Request Audit Brief
Data Protection

Privacy Policy

Our commitment to data privacy, confidentiality, and responsible data governance under the Thailand Personal Data Protection Act (PDPA).

Effective Date: January 15, 2026

1. Introduction & Data Controller

Identity Canvas Core Co., Ltd. (“we”, “us”, or “our”), established and operating in Bangkok, Thailand, respects your privacy and is committed to protecting the personal data of our website visitors, prospective clients, and advisory partners.

This Privacy Policy explains how we collect, process, store, and safeguard personal information when you visit identitycanvascore.digital, submit an advisory brief, or engage our retention consulting services.

  • Data Controller: Identity Canvas Core Co., Ltd.
  • Registered Address: Office 8, 24 Example Road, Bangkok 00000
  • Data Privacy Contact: hello@identitycanvascore.digital

2. Information We Collect

A. Information You Voluntarily Provide

When you submit an audit brief or contact form on our website, we collect:

  • Full name
  • Work email address
  • Selected advisory focus and service interest
  • Application details (platform type, estimated active user tier, project timeline)
  • Detailed message context regarding your analytical scenario

B. Client Telemetry Data (Engagement Specific)

During active consulting engagements, clients may grant our analysts read-only access to anonymized or aggregated event logs, schema documentation, and analytical dashboards. We strictly process client telemetry data within designated secure environments in accordance with our Non-Disclosure Agreement and data processing terms.

C. Automatically Collected Technical Data

When you browse our website, our web servers collect standard technical access logs, including:

  • IP address (anonymized)
  • Browser type and operating system
  • Referral URLs and pages visited
  • Date, time, and duration of requests

3. Purposes & Legal Bases for Processing

We process your data under the following lawful bases:

  1. Performance of a Contract / Pre-Contractual Steps: Processing your inquiry to evaluate audit requirements, prepare formal proposals, and execute advisory agreements.
  2. Legitimate Interests: Operating and maintaining the security of our website, analyzing aggregate visitor traffic, and preventing fraudulent requests.
  3. Legal Compliance: Fulfilling our accounting, corporate taxation, and statutory reporting obligations under the laws of Thailand.

4. Telemetry Confidentiality & Security Measures

We implement robust administrative, technical, and physical safeguards to protect all client information:

  • All data transmitted through our website is encrypted using industry-standard Transport Layer Security (TLS 1.3).
  • Advisory analysts access client event environments using multi-factor authentication and dedicated read-only role credentials.
  • We do not sell, rent, or trade personal data or client telemetry logs to any third party for marketing or advertising purposes.

5. Data Retention Periods

  • Inquiry & Brief Submissions: Retained for up to 24 months to facilitate ongoing communications, after which records are securely purged unless an active engagement ensues.
  • Client Engagement Records: Business contracts, invoices, and audit deliverables are retained for 7 years in accordance with Thai statutory accounting requirements.
  • Access Logs: Server logs are automatically overwritten or deleted after 90 days.

6. Your Data Subject Rights

Under the Thailand Personal Data Protection Act (PDPA B.E. 2562) and applicable international data protection standards (including the GDPR where applicable), you have the right to:

  • Access & Portability: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete personal information.
  • Erasure (“Right to Be Forgotten”): Request deletion of your personal data where retention is no longer necessary.
  • Restriction & Objection: Object to or restrict specific processing activities.
  • Withdraw Consent: Withdraw any consent previously given without affecting prior lawful processing.

To exercise any of these rights, please email your written request to hello@identitycanvascore.digital. We respond to all verified requests within 30 days.

7. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data management practices, please contact our Bangkok office:

Identity Canvas Core Co., Ltd.
Office 8, 24 Example Road, Bangkok 00000
Telephone: +66 2 000 2180
Email: hello@identitycanvascore.digital