Information We Collect

When you work with us, we collect different types of information depending on how you interact with our services. We're transparent about what we gather and why we need it.

Information You Provide Directly

This includes data you give us when you fill out forms, create an account, or contact our support team:

• Business contact details including name, email address, phone number
• Company information such as business name, tax identification, industry type
• Payment processing requirements and transaction volume estimates
• Technical preferences for system integration and automation setup
• Communication history when you reach out to our support team

Automatically Collected Information

Our systems automatically log certain data when you visit our website or use our platform:

• IP address and general location information (city/region level)
• Browser type, device information, and operating system
• Pages visited, time spent on site, and navigation patterns
• Referring website and search terms used to find us
• Technical logs for security monitoring and system performance

Payment Processing Data

When you use our automation services, we handle transaction-related information:

• Transaction amounts, dates, and processing status
• Payment method details (we don't store complete card numbers)
• Merchant identifiers and customer reference codes
• Reconciliation data and settlement reports

How We Use Your Information

We use the information we collect for specific business purposes. Here's what we do with your data:

We don't use your personal information for purposes beyond what's described here unless we get your explicit consent first.

Data Sharing and Disclosure

We limit who can access your information. Here are the situations where we might share your data:

Service Partners

We work with specific third parties who help us run our business. These include payment gateway providers, cloud hosting services, and security monitoring tools. All partners sign agreements that require them to protect your data and use it only for the purposes we specify.

Legal Requirements

Sometimes Thai authorities or regulatory bodies require us to disclose information. We'll share data when legally obligated to do so, such as responding to court orders or investigating suspected fraud. We review each request carefully and only provide what's legally required.

Business Transfers

If Web Nexus merges with another company or gets acquired, your information might be transferred as part of that transaction. We'd notify you beforehand and ensure the new entity respects this privacy policy.

Your Rights Under Thai Law

Thailand's PDPA gives you specific rights regarding your personal data. Here's what you can do:

• Access Your Data: Request a copy of the personal information we hold about you. We'll provide this within 30 days.
• Correct Inaccuracies: Ask us to fix any incorrect or outdated information in your account or records.
• Request Deletion: Have your data erased when it's no longer needed for the purposes we collected it. Some data must be retained for legal compliance.
• Object to Processing: Opt out of certain types of data processing, particularly for marketing purposes.
• Data Portability: Receive your information in a structured format that you can transfer to another service provider.
• Withdraw Consent: If we're processing your data based on consent, you can withdraw that consent at any time.
• Lodge a Complaint: Contact Thailand's Personal Data Protection Committee if you believe we've mishandled your information.

To exercise any of these rights, send a request to support@web-nexus.com with "Data Rights Request" in the subject line. We'll verify your identity before processing the request.

Data Security Measures

Protecting your information is something we take seriously, especially given the nature of payment processing. Here's how we secure your data:

Technical Safeguards

• 256-bit SSL encryption for all data transmitted between your browser and our servers
• End-to-end encryption for sensitive payment information
• Regular security audits and penetration testing by independent firms
• Automated threat detection systems that monitor for suspicious activity
• Multi-factor authentication for account access

Organizational Practices

• Limited employee access to personal data based on job requirements
• Mandatory security training for all staff members
• Non-disclosure agreements with anyone who handles customer information
• Regular backup procedures with encrypted storage
• Incident response plan for potential security breaches

While we implement strong security measures, no system is completely immune to attacks. If we detect a breach that affects your data, we'll notify you within 72 hours as required by Thai law.

Data Retention and Deletion

We don't keep your information longer than necessary. Our retention practices depend on the type of data and legal requirements:

Active Account Data

Information related to your active account and ongoing services stays in our systems as long as you maintain a relationship with us. This includes your profile details, preferences, and recent transaction history.

Transaction Records

Thai tax law requires us to retain financial transaction records for seven years from the transaction date. This includes payment processing logs, invoices, and reconciliation data. After this period, we securely delete or anonymize this information.

Marketing Communications

If you've opted into our newsletter or marketing emails, we keep that consent record until you unsubscribe. Once you opt out, we remove your email from marketing lists within 10 business days.

Closed Accounts

When you close your account, we delete most personal information within 90 days. We retain only what's necessary for legal compliance, dispute resolution, or fraud prevention. This typically includes basic transaction history and account closure documentation.

International Data Transfers

Our primary servers are located in Thailand, but some of our service providers operate from other countries. When we transfer your data internationally, we ensure it receives adequate protection:

• We only work with providers in countries that Thailand recognizes as having adequate data protection standards
• Standard contractual clauses approved by Thai authorities govern international transfers
• Data processing agreements include specific security requirements and audit rights
• We maintain a list of all third-party processors and their locations (available upon request)

If you have concerns about international transfers of your specific data, contact us and we'll provide details about where your information is processed.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies. Here's what you need to know:

Essential Cookies

These are necessary for the website to function. They handle things like keeping you logged in, remembering your language preferences, and maintaining security. You can't opt out of these without breaking site functionality.

Analytics Cookies

We use analytics tools to understand how visitors use our site. This helps us improve navigation and identify technical issues. These cookies collect anonymized data about page views, session duration, and user flows.

Managing Cookies

Your browser settings let you control cookies. You can block all cookies, delete existing ones, or get alerts when sites try to set them. Keep in mind that blocking certain cookies might affect your ability to use some features of our platform.

Third-Party Links

Our website might include links to partner sites, payment gateway login pages, or integration documentation hosted elsewhere. We're not responsible for the privacy practices of these external sites. When you click a link that takes you away from web-nexus.com, that site's privacy policy applies instead of ours.

Before providing personal information to any third-party site, review their privacy policy to understand how they handle data.

Children's Privacy

Our services are designed for businesses and aren't intended for individuals under 18 years old. We don't knowingly collect personal information from minors. If we discover that we've inadvertently gathered data from someone under 18, we'll delete it immediately.

If you're a parent or guardian who believes your child has provided us with personal information, contact us at support@web-nexus.com and we'll address the situation promptly.

Changes to This Policy

We update this privacy policy occasionally to reflect changes in our practices, legal requirements, or business operations. When we make significant changes, we'll notify you through email or a prominent notice on our website at least 30 days before the new policy takes effect.

The "Last Updated" date at the top of this page shows when we most recently revised the policy. We encourage you to review it periodically to stay informed about how we protect your information.

Data Protection Officer

We've appointed a Data Protection Officer who oversees our compliance with Thailand's PDPA and handles privacy-related inquiries. You can reach our DPO directly for questions about:

• How we process your specific personal data
• Exercising your rights under Thai law
• Filing complaints about our data practices
• Requesting detailed information about our security measures

Contact our Data Protection Officer at support@web-nexus.com with "DPO" in the subject line.