Privacy Policy

1. Information We Collect

When you submit our contact form, we collect:

• Name
• Email address
• Company (optional)
• Message content

We also automatically collect:

• IP address
• Browser type and device information
• Pages visited, time spent, referring URL
• Server logs (kept for 90 days)

2. How We Use Your Information

• Respond to your inquiries and provide requested services
• Communicate about our products and services
• Improve the website and our services
• Detect and prevent abuse, spam, and fraud
• Comply with legal obligations

3. Legal Basis for Processing

We process your personal data based on:

• Your consent — when you voluntarily submit the contact form
• Legitimate business interests — to operate and improve our services
• Legal obligations — to comply with applicable laws (PDPA, etc.)

4. Third-Party Service Providers

We share information with the following services to operate our website:

• Resend (email delivery, USA) — processes your email address and message to deliver replies. Resend Privacy Policy
• Google reCAPTCHA — protects the contact form from spam. Google may collect technical data per its Privacy Policy.
• Google Firebase / Cloud (hosting) — server logs may include IP addresses and request metadata. Firebase Privacy

5. International Data Transfer

Some of our service providers (Resend, Google) operate servers outside Thailand, including the United States and other regions. We ensure adequate protection through standard contractual safeguards and the providers' own compliance frameworks (SOC 2, GDPR-aligned terms, etc.).

6. Data Retention

• Contact form submissions: retained for 2 years from your last contact, unless required longer for legal/contractual reasons
• Server logs: 90 days
• Email correspondence: retained as part of normal business records

7. Your Rights (PDPA & GDPR)

Under Thailand's Personal Data Protection Act (PDPA) Section 30, and GDPR where applicable, you have the right to:

• Access your personal data we hold
• Correct inaccurate or incomplete data
• Request deletion ("right to be forgotten")
• Restrict or object to processing
• Receive your data in a portable format
• Withdraw consent at any time (without affecting prior lawful processing)
• Lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand

To exercise any of these rights, email us at support@moadigital.co. We will respond within 30 days.

8. Security

We implement reasonable technical and organizational measures to protect your data:

• HTTPS encryption for all data in transit
• Encrypted storage at rest with our service providers
• Access control with least-privilege principles
• Secret management via Google Cloud Secret Manager
• Regular security reviews and dependency updates

9. Cookies

Our website uses cookies for essential functionality, security, and bot detection (Google reCAPTCHA). We do not currently use marketing or analytics cookies. You can manage your cookie preferences at any time via the "Cookie Settings" link in the footer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. Continued use of the website constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions or to exercise your rights, contact: