Privacy Policy

1. Introduction

cortivexds ("we", "us", "our") is committed to protecting the personal information of individuals who interact with our services. This Privacy Policy describes how we collect, use, store, and protect personal data in connection with our AI integration consulting and training services, delivered from our offices at 31 Ratchadamri Road, Lumpini, Pathum Wan, Bangkok 10330, Thailand.

This policy applies to information collected through our website and through the conduct of our professional engagements. For questions about this policy, please contact us at [email protected].

2. Data Collection

We collect personal data in the following circumstances:

• Contact form submissions: Name, email address, and phone number (optional) when you complete our website enquiry form.
• Engagement-related data: Professional information relevant to your organization shared during consulting or training engagements, including organizational structure, workflow documentation, and employee data where directly relevant to the scope of work.
• Website analytics: Anonymous usage data collected via analytics cookies, subject to your cookie preferences.

Legal basis: We process personal data on the basis of consent (for marketing communications and optional cookies), contractual necessity (for delivering engagement services), and legitimate interest (for responding to enquiries and improving our services).

Retention: Enquiry data is retained for 12 months. Engagement-related data is retained for the duration of the engagement plus 24 months, after which it is securely deleted. Analytics data is retained for up to 14 months.

3. Data Usage

Personal data collected is used exclusively for the following purposes:

• Responding to enquiries and managing client communications
• Delivering contracted consulting and training services
• Preparing and maintaining engagement documentation and deliverables
• Improving our website and service delivery (using anonymized analytics data)
• Legal and regulatory compliance obligations

We do not sell, rent, or share personal data with third parties for commercial purposes. Data may be shared with third-party service providers (such as cloud hosting providers) solely to support delivery of the above purposes, under contractual data processing agreements.

4. Data Protection Measures

We apply the following measures to protect personal data:

• Encryption in transit (TLS) and at rest for all stored personal data
• Access controls limiting data access to personnel with a direct need
• Confidentiality agreements covering all staff and contractors
• Periodic security reviews of our data handling practices
• Documented breach notification procedures aligned with PDPA requirements

5. Cookies

Our website uses cookies for essential functions and, subject to your consent, for analytics. Full details of the cookies we use are provided in our Cookie Policy. You may update your cookie preferences at any time through that page.

6. Your Rights Under Thai PDPA

Under Thailand's Personal Data Protection Act B.E. 2562 (2019), you have the following rights regarding your personal data:

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you believe your rights have been violated, you may contact the Office of the Personal Data Protection Committee (PDPC) at pdpc.go.th.

7. Third-Party Links

Our website may contain links to external resources. We are not responsible for the privacy practices of third-party websites and encourage you to review their privacy policies independently.

8. Children's Privacy

Our services are intended for professionals and organizations. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us at [email protected] and we will delete it promptly.

9. Policy Updates

We may update this policy periodically to reflect changes in our practices or applicable law. Material changes will be communicated via our website with an updated effective date. Continued use of our services following such notice constitutes acceptance of the revised policy.