HaiDaiMai website privacy policy

What data do we collect?

There is no sign-up or login. We receive personal data only when:

• You send the contact, trial or demo form: your name, role, project or juristic person name, e-mail and/or phone, LINE ID (if you choose LINE) and any optional details you add (such as units, plan or a message). Please do not include ID card or financial details.
• The system adds the request type, page, language, time received, and the consent and policy versions you saw.
• You visit the site: server logs record the time, page, response status, browser details (such as browser type and referring page) and your IP address with its last part masked — we never log full IP addresses.
• You send the form: your IP address, e-mail and phone are used in transformed form (not stored as-is) to limit repeat requests and block spam.

Required fields are needed for us to reply; without them we cannot handle your request.

Why do we use it?

We use the data only to:

• reply, arrange a demo, send a quote or open a trial when you agree — steps you asked for before a contract (Personal Data Protection Act, Section 24(3)), or our legitimate interest in answering enquiries (Section 24(5))
• keep the site secure and block spam — our legitimate interest (Section 24(5))

Ticking the consent box confirms you want a reply to that request. We never use your data for marketing lists or automated messages, and never sell it.

Who receives your data?

Requests are not stored in a database. They are e-mailed to our sales mailbox, and these providers are involved:

• Amazon SES (Amazon Web Services) — sends the e-mail; Singapore
• DigitalOcean — server and server backup images; Singapore
• Cloudflare — DNS (site visits do not pass through it), e-mail forwarding for haidaimai.com addresses, and encrypted backups in Asia-Pacific
• Google (Gmail) — the mailbox we use to receive and answer requests, which may store data outside Thailand

These providers may process data outside Thailand, a transfer abroad under Section 28. Our infrastructure providers (Amazon Web Services, DigitalOcean and Cloudflare) have data processing agreements and security measures. We share only what is needed, and may disclose data when the law requires.

How long do we keep it?

• Database: requests are not stored.
• Sending queue: deleted about 1 hour after sending, or within 7 days if sending fails.
• Our mailbox: 12 months from our last contact, then deleted unless you become a customer (then kept under the service contract).
• Anti-spam values: deleted within 24 hours (IP) or about 1 day (e-mail, phone).
• Access logs (masked IPs): overwritten automatically when the files reach a set size.
• System backups: may contain data present at backup time, are used only to restore the system, and expire within 400 days.

Cookies and website analytics

This site uses no cookies, no third-party analytics, ads or tracking scripts, and loads no files from other websites.

If you pick a light or dark theme, your browser keeps one value named theme in local storage, on your device only; it is never sent to us. Language is part of the URL.

We see only aggregated search statistics from Google Search Console and Bing Webmaster Tools, which need no code on this site. We will update this policy before adding any analytics.

Your rights as a data subject

Under the Personal Data Protection Act B.E. 2562 (2019), subject to its conditions, you may:

• access and get a copy of your data
• have it corrected
• have it deleted or destroyed
• object to its collection, use or disclosure
• restrict its use
• receive it, or have it transferred, in a machine-readable format
• withdraw consent at any time, without affecting earlier use
• complain to the Office of the Personal Data Protection Committee at complaint.pdpc.or.th

Send requests through the channels below. We may verify your identity and will reply within 30 days of receipt, with reasons if we refuse.

On deletion, we delete your request e-mails from our mailbox; queue and backup copies expire on the cycles above.

Contact us about personal data

Contact the data controller, Mr. Phornthep Aumphet (HaiDaiMai):

Messages sent on LINE also pass through LINE’s service under LINE’s own privacy policy.