Legal & Regulatory Compliance

Privacy Policy

Official Policy of WebFlow Base Advisory Ltd. • Governed under the laws of Thailand • Effective Date: January 15, 2026

At WebFlow Base Advisory Ltd. (“WebFlow Base,” “we,” “our,” or “us”), we are committed to safeguarding the privacy of visitors to our website https://webflowbase.digital and the confidentiality of client data provided during our consulting engagements.

This Privacy Policy explains what personal data we collect, why we collect it, how it is processed, and your rights under applicable privacy legislation, including the Thailand Personal Data Protection Act (PDPA) and international standards.

1. Data Controller Information

  • Data Controller Entity: WebFlow Base Advisory Ltd.
  • Registered Office Address: Office 10, 34 Demo Avenue, Chiang Rai 00000, Thailand
  • Direct Telephone: +66 53 000 741
  • Data Privacy Inquiries: hello@webflowbase.digital

2. Personal Information We Collect

2.1 Information You Provide Directly

When you submit a scoping request or contact inquiry through our website, we collect:

  • Full name
  • Business email address
  • Organization / company name
  • Application platform type
  • Project scope details, current funnel bottlenecks, and message contents

2.2 Technical Browsing Information

When you navigate our website, our servers and lightweight analytics collect:

  • IP address (anonymized/truncated)
  • Browser type and version
  • Operating system and device viewport dimensions
  • Pages visited, time spent per page, and referral source

We process your personal information based on the following legal grounds:

  • Contractual Necessity & Pre-contractual Inquiries: To respond to your audit inquiries, prepare fixed-scope proposals, and fulfill agreed consulting engagements.
  • Legitimate Interests: To maintain website security, prevent fraudulent bot submissions, and optimize our technical field notes and content architecture.
  • Consent: Where you have provided affirmative consent through our cookie consent banner for aggregated analytics tracking.

4. Client Staging & Telemetry Data Handling

During diagnostic audits:

  • WebFlow Base operates strictly within designated staging, sandboxed, or anonymized production environments provided by the client.
  • We do not extract, store, or sell end-user Personally Identifiable Information (PII) from client databases.
  • Any test session recordings or network logs captured during audits are encrypted and permanently deleted within sixty (60) days of project delivery.

5. Data Retention Periods

  • Inquiry Submissions: Retained for up to twenty-four (24) months to facilitate ongoing business correspondence and proposal follow-ups.
  • Client Engagement Records: Accounting, contract, and invoicing records are retained for seven (7) years in compliance with Thai statutory tax and financial regulations.
  • Server Access Logs: Retained for thirty (30) days for operational security monitoring and then automatically purged.

6. International Data Transfers

As an advisory consultancy headquartered in Chiang Rai, Thailand serving international software organizations, personal data submitted through our forms may be processed on secure cloud servers located within the Asia-Pacific region and compliant international data centers. We implement standard contractual clauses and robust encryption (TLS 1.3) to protect data across borders.

7. Your Statutory Data Rights

Under applicable data protection laws, you possess the right to:

  1. Access: Request a copy of the personal data we hold about you.
  2. Rectification: Request correction of inaccurate or incomplete personal information.
  3. Erasure (“Right to be Forgotten”): Request deletion of your personal data where retention is no longer legally required.
  4. Restriction of Processing: Request limitation of data processing under certain conditions.
  5. Data Portability: Request transfer of your data in a structured, machine-readable format.
  6. Withdraw Consent: Withdraw cookie or marketing consent at any time without affecting prior lawful processing.

To exercise any of these rights, email our Data Protection Team at hello@webflowbase.digital.

8. Policy Updates

We may revise this Privacy Policy periodically to reflect changes in our operational practices or statutory obligations. The latest version will always be posted on this page with the effective date noted above.