Privacy Policy

1. Introduction

This Privacy Policy explains how Sumbai Solution Co., Ltd. (“Sumbai Solution”, “we”) processes personal data when you use this website, including the public message board on the homepage, with reference to Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

This policy applies to all visitors of this website and should be read together with the Cookie Policy and the Terms of Service.

The website has no registration or login system, so we do not hold user account data.

2. Personal data we collect

The data relevant to this website falls into the following groups.

• Homepage message board: you can submit a message without logging in. The message board database stores only two fields, id and text. text is the message you type; id only identifies the message record, is not shown publicly and is not the identity of the sender. We do not ask for a name, email, phone number or any profile data through the board.
• Contacting us: if you contact us by email, phone or LINE, we receive the information you provide, such as your name, contact details and what you tell us. This website has no contact form.
• Cookie choices and preferences: your browser stores your cookie choices and, if you allow it, your language and light/dark mode, as described in the Cookie Policy.
• Technical data: hosting and internet infrastructure providers may automatically record technical data when your browser requests the website, such as IP address, browser type and access time. This is separate from the message board database and is handled under those providers' policies.
• Google Fonts: your browser requests font files from Google, which may include your IP address and browser information (see the Cookie Policy).

The website currently has no analytics or advertising tools. If any are added, we will update this policy and ask for consent before use where required.

3. Public message board and public disclosure

• Messages submitted to the homepage message board appear as post-it-style notes, and every visitor can see everyone's messages.
• The website does not show who submitted each message, and does not display a name or other direct identifying information next to a message.
• We do not describe the board as completely anonymous: not showing a name does not mean no technical data is processed elsewhere (see section 2), and the content of a message may itself identify someone.
• Please do not include personal information about yourself or others in a message, such as full names, phone numbers, emails, addresses or sensitive data.
• Once submitted, the message becomes visible according to how the website actually publishes it, and others may read or copy it.

4. Message deletion

• You can delete only the notes you submitted yourself; you cannot delete other people's messages.
• No account is needed to delete; use the deletion feature provided on the website (drag the note to the bin, or select the note and press Delete).
• Once deleted, the note disappears from the website display. We do not promise that the message is removed immediately or completely from backups, caches, logs or all infrastructure.
• Because there are no accounts, we may be unable to tell which message belongs to which person who contacts us, so please use the website's deletion feature as the main route.

5. Purposes and legal bases

• Operating the message board and letting you submit/delete your own messages — consent, which you give by typing and submitting a message yourself, and which you can withdraw by deleting your message.
• Keeping the website secure and working — our legitimate interests, taking your rights into account.
• Responding when you contact us — steps you request before entering a contract, legitimate interests or consent, as applicable.
• Complying with law — applicable legal obligations.

6. Cookies and similar technologies

Details are in the Cookie Policy. In short, the website stores your cookie choices as strictly necessary data, and stores language and light/dark mode only if you allow functional cookies. You can change or withdraw consent at any time via the “Cookie Settings” link in the footer.

7. Data sharing and third-party providers

We do not sell personal data. Data may involve providers needed to run the website: hosting/infrastructure providers and Google (Google Fonts); and when you contact us via LINE or email, your data passes through that platform provider, which has its own policy.

We may disclose data to authorities where required by law.

8. Data retention

We have not yet set a fixed retention period for message board content. We keep it as long as needed to display the board, until you delete your note, or until we remove it under the Terms of Service or the law.

Deleting a message does not mean deleting technical logs, backups or data that hosting providers keep separately and automatically, which follow those providers' periods. Information we receive by email, phone or LINE is kept as long as needed for the purpose of the contact and as required by law.

9. Data security

We aim to use appropriate measures to protect data, such as keeping message board data to a minimum (only id and text), having no user accounts, and separating necessary from optional cookie choices. However, no system is completely secure and we cannot guarantee absolute security.

10. Your rights

Under the PDPA you may have the following rights, subject to legal conditions:

• access and obtain a copy of your data
• data portability
• object to processing
• erasure, destruction or anonymisation
• restriction of use
• rectification
• withdraw consent at any time, without affecting processing done before withdrawal
• lodge a complaint with the Personal Data Protection Committee Office

Because there are no accounts, we have no dashboard or automated identity verification. You can delete your own messages with the website's deletion feature and exercise other rights by contacting us under section 14. We may ask for more information to verify a request, and may be unable to locate messages that carry no information identifying the sender.

11. International transfers

External providers such as Google Fonts and hosting providers may process data outside Thailand. Where data is transferred abroad, we will act as the PDPA requires.

12. Children's personal data

This website is not directed at minors and we have not set a minimum age for use. If you are a minor, please make sure a parent or guardian knows before you post a message or contact us. If we learn we have collected a minor's data unlawfully, we will delete it.

13. Policy updates

We may update this policy when the website or the law changes. The last updated date is shown at the top of the page. If a change is material, we will give notice on the website.

14. Company contact and dates

Data controller: Sumbai Solution Co., Ltd. (บริษัท ซัมบาย โซลูชั่น จำกัด)

Sumbai Solution's contact channels: email sumbaisolution.info@gmail.com, phone 081 316 8249 or LINE

This policy is provided for transparency. It is not legal advice and does not guarantee compliance in every case.