement)
• Marketing Communications: Until consent is withdrawn or 2 years of inactivity
• Website Analytics: 24 months maximum
• Inquiry Data: 1 year from last contact

Data is securely deleted or anonymized when no longer needed for legitimate purposes.

8. Your Privacy Rights

Under Thailand PDPA, you have the following rights:

• Right to Access: Request copies of your personal data we hold
• Right to Rectification: Correct inaccurate or incomplete information
• Right to Erasure: Request deletion of your data (subject to legal retention requirements)
• Right to Data Portability: Receive your data in structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing communications at any time
• Right to Restrict Processing: Request temporary limitation of data processing
• Right to Lodge Complaint: File complaint with Thailand Personal Data Protection Committee

To exercise these rights, contact us at privacy@quiillixxxes. We will respond to requests within 30 days.

9. Cookies and Tracking

Our website uses cookies and similar technologies to enhance functionality and analyze usage. We use:

• Essential Cookies: Required for website operation (always active)
• Analytics Cookies: Understand site usage patterns (with consent)
• Marketing Cookies: Track advertising effectiveness (with consent)

For detailed information, please review our Cookie Policy. You can manage cookie preferences through your browser settings or our cookie management tool.

10. Third-Party Links

Our website may contain links to external sites. We are not responsible for privacy practices of third-party websites. We recommend reviewing their privacy policies before providing personal information.

11. Children's Privacy

Our services are intended for businesses and individuals aged 18 and over. We do not knowingly collect data from children under 18. If we become aware of such collection, we will delete the information promptly.

12. International Data Transfers

Your data is primarily stored and processed in Thailand. If we transfer data internationally, we ensure adequate protection through:

• Standard contractual clauses approved by Thai authorities
• Transfers to countries with adequate data protection frameworks
• Your explicit consent for specific transfers

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Significant changes will be communicated through:

• Prominent notice on our website
• Email notification to clients
• Updated "Last Modified" date at the top of this policy

Continued use of our services after changes indicates acceptance of the updated policy.

14. Contact Information

For privacy-related questions, data access requests, or to exercise your rights, contact:

Privacy Officer
quiillixxxes
Email: privacy@quiillixxxes
Phone: +66 2-874-6213
Address: 73 Charoen Krung Soi 36, Bang Rak, Bangkok 10500, Thailand

If you are not satisfied with our response, you have the right to lodge a complaint with the Thailand Personal Data Protection Committee.