Privacy Policy

1. Introduction

Umbra Logic ("we", "us", "our") is committed to protecting the privacy of individuals who visit our website, use our services, or otherwise interact with us. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with Thailand's Personal Data Protection Act (PDPA) B.E. 2562 (2019).

This policy applies to all personal data processed through our website at https://umbraonvre.live and through our consulting engagements. If you have questions about this policy, please contact us at [email protected].

2. Data Controller

The data controller responsible for your personal data is Umbra Logic, located at 159 Phahonyothin Road, Sam Sen Nai, Phaya Thai, Bangkok 10400, Thailand. You can reach us at [email protected] or by phone at +66 2 279 3461.

3. Data We Collect

We may collect the following categories of personal data:

Information you provide directly: When you submit a contact form, send us an email, or engage our services, we may collect your name, email address, phone number, company name, job title, and any information included in your message.

Information collected automatically: When you visit our website, we may collect technical data such as your IP address, browser type, operating system, referring URLs, pages visited, and time spent on our site. This data is collected through cookies and similar technologies.

Engagement-related data: During consulting engagements, we may process business data provided by clients for the purpose of delivering our services. This data is governed by separate data processing agreements.

4. How We Use Your Data

We process your personal data for the following purposes:

Service delivery: To respond to inquiries, provide consulting services, and communicate about ongoing engagements.

Website improvement: To understand how visitors use our website and to improve its functionality and content.

Communication: To send relevant information about our services when you have given consent or where we have a legitimate interest in doing so. You may opt out at any time.

Legal compliance: To comply with applicable laws and regulations, including the PDPA.

5. Legal Basis for Processing

We process personal data under the following legal bases as defined by the PDPA: your consent (where explicitly obtained), contractual necessity (to fulfill our service obligations), legitimate interest (for website analytics and business communications), and legal obligation (where required by Thai law).

6. Data Sharing

We do not sell your personal data. We may share your data with trusted third-party service providers who assist us in operating our website and delivering our services, including cloud hosting providers, analytics services (such as Google Analytics), and email communication platforms. All third parties are required to handle your data in accordance with this policy and applicable data protection laws.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy. Contact form submissions are retained for up to 24 months. Engagement-related data is retained for the duration of the engagement plus 36 months. Website analytics data is retained for up to 14 months. When data is no longer needed, it is securely deleted or anonymized.

8. Data Protection Measures

We implement appropriate technical and organizational measures to protect your personal data, including encryption of data in transit and at rest, access controls restricting data to authorized personnel, regular security reviews of our systems, and secure disposal of data when no longer needed. While we take reasonable precautions, no method of transmission over the internet is completely secure.

9. Cookies

Our website uses cookies to improve your browsing experience and to collect analytics data. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

10. Your Rights

Under the PDPA, you have the following rights regarding your personal data:

Right to access: You may request a copy of the personal data we hold about you.

Right to rectification: You may request that we correct inaccurate or incomplete data.

Right to erasure: You may request that we delete your personal data in certain circumstances.

Right to data portability: You may request a copy of your data in a structured, machine-readable format.

Right to object: You may object to the processing of your data based on legitimate interest.

Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. You also have the right to lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) of Thailand.

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies before providing any personal data.

12. Children's Privacy

Our services are designed for business organizations and are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a minor, we will take steps to delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Umbra Logic
159 Phahonyothin Road, Sam Sen Nai, Phaya Thai, Bangkok 10400
Email: [email protected]
Phone: +66 2 279 3461