Privacy Policy

1. Introduction

Cognova ("we," "our," or "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website or engage with our AI integration services in Bangkok, Thailand.

We are committed to complying with the Personal Data Protection Act B.E. 2562 (2019) of Thailand (PDPA) and maintaining the highest standards of data protection. If you have any questions about this policy, please contact us at [email protected].

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide to us when you contact us or express interest in our services, including your name, email address, phone number, and any messages you send through our contact forms.

2.2 Information Collected Automatically

When you visit our website, we may automatically collect certain information about your device and browsing actions, including IP address, browser type, operating system, referring URLs, and pages viewed. This information is collected through cookies and similar tracking technologies.

2.3 Information from Third Parties

We may receive information about you from third-party services such as analytics providers (Google Analytics) if you interact with our website through those platforms.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries and provide information about our AI integration services
• To communicate with you about consultations, assessments, and project updates
• To deliver our services and fulfill contractual obligations
• To improve our website and services based on usage patterns and feedback
• To send occasional updates about our services if you have opted in to receive them
• To comply with legal obligations and enforce our terms and conditions

4. Legal Basis for Processing

Under Thailand's PDPA, we process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for us to process your data, such as when submitting contact forms
• Contract Performance: When processing is necessary to fulfill our service agreements with you
• Legitimate Interest: When we have a legitimate business interest that does not override your privacy rights
• Legal Obligation: When we need to process data to comply with Thai laws and regulations

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Specifically:

• Contact form submissions: Retained for up to 2 years from last contact
• Client project data: Retained for the duration of the project plus 3 years for reference and legal compliance
• Website analytics data: Retained for up to 26 months

After these periods, we will securely delete or anonymize your personal data unless we are legally required to retain it longer.

6. Data Sharing and Disclosure

We do not sell or rent your personal data to third parties. We may share your information only in the following circumstances:

• Service Providers: We may share data with trusted third-party service providers who assist us in operating our website and delivering services (such as hosting providers and analytics services), provided they agree to keep your information confidential
• Legal Requirements: We may disclose your information if required by law or in response to valid requests by public authorities
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS protocols
• Secure storage systems with access controls
• Regular security assessments and updates
• Staff training on data protection practices
• Restricted access to personal data on a need-to-know basis

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.

8. Your Rights

Under Thailand's PDPA, you have the following rights regarding your personal data:

• Right to Access: You can request copies of your personal data that we hold
• Right to Rectification: You can request correction of inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data in certain circumstances
• Right to Data Portability: You can request transfer of your data to another service provider
• Right to Object: You can object to processing of your data for certain purposes
• Right to Withdraw Consent: You can withdraw your consent at any time where processing is based on consent
• Right to Lodge a Complaint: You can file a complaint with the Personal Data Protection Committee of Thailand

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activity. For detailed information about the cookies we use and your choices regarding cookies, please see our Cookie Policy.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information.

12. International Data Transfers

Your personal data is primarily stored and processed in Thailand. If we transfer data outside of Thailand, we will ensure appropriate safeguards are in place to protect your data in accordance with the PDPA.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a new "Last Updated" date. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: