WizEmp

EN TH JA

Privacy Policy

Version 1.3  |  Effective: 23 October 2026

This policy explains how WizEmp collects, uses, stores, and protects your personal data when you visit wizemp.com. It applies to all language versions of this website.

1. About WizEmp

WizEmp is the personal data controller for the data processed through this website — a Power BI and Business Intelligence consultancy based in Thailand, operating under the Personal Data Protection Act B.E. 2562 (PDPA).

2. Governing Law & Language

This website and this Privacy Policy are governed by Thai law, specifically the Personal Data Protection Act B.E. 2562 (PDPA). This English version is the authoritative text. Where any translated version of this policy conflicts with the English text, the English text governs. All other language versions are provided for convenience only.

3. Personal Data We Collect

We collect only what we need. The following table lists every category of personal data collected through this website, the source, and the purpose.

Category	Data Collected	Source	Purpose
Contact form submissions	Name, email address, company name, country, role, message content, and the portfolio example you came from (if any)	You — when you complete a contact form	Respond to your enquiry
DPO correspondence	Name, email address, message content, any data you provide in your request	You — when you write to dpo@wizemp.com	Respond to data protection requests and fulfil our obligations under PDPA

4. Lawful Bases for Processing

Under the PDPA, we process your data on the following lawful bases:

Activity	Lawful Basis	Explanation
Contact form / DPO requests	Legitimate Interest	You actively submit your data by contacting us. A privacy notice is displayed at the point of collection. We have a legitimate interest in responding to enquiries directed at WizEmp.

5. Data Retention

We keep your data only as long as necessary for the purpose it was collected, or as required by law.

Data Category	Retention Period	Then What
Contact form submissions	2 years from last contact	Permanently deleted
DPO correspondence	3 years from resolution of the request	Permanently deleted

6. Third-Party Processors

We share personal data with the following third-party service providers, solely for the purposes described in this policy. WizEmp ensures that appropriate contractual protections are in place with each processor as required by PDPA.

Processor	Location	Service	Privacy Policy
Hostinger International Ltd.	Lithuania	Website hosting	Link

AI systems. We do not currently use AI systems to process the personal data you send us through this website, and we never use it to train AI models. Before that changes (for example, when our AI assistant Malee begins answering enquiries), we will update this policy to say which system processes your data, for what purpose, where it is processed, and how a person reviews its output.

7. Cross-Border Data Transfers

Some of the processors listed above are located outside Thailand. Where personal data is transferred internationally, WizEmp ensures that appropriate safeguards and contractual protections are in place as required by PDPA Section 28.

Hosting infrastructure (Hostinger) processes data outside Thailand as part of normal website operation — this is strictly necessary and does not require separate consent.

8. Cookies

This website does not place cookies and does not use similar technologies such as browser storage or tracking pixels. Our Cookie Policy explains what we checked and what we will do before that changes.

---

9. Your Rights Under PDPA

Thailand's Personal Data Protection Act B.E. 2562 gives you the following rights over your personal data:

1. Access — obtain a copy of the personal data WizEmp holds about you
2. Rectification — correct inaccurate or incomplete data
3. Erasure — request deletion of your data, subject to legal retention requirements
4. Restriction — pause processing while a dispute is resolved
5. Portability — receive your data in a structured, machine-readable format
6. Objection — object to processing based on legitimate interest
7. Withdrawal of Consent — withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal

You can exercise any of these rights through any of the following channels:

• In person: at our office, 121/2 Moo 10, The Kirin Si Racha Village, Nong Yai Bu Road, Nong Kham, Si Racha, Chonburi 20110, by appointment. Please contact us first so we can arrange a time, and bring identification.
• By post: WizEmp, Data Protection Officer, 121/2 Moo 10, The Kirin Si Racha Village, Nong Yai Bu Road, Nong Kham, Si Racha, Chonburi 20110, Thailand.
• By email: dpo@wizemp.com.

You may make a request yourself, or it may be made on your behalf by a person exercising parental power, a court-appointed custodian or curator, or a representative you have authorised.

For a request to access or obtain a copy of your personal data, or to learn where we obtained data collected without your consent, we will ask you to confirm your identity. We will reply within 30 days of receiving a complete request. If a request is large or complex, we may extend this once by up to 30 days, and we will tell you the reason in writing. Access is free of charge. We may charge a reasonable fee only where the rules of the Personal Data Protection Committee allow it, for example for copies in a special format, for delivery, or for repeated or excessive requests. We keep a record of each request and our response for at least 2 years.

For the other rights, we will respond without unnecessary delay. If additional time is needed, we will notify you and explain the reason.

10. Visitors Outside Thailand

This website is governed by Thai law. If you are visiting from outside Thailand and have questions or requests regarding your personal data, please contact dpo@wizemp.com. All requests will be assessed and responded to under the Personal Data Protection Act B.E. 2562 (PDPA), regardless of the requester's location.

11. Data Security

WizEmp implements appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted connections (TLS/SSL), access controls, and regular security reviews. No system is perfectly secure, and we encourage you to contact us immediately at dpo@wizemp.com if you believe your data has been compromised.

12. Data Breach Notification

In the event of a personal data breach that is likely to affect your rights and freedoms, WizEmp will notify the Personal Data Protection Committee (PDPC) without unnecessary delay after becoming aware of the breach. If the breach poses a high risk to you, we will also notify you directly without unnecessary delay.

13. Age Requirement

This website is not directed at individuals who have not reached the age of majority under Thai law (20 years). We do not knowingly collect personal data from such individuals. If you believe we have inadvertently collected data from a person under 20, please contact dpo@wizemp.com and we will delete it promptly.

14. Policy Updates

When our data practices change, we publish a new version of this policy here and update the changelog below. Material changes will be clearly identified. Previous versions are held in /Website/archive/ and available on request at dpo@wizemp.com.

15. Contact

---

Version History

Newest first. Effective = date went live. Superseded = date replaced. Archived files: /Website/archive/privacy-policy-en-v{X.Y}.html. Copy current file to archive before publishing the next version.

Version	Effective	Superseded	Changes
1.3	23 October 2026	Current	Section 6: new paragraph on AI systems. We do not currently use AI systems to process the personal data you send through this website, and never use it to train AI models. We will update this policy before that changes.
1.2	18 October 2026	23 October 2026	Section 3: the contact form row now lists every field the form collects (name, email address, company name, country, role, message content, and the portfolio example you came from, if any), so it matches the consent text on the contact form.
1.1	16 October 2026	18 October 2026	Section 9: in-person and postal channels for exercising your rights, alongside email; who may make a request; reply within 30 days (extendable once by 30 days); fees; 2-year record of requests. Section 15: full postal address. Aligns with the PDPC Notification on access requests, B.E. 2569, in force 14 September 2026. Removed the GA4, LinkedIn Insight Tag, Power BI embed and cookie consent record entries, which described processing this website does not do; Section 8 now states that the site places no cookies.
1.0	15 May 2026	16 October 2026	Initial publication. Covers contact forms, GA4, LinkedIn Insight Tag, Power BI embeds, cookie consent records, DPO correspondence. PDPA lawful bases, data retention schedule, third-party processors, cross-border transfer safeguards, data subject rights, breach notification, age requirement, visitors outside Thailand.