10-06-2026

General Data Protection and Privacy

At Bizappbuild we design and deliver custom business software with respect for individuals' privacy and data protection. This policy explains the types of information we collect through our website and services, how we use and share that information, the legal bases we rely on, and the controls available to users. We operate from Wichit Sub District, Amphoe Mueang Phuket District, Phuket Province 83000, Thailand and apply reasonable technical and organizational measures to protect data while enabling clients to run their business applications effectively.

Bizappbuild, Wichit Sub District, Amphoe Mueang Phuket District, Phuket Province 83000, Thailand; Phone: +66973733334; Business ID: 3563054755266; domain: bizappbuild.club Wichit Sub District, Amphoe Mueang Phuket District, Phuket Province 83000, Thailand [email protected]
1

Definitions

This section explains key terms used in the policy to help you understand what we mean by personal data, processing and services delivered by Bizappbuild.

Personal data means any information relating to an identified or identifiable natural person, such as name, email address, phone number, job title, company affiliation and billing information provided in the context of our services.
Processing refers to any operation performed on personal data, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, erasure and destruction.
User means any individual who visits our website, signs up for our services, or interacts with Bizappbuild on behalf of a client or prospective client.
Service means the software development, integration, hosting support and related consultancy services provided by Bizappbuild to its clients through contracts or project engagements.
Cookies are small data files stored on your device by a website to remember preferences, support login sessions, and collect analytics on usage patterns.
2

Data We Collect

We collect data to provide and improve our services, manage client relationships, process payments and fulfill legal obligations. Data collection happens when you contact us, register for services, use client portals, or interact with our website and marketing materials.

Data You Provide

When you engage with Bizappbuild or sign up for services, you may provide personal data directly. We collect the minimum information necessary to perform contractual obligations and support client projects.

  • Full name and job title for account creation and project contacts.
  • Email address and phone number for communication, notifications and support.
  • Company name, department and business role to configure access and permissions.
  • Billing information and invoicing details required to process payments and maintain accounts.
  • Project requirements, documents and technical specifications submitted to scope and deliver services.
  • Communications including support tickets, feedback and contractual correspondence.

Data Collected Automatically

When you visit our website or use client portals, some data is collected automatically to support service operation, security, analytics and user experience optimization.

  • IP address and approximate location inferred from network identifiers for security and fraud prevention.
  • Device and browser information (user agent, screen size, OS) to ensure compatibility and troubleshoot issues.
  • Usage and interaction data such as pages visited, time on site and feature usage to improve our offerings.
  • Cookies and similar tracking identifiers used to remember user preferences and support session management.
  • Error reports and diagnostic data to detect and fix issues in services and applications.
  • Performance metrics and aggregated analytics to measure service reliability and adoption.

Third-Party Sources

We may receive data about users from third parties to support onboarding, verification, analytics or integrations requested by clients. We limit what we import and process to what is necessary for the agreed service.

  • Analytics and monitoring providers who supply aggregated insights and performance metrics.
  • Payment processors and invoicing platforms used to manage billing and transactions.
  • Integration partners and client-authorized systems that platform data via APIs as part of delivered software.
3

How We Use Your Data

We process personal data for legitimate operational reasons and to meet contractual commitments. Typical purposes include the following:

  • To provide, maintain and improve custom software solutions and related services requested by clients.
  • To manage client accounts, authenticate users and configure access rights.
  • To process billing, payments and invoices in connection with contracted services.
  • To respond to support requests, troubleshoot issues and provide customer service.
  • To protect systems and data against security incidents, fraud and misuse.
  • To send operational communications, service updates and legal notices relevant to your account.
  • To analyze usage patterns and improve product features, performance and user experience.
  • To comply with legal and regulatory obligations, and to exercise or defend legal claims.
4

Legal Basis for Processing

Where applicable, we rely on one or more lawful bases to process personal data under relevant data protection laws, including contractual necessity and legitimate interests.

  • Performance of a contract: processing necessary to provide services you have requested or contracted for.
  • Consent: where you have given clear permission for a specific processing purpose (e.g., marketing communications).
  • Legal obligation: processing required to meet legal or regulatory duties such as tax and accounting requirements.
  • Legitimate interests: processing for operational needs, security and fraud prevention where those interests are not overridden by your rights.
5

Compliance with Applicable Data Protection Laws

The following rights are commonly available to individuals in jurisdictions with data protection laws similar to the GDPR. If you are located in such a jurisdiction, you may exercise these rights subject to local requirements and exceptions.

  • Right to access: request a copy of personal data we hold about you and information about its processing.
  • Right to rectification: request correction of inaccurate or incomplete personal data.
  • Right to erasure: request deletion of personal data where processing is no longer necessary or lawful.
  • Right to restrict processing: request limitation of processing in certain circumstances.
  • Right to data portability: request a machine-readable copy of data you have provided to us in structured form.
  • Right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.
6

Cookies and Tracking Technologies

We use cookies and similar technologies to operate the site, remember preferences, secure user sessions and collect analytics. Cookies help us deliver a more useful and personalized experience.

Common cookie types we use include session cookies (temporary), persistent cookies (retain settings across visits) and third-party cookies from analytics and integration services.

We classify cookies as necessary for site operation, performance and analytics, functional for preferences, and optional marketing cookies used with consent for promotional analysis.

You can manage cookie preferences through your browser settings or via opt-out controls where available. Blocking some cookies may affect functionality of the website or services.

View our full cookie policy

7

Data Sharing and Disclosure

We share personal data only when necessary to deliver services, comply with law, or as directed by clients. We require third-party providers to follow reasonable security and confidentiality standards.

  • Service providers and contractors who perform functions on our behalf, such as hosting, analytics, and payment processing.
  • Affiliates and partners when sharing improves service delivery and is authorized by contract or client instruction.
  • Legal and regulatory authorities when disclosure is required by law, court order, or to protect legal rights.
  • Prospective buyers or partners in the event of a business sale, merger, reorganization or acquisition, subject to confidentiality obligations.
  • Client-authorized third parties and integrators connected to a client's software environment.
  • Analytics and marketing service providers used under contract to analyze aggregated usage and improve services.
8

International Data Transfers

As a Thailand-based service provider with global clients, personal data may be transferred to and processed in countries outside your jurisdiction. We take steps to ensure adequate protection consistent with applicable law and reasonable security practices.

When transferring data internationally we use contractual safeguards, data processing agreements and, where available, standard contractual clauses or similar measures to protect data subject rights and confidentiality.

9

Data Retention

We retain personal data only as long as necessary to fulfill the purposes set out in this policy, to meet contractual and legal obligations, and to resolve disputes.

Account records and core client data are retained while an account is active and for up to three years after account closure to meet contractual, support and tax requirements.

Support communications, emails and ticket histories are typically retained for up to two years to enable continuity of service and troubleshooting, unless a longer retention is required by law or client agreement.

System logs and monitoring records are generally retained for 12 months to support security contribute and performance analysis, except where extended retention is needed for legal reasons.

Upon valid request for deletion, we will remove or anonymize personal data unless retention is required to satisfy legal obligations, resolve disputes, or enforce agreements.

10

Security Measures

We implement reasonable organizational and technical measures to protect data against unauthorized access, loss, misuse and alteration. Security is reviewed regularly and updated to reflect evolving risks.

  • Encryption of data in transit using TLS and encryption at rest for sensitive information where appropriate.
  • Access control policies including role-based access, strong authentication practices and limited administrative privileges.
  • Regular security assessments, patch management and logging to detect and respond to incidents promptly.
11

Your Rights

To exercise rights related to your personal data, such as access, correction, deletion or portability, please contact us using the details below. We aim to respond in a timely manner and will explain any limitations required by law.

  • Contact Bizappbuild at [email protected] or by mail to Wichit Sub District, Amphoe Mueang Phuket District, Phuket Province 83000, Thailand; or by phone +66973733334 to request access, correction, deletion or other available rights. Please include details to help us verify your identity and process the request.
  • Request access to personal data we process about you and a summary of processing activities.
  • Request correction of inaccurate or incomplete personal information to keep records current and useful.
  • Request deletion of personal data where retention is no longer necessary or lawful, subject to legal exceptions.
  • Object to certain types of processing, including direct marketing and profiling, when such processing is based on legitimate interests.
  • Request restriction of processing while a dispute over accuracy or lawfulness is contribute.
  • Request portability of personal data you provided to receive it in a structured, commonly used, machine-readable format.
  • Withdraw consent for processing activities that rely on consent, without affecting processing already completed lawfully.
12

How to Exercise Your Rights

To submit a request regarding access, correction, deletion, portability, restriction, or objection, contact our privacy team with a brief description of your request and any supporting details. We require verification of identity to protect your data and may ask for additional information to process complex requests. Submissions should include your full name, email address used with Bizappbuild, and a clear description of the requested action.

[email protected]

We strive to respond to verified requests promptly. Where possible, we will respond within 30 days of receiving your request and verifying your identity. If your request requires additional time due to complexity, we will notify you with an estimated timeline and the reasons for the delay.

Marketing Communications

Bizappbuild may send marketing messages about services, product updates, events, and offers that align with your interests. Marketing communications are based on your consent or our legitimate interest to inform customers about relevant services. You will receive only content relevant to business software development services and related updates for Thailand-based clients.

You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails or by contacting [email protected]. Unsubscribing will not affect transactional messages related to projects, invoices, or account security.

Children's Privacy

Our services are intended for businesses and professionals. We do not knowingly collect personal data from children under 16. If we learn that we have received personal data from a child under 16 without appropriate parental consent, we will delete that data promptly according to applicable law.

Third-Party Links

Our website and communications may contain links to third-party sites or services. Bizappbuild is not responsible for third-party privacy practices or content. Review the privacy policies of any third-party site before providing personal information. We may share limited data with trusted partners to deliver contracted services, subject to contractual safeguards.

Changes to This Policy

We review and update our privacy policy as our services evolve, regulatory changes occur, or operational needs change. Material updates will be published on our privacy page with an updated effective date. We encourage you to review this policy periodically to stay informed about how we handle your information.

13

Contact Information

Contact Bizappbuild for privacy inquiries at: Bizappbuild, Wichit Sub District, Amphoe Mueang Phuket District, Phuket Province 83000, Thailand. Phone: +66973733334. Business ID: 3563054755266. For privacy requests, email [email protected] or send mail to the address above. We aim to respond promptly to legitimate inquiries.

+66973733334
Wichit Sub District, Amphoe Mueang Phuket District, Phuket Province 83000, Thailand