1. Introduction

Gorkha Tech Innovation Co., Ltd. (“Gorkha Tech”, “we”, “us”, or “our”) is a digital marketing agency registered in Thailand, operating at City Link Building A, Phetchaburi 35 Alley, Makkasan, Bangkok 10400.

We are committed to protecting the personal data of our website visitors, clients, and contacts. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights under the Thailand Personal Data Protection Act B.E. 2562 (PDPA) and, where applicable, the European General Data Protection Regulation (GDPR).

By using our website (gorkhatech.co.th) or engaging our services, you agree to the terms of this Privacy Policy.

2. Personal Data We Collect

2.1 Information You Provide Directly

When you contact us, request a quote, or sign up for our services, we may collect:

Full name and job title
Email address and telephone number
Company name and business address
Payment information (processed securely via third-party payment providers)
Any other information you voluntarily share in contact forms or emails

2.2 Information Collected Automatically

When you visit our website, we automatically collect:

IP address and approximate geographic location
Browser type, operating system, and device information
Pages visited, time spent on each page, and referring URLs
Cookie data and similar tracking technologies (see Section 6)

2.3 Information from Third-Party Platforms

When we manage your digital marketing accounts on your behalf, we may access data from platforms such as Google Ads, Meta (Facebook/Instagram), Google Analytics, Google My Business, and LINE Official Account. This data is used solely to deliver your contracted services.

3. How We Use Your Personal Data

We use your personal data for the following purposes:

To respond to enquiries and provide quotes for our services
To deliver, manage, and improve our digital marketing, SEO, web development, and paid advertising services
To manage your account, process invoices, and communicate about your campaigns
To send you relevant updates, case studies, and marketing materials (only with your consent)
To comply with legal obligations under Thai law, including the PDPA
To analyse website performance and improve our online presence
To prevent fraud and ensure the security of our systems

4. Legal Basis for Processing

Under the PDPA and GDPR, we process your personal data based on the following lawful grounds:

Contract performance: to fulfil our contractual obligations when you engage our services
Legitimate interests: to improve our services, protect our business, and communicate with prospects
Consent: for marketing communications and cookies — you may withdraw consent at any time
Legal obligation: to comply with applicable Thai laws, tax regulations, and court orders

5. How We Share Your Data

We do not sell, rent, or trade your personal data. We may share your data only in the following circumstances:

5.1 Service Providers

We work with trusted third-party providers who process data on our behalf, including:

Google LLC (Analytics, Ads, Search Console, Workspace)
Meta Platforms Inc. (Facebook Ads Manager, Instagram)
WordPress / WP Engine (website hosting and CMS)
Accounting and invoicing software providers
Cloud storage and project management tools

All service providers are bound by data processing agreements and are required to handle data securely.

5.2 Legal Requirements

We may disclose your data if required to do so by Thai law, court order, or government authority, or to protect the rights, property, or safety of Gorkha Tech, our clients, or the public.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your experience and analyse traffic. The types of cookies we use include:

Essential cookies: required for the website to function (cannot be disabled)
Analytics cookies: Google Analytics — to understand how visitors use our site
Marketing cookies: Google Ads and Meta Pixel — to measure ad performance and retarget visitors
Preference cookies: to remember your settings and language preferences

You can manage your cookie preferences at any time through your browser settings or our cookie consent banner. Withdrawing consent for non-essential cookies will not affect your ability to use our website.

7. International Data Transfers

Some of our third-party service providers are located outside Thailand, including in the United States and the European Union. When we transfer your data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or reliance on providers certified under recognised data protection frameworks.

8. How Long We Keep Your Data

Client account data: retained for the duration of our contract plus 7 years (as required by Thai accounting and tax law)
Enquiry and contact form data: retained for 2 years from the date of last contact
Marketing data (newsletter subscribers): retained until you unsubscribe or withdraw consent
Website analytics data: retained for up to 26 months in Google Analytics
Employee and contractor data: retained as required by Thai labour law

When data is no longer needed, we securely delete or anonymise it.

9. Your Rights Under the PDPA

As a data subject under the Thailand Personal Data Protection Act B.E. 2562, you have the following rights:

Right to be informed: to know how your data is collected and used (this Privacy Policy fulfils this obligation)
Right of access: to request a copy of the personal data we hold about you
Right to rectification: to ask us to correct any inaccurate or incomplete data
Right to erasure: to request deletion of your data where there is no lawful reason to retain it
Right to restrict processing: to request that we limit how we use your data in certain circumstances
Right to data portability: to receive your data in a structured, machine-readable format
Right to object: to object to processing based on legitimate interests or for direct marketing
Right to withdraw consent: to withdraw any consent you have given at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at admin@gorkhatech.co.th. We will respond within 30 days. There is no charge for making a request, unless it is manifestly unfounded or excessive.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include:

SSL/TLS encryption for all data transmitted via our website
Access controls and strong authentication for internal systems
Regular security reviews and software updates
Limiting access to personal data to authorised personnel only

While we take all reasonable steps to protect your data, no method of transmission over the internet is 100% secure. If you have reason to believe your interaction with us is no longer secure, please contact us immediately.

11. Children’s Privacy

Our website and services are not directed at children under the age of 20 (the age of majority in Thailand). We do not knowingly collect personal data from minors. If we become aware that we have collected data from a child without verifiable parental consent, we will delete it promptly.

12. Third-Party Links

Our website may contain links to third-party websites, social media platforms, and partner sites. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policy of any third-party site you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. When we make material changes, we will update the “Last Updated” date at the top of this page and, where appropriate, notify you by email or through a notice on our website.

Your continued use of our website or services after changes are published constitutes your acceptance of the updated policy.

14. How to Make a Complaint

If you believe we have mishandled your personal data, please contact us first at admin@gorkhatech.co.th so we can resolve the issue directly.

If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand:

Website: pdpc.or.th
Email: pdpc@mdes.go.th
Address: Ministry of Digital Economy and Society, Bangkok, Thailand

15. Contact Us

For any questions, requests, or concerns regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer:

Gorkha Tech Innovation Co., Ltd.

Website: gorkhatech.co.th

Address: City Link Building A, Phetchaburi 35 Alley, Makkasan, Bangkok 10400, Thailand

Email: admin@gorkhatech.co.th

Phone: +66-02-107-2448