1.Who controls your data
Bluewich (“we”, “us”) is the data controller for the personal data described in this policy. If you have a question about how we use your data, or want to exercise any of your rights, contact us using the details below.
Bluewich
4th Floor, 272 Than Thip 3 Alley, Phlabphla, Wang Thonglang, Bangkok 10310, Thailand
Email: hello@bluewich.com
LINE Official Account: @838wyfih
2.What we collect
We collect only what we need in order to reply to you and deliver our services. We do not buy contact lists from third parties, and we do not collect sensitive personal data as defined in Section 26 of the PDPA — health data, race, religion, biometrics and similar categories.
2.1 Data you give us directly
| Data | Collected via | Required? |
|---|---|---|
| Name | Website contact form | Required |
| Email address | Website contact form | Required |
| Phone number or LINE ID | Website contact form | Optional |
| Your website URL | Website contact form | Optional |
| Project details you write to us | Website contact form | Optional |
| Message content | Email or LINE Official Account | Whatever you send |
2.2 Data collected automatically
Like any website, our server automatically records technical information when you visit: IP address, browser type and version, operating system, pages viewed, and timestamps. We use this only for system security and troubleshooting.
2.3 Cookies
This site uses only strictly necessary cookies, which under the PDPA do not require prior consent. We currently run no analytics or advertising cookies — no Google Analytics, no Google Ads, no Meta Pixel. If that changes we will update this policy and show a consent banner before any such cookie is set. You can block or delete cookies in your browser settings, which may cause parts of the site to stop working correctly.
3.Why we use it, and our lawful basis
| Purpose | Lawful basis (PDPA) |
|---|---|
| Replying to your enquiry and preparing a quotation | Steps taken at your request prior to a contract (s.24(3)) |
| Delivering agreed services and coordinating the project | Performance of a contract (s.24(3)) |
| Issuing accounting and tax documents and retaining them | Compliance with a legal obligation (s.24(6)) |
| Keeping our systems secure and preventing abuse | Legitimate interest (s.24(5)) |
| Sending marketing updates or offers, if any | Consent (s.19) — withdrawable at any time |
We will not use your data for any purpose beyond those listed above without telling you and, where required, obtaining fresh consent.
4.Who we share it with
We do not sell, rent, or trade your personal data to anyone for marketing purposes.
- ·Infrastructure providers — hosting and email providers who process data as our processors, on our instructions.
- ·LINE Corporation — if you contact us through our LINE Official Account, that conversation is also subject to LINE’s own privacy policy.
- ·Accounting and legal advisers — as needed to issue documents and meet legal obligations.
- ·Government authorities — where we receive a lawful order.
5.International transfers
Some of our providers, such as hosting and email, may operate servers outside Thailand. Where that happens we ensure appropriate safeguards are in place as required by Sections 28 and 29 of the PDPA.
6.How long we keep it
| Data | Retention period |
|---|---|
| Enquiries that did not become clients | 24 months from last contact |
| Client records and project documents | Duration of the relationship plus 5 years |
| Accounting and tax records | At least 5 years, as required by the Revenue Code |
| Server access logs | Maximum 90 days |
After these periods we delete the data or render it non-identifiable.
7.Your rights
Under the PDPA you have the following rights, and exercising them is free of charge.
| Right | Reference |
|---|---|
| Right to be informed | What we collect and why — this policy |
| Right of access and to obtain a copy | Section 30 |
| Right to data portability | Section 31 |
| Right to object | Section 32 |
| Right to erasure or destruction | Section 33 |
| Right to restrict processing | Section 34 |
| Right to rectification | Sections 35–36 |
| Right to withdraw consent | Section 19 — does not affect lawful processing already done |
| Right to lodge a complaint | With the Office of the Personal Data Protection Committee (PDPC) |
How to exercise a right: email hello@bluewich.com stating which right you wish to exercise. We may ask you to verify your identity so that we do not disclose data to the wrong person. We will respond within 30 days of receiving your request, as the PDPA requires.
If you are not satisfied with our response, you may complain to the Office of the Personal Data Protection Committee (PDPC) in Thailand.
8.Security
We apply appropriate industry-standard measures to protect against unauthorised access, alteration or disclosure: HTTPS/TLS encryption on every page, access limited to people who need it, and two-factor authentication on internal systems.
If a personal data breach occurs that poses a risk to individuals’ rights and freedoms, we will notify the Office of the Personal Data Protection Committee within 72 hours of becoming aware of it, and notify you where the law requires.
9.Children
Our services are business-to-business and are not directed at anyone under 20. We do not knowingly collect data from minors. If we learn that we have received such data without valid consent, we delete it promptly.
10.Third-party websites
This site links to other websites. This policy does not cover them. We recommend reading the privacy policy of any site before giving it your information.
11.Changes to this policy
We may update this policy from time to time. The last-updated date appears at the top of this page. If we make a material change — for example adding a new purpose for using your data — we will notify you in advance through an appropriate channel.
12.Contact us
Bluewich
4th Floor, 272 Than Thip 3 Alley, Phlabphla, Wang Thonglang, Bangkok 10310, Thailand
Email: hello@bluewich.com
LINE Official Account: @838wyfih
Hours: Monday–Friday, 09:00–18:00 (Indochina Time)