✦ LEGAL
How WebWiz Studio collects, uses, stores, and shares personal data.
WebWiz Studio (“WebWiz”, “we”, “us”, or “our”), operated by TIKABIT CO., LTD., registration number 0205567049143 , is a digital studio based at 47 Moo 8, Huay Yai, Banglamung, Chonburi 20150, Thailand.
We respect your privacy and are committed to protecting the personal data we process.
This Privacy Policy explains how we collect, use, store, and share personal data when you visit our website, contact us, become a client, or otherwise interact with WebWiz.
We process personal data in accordance with the Thai Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) and, where applicable, the EU General Data Protection Regulation (“GDPR”) and other applicable data protection laws.
The personal data we collect depends on how you interact with us.
This may include:
When you use our website, we may collect limited technical information such as:
For business development purposes, we may collect professional or business-related information that is publicly available, including:
This information may come from company websites, public business registers, business directories, professional platforms, search engines, referrals, or other legitimate public sources.
We use such information only for legitimate business purposes and in accordance with applicable privacy, electronic communications, and direct marketing laws.
We may use personal data to:
We do not sell personal data.
We also do not use personal data for unrelated advertising or marketing purposes where consent or another lawful basis is required and has not been obtained.
Depending on the circumstances and applicable law, we process personal data on one or more of the following legal bases:
We process information when necessary to respond to a request, prepare a quotation or proposal, enter into a contract, or provide services that you or your organisation have requested.
We may process personal data where reasonably necessary for our legitimate business interests, including:
We consider the impact on your privacy before relying on legitimate interests and do not rely on this basis where your rights and interests override ours.
We rely on consent where we specifically ask you to agree to a particular type of processing, for example certain optional cookies or marketing activities where consent is legally required.
Where processing is based on consent, you may withdraw your consent at any time.
We may process or retain information where necessary to comply with applicable laws, regulations, tax requirements, accounting obligations, court orders, or lawful requests from authorities.
Our website may use cookies and similar technologies.
Some cookies are necessary for the website to function correctly. Others may help us understand website usage, remember preferences, measure performance, or improve our services.
Where required by law, non-essential cookies will not be activated until you provide your consent.
If analytics services such as Google Analytics or similar tools are enabled on our website, they may collect technical and usage information such as pages visited, device information, approximate location, and interactions with the website.
You can manage your cookie preferences through our cookie settings where available, and you can also control cookies through your browser settings.
Disabling certain cookies may affect some website functionality.
We use third-party providers to help operate our business and deliver services.
Depending on the service or project, these may include providers of:
We only provide third parties with personal data where reasonably necessary for the relevant purpose.
Where a provider processes personal data on our behalf, we take reasonable steps to ensure appropriate contractual, organisational, and security protections are in place.
Some providers may also act as independent data controllers for parts of their services and will process personal data according to their own legal obligations and privacy policies.
When WebWiz provides website development, e-commerce, booking systems, integrations, CRM, automation, hosting, maintenance, or technical support services, we may process personal data belonging to our client’s customers, employees, users, or other individuals.
In these situations, the client will generally determine why and how the personal data is processed and will therefore normally act as the Data Controller, while WebWiz may act as a Data Processor acting on the client’s instructions.
Where appropriate, this processing will be governed by our service agreement, a Data Processing Agreement (“DPA”), or other applicable contractual terms.
We do not use personal data processed on behalf of a client for our own unrelated purposes.
We may disclose personal data:
We do not disclose personal data to unrelated third parties except where there is a lawful reason to do so.
WebWiz is based in Thailand and may use service providers located in Thailand and other countries.
As a result, personal data may in some circumstances be processed or stored outside the country in which it was originally collected, including outside Thailand or the European Economic Area (“EEA”).
Where international transfers are subject to data protection requirements, we take reasonable steps to ensure an appropriate level of protection.
Where the GDPR applies, this may include using approved contractual safeguards such as Standard Contractual Clauses or another lawful transfer mechanism where required.
Where the Thai PDPA applies, international transfers will be handled in accordance with applicable requirements concerning transfers of personal data outside Thailand.
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, contractual, security, and dispute-resolution requirements.
Retention periods depend on the type of information and the reason it is processed.
For example:
When personal data is no longer required, we will delete, anonymise, or securely dispose of it unless continued retention is legally required.
We use reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, access, or misuse.
Depending on the circumstances, these measures may include access controls, authentication, encryption, backups, software updates, secure hosting, confidentiality requirements, and restricted access to client systems.
However, no internet transmission, software system, or storage method can be guaranteed to be completely secure.
If we become aware of a personal data breach, we will assess the incident and take appropriate action in accordance with applicable law.
Depending on the applicable law and circumstances, you may have the right to:
These rights are not absolute and may be subject to legal exceptions.
To exercise a privacy right, contact us using the details in Section 15. We may need to verify your identity before fulfilling certain requests.
If the Thai PDPA applies, you may also have the right to lodge a complaint with the Personal Data Protection Committee or other competent authority in Thailand.
Where the GDPR applies, you may have the right to lodge a complaint with the competent supervisory authority in the relevant EU or EEA country.
Our website and services are primarily intended for businesses and adults.
We do not knowingly collect personal data from children where parental or guardian consent would be legally required.
If you believe a child has provided personal data to us without appropriate authorisation, please contact us so that we can review and, where appropriate, delete the information.
We may update this Privacy Policy from time to time to reflect changes to our services, technology, business practices, or legal requirements.
The latest version will be published on this page and identified by the Last updated date at the top.
If we make material changes that significantly affect how personal data is processed, we may provide additional notice where appropriate.
If you have questions about this Privacy Policy, how we process personal data, or wish to exercise your privacy rights, please contact:
You can also contact us through the contact methods provided on webwiz.studio.