Last updated: 15 October 2026 · Issued under the Personal Data Protection Act B.E. 2562 (2019) ("PDPA")
1. Who we are
Octopus1 Company Limited is the data controller for personal data collected through this website. Contact us through the contact form on this website or by post at 111 Prasertmanukitch Road, Khlong Kum, Bueng Kum, Bangkok 10240, Thailand.
2. What we collect
- Details you enter in the contact form: name, company, email, phone number or LINE ID, area of interest and your message.
- Basic technical data needed to run the website securely, such as IP address and browser type, processed by our hosting provider.
We do not ask for sensitive personal data. Please do not include it in your message.
3. Why we use it
| Purpose | Legal basis under the PDPA |
| Reply to your enquiry and arrange a consultation | Steps taken at your request before entering into a contract |
| Keep records of enquiries and improve our services | Our legitimate interests |
| Send occasional updates about our services, only if you tick the box | Your consent |
| Keep the website secure and prevent spam | Our legitimate interests |
4. Who we share it with
We do not sell your personal data. We share it only with service providers that help us run our business, such as Google (form and spreadsheet storage), GitHub (website hosting) and our email and messaging tools, and with government authorities when the law requires it.
5. Transfers outside Thailand
Some of our service providers store data on servers outside Thailand. We only use providers with data protection safeguards that meet the requirements of the PDPA.
6. How long we keep it
We keep enquiry data for up to 2 years after our last contact with you. If you become a client, we keep data for as long as the contract requires and as required by law, such as accounting rules. We keep marketing consent until you withdraw it.
7. Your rights
Under the PDPA, you have the right to:
- access your personal data and get a copy
- ask us to correct inaccurate or incomplete data
- ask us to delete, destroy or anonymize your data
- object to or restrict how we use your data
- receive your data in a readable format or have it sent to another organization
- withdraw your consent at any time, without affecting use before withdrawal
- file a complaint with the Personal Data Protection Committee (PDPC)
To use any of these rights, send us a request through the contact form. We will respond within 30 days.
8. Security
We protect your data with access controls and reputable cloud providers. Only staff who need your data to do their work can access it.
9. Cookies
This website does not use advertising or tracking cookies.
10. Changes to this notice
We may update this notice from time to time. The date at the top shows the latest version.