​Privacy Policy
Digital Leo Co., Ltd.
1. Introduction
Digital Leo Co., Ltd. (“Company”, “we”, “us”, or “our”) values the protection of personal data and respects the privacy of individuals who interact with our website, services, and digital platforms. This Privacy Policy explains how we collect, use, disclose, store, and safeguard personal data in accordance with the Personal Data Protection Act B.E. 2562 (2019) of Thailand (“PDPA”) and other applicable regulations.
2. Company Information
Digital Leo Co., Ltd.
Thailand
Privacy contact email: inquiry@digital-leo.com
3. Definitions
Personal Data – Information relating to an identified or identifiable natural person.
Data Subject – An individual whose personal data is collected or processed.
Data Controller – The entity that determines the purposes and means of processing personal data.
Data Processor – A person or organization processing personal data on behalf of the Data Controller.
Child – An individual under 16 years of age.
4. Collection of Personal Data
We may collect personal data directly from you when you:
• Register an account or submit forms
• Contact us via email, telephone, or online channels
• Use our website or services
• Participate in marketing campaigns, surveys, or feedback activities
5. Types of Personal Data Collected
The categories of personal data we may collect include:
• Identity information (name, surname)
• Contact information (email address, phone number)
• Transaction details (service purchases or payment information)
• Technical data (IP address, browser information, cookies, device identifiers)
• Usage data related to website interactions
• Content voluntarily provided by users such as feedback, messages, or uploaded materials
6. Purpose of Processing Personal Data
We process personal data for the following purposes:
• To provide and manage our services
• To communicate with users and respond to inquiries
• To process transactions and administrative activities
• To improve service quality and website performance
• To conduct marketing and promotional activities
• To comply with legal obligations and regulatory requirements
7. Legal Basis for Processing
The Company processes personal data based on the following lawful bases:
• Consent from the data subject
• Performance of contractual obligations
• Compliance with legal obligations
• Legitimate interests of the Company
• Other lawful bases permitted under applicable laws
8. Sharing and Disclosure of Personal Data
We may share personal data with:
• Internal departments within the Company
• Service providers assisting with IT systems, marketing, analytics, and payment processing
• Professional advisors or consultants
• Government authorities where required by law
9. Service Providers
The Company may engage third-party service providers to assist in operating business activities. These providers may only access personal data necessary to perform their tasks and must comply with appropriate confidentiality and data protection obligations.
10. Business Transfers
In the event of a merger, acquisition, restructuring, or transfer of assets, personal data may be transferred to the new controlling entity provided that appropriate data protection measures remain in place.
11. Cross-Border Data Transfers
Certain service providers or systems used by the Company may store or process data outside Thailand. When such transfers occur, the Company will ensure appropriate safeguards and protection measures consistent with PDPA requirements.
12. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations.
Typical retention periods may include:
• Contact inquiries: up to 2 years after the last communication
• Client and project-related information: up to 10 years for legal and accounting purposes
• Marketing communication data: until the individual withdraws consent
• Website analytics data: up to 26 months
After the retention period expires, personal data will be securely deleted, destroyed, or anonymized.
13. Data Security
The Company implements appropriate administrative, technical, and physical security measures to protect personal data from unauthorized access, loss, alteration, or disclosure.
14. Data Breach Notification
If a personal data breach occurs, the Company will notify the relevant supervisory authority and affected individuals in accordance with PDPA requirements and within the timeframe required by law.
15. Data Subject Rights
Under the PDPA, data subjects may exercise the following rights:
• Right to access personal data
• Right to request copies of personal data
• Right to rectify inaccurate information
• Right to erase or anonymize personal data
• Right to restrict processing
• Right to object to processing
• Right to data portability
• Right to withdraw consent
• Right to lodge a complaint with the Personal Data Protection Committee (PDPC)
16. Marketing and Communication
We may use personal data to send marketing communications, promotional content, or service updates. Individuals may opt out of marketing communications at any time.
17. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance user experience, analyze website performance, and support marketing activities.
Types of cookies we may use include:
Essential Cookies
These cookies are necessary for the operation of the website and cannot be disabled.
Analytics Cookies
These cookies help us understand how visitors interact with our website.
Example tools may include Google Analytics.
Marketing Cookies
These cookies may be used to deliver relevant advertising and measure marketing effectiveness.
Users can manage or disable cookies through their browser settings. Disabling cookies may affect certain website functions.
18. Links to Third‑Party Websites
Our website may contain links to external websites operated by third parties. The Company is not responsible for the privacy practices of those websites.
19. Changes to this Privacy Policy
This Privacy Policy may be updated periodically. Any updates will be published on our website and become effective upon posting.
20. Data Protection Contact
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact:
Digital Leo Co., Ltd.
Email: inquiry@digital-leo.com
Phone: +66 63-326 2391
​
Last Updated: 1 March 2026
​