Privacy Policy

What personal data Klickode collects through this website and the client workspace, why, who processes it, how long it is kept and your rights under Thailand’s PDPA.

Who we are

Klickode Studio is a website design and development studio in Bangkok, Thailand. We decide how the personal data described here is used (the "data controller" under Thailand’s Personal Data Protection Act B.E. 2562, "PDPA").

Questions or requests about your data: write to klickode@gmail.com.

What we collect and why

When you send the contact form:

• your name, email, and — if you give them — phone number, company, the service you’re interested in, budget and your message;
• which page you sent it from and how you found us (for example a Google ad or another website’s link);
• a scrambled (hashed) form of your internet address, kept for one day, only to stop spam and repeated sending;
• a spam check (Cloudflare Turnstile) that looks at your browser and connection to tell people from automated programs. It sets no advertising cookies.

We use this to answer you and prepare a quote — steps you asked for before any contract (PDPA section 24(3)).

When you are our client and use the client workspace:

• the contact details of the people who sign in, and the time of their last sign-in;
• what you and our team share there: messages (including voice messages you record), files and pictures, approvals, change requests and invoices;
• contracts you sign there: the name you type, the signature you draw, the date and time, and your device’s internet address and browser at the moment of signing, kept with the contract as proof of what was agreed.

We use this to deliver the project we agreed (PDPA section 24(3)) and keep invoices as Thai accounting law requires (section 24(6)).

When you work with us as a freelancer and use the freelancer workspace: your name, contact details and skills, where your pay goes, the tasks you do, your messages and files on them, the hours you log and the pay per task, and the time of your last sign-in. We use this to work together and pay you (PDPA section 24(3)) and keep payment records as Thai accounting law requires (section 24(6)).

Website statistics, only if you accept cookies: Google Analytics counts pages viewed, the device and browser, and the approximate area you visit from. We use it to see which pages help visitors (your consent, PDPA section 19). You can change your choice at any time.

Stored only in your own browser: your theme, language and cookie choice, and — in the client workspace — your sign-in session. These are not used to track you.

Who else handles it

We don’t sell your data or share it for advertising. These service providers process it for us, only to run the services below:

• Supabase — our database, file storage and sign-in;
• Cloudflare — the spam check on the contact form (Turnstile);
• Vercel — hosts the website;
• Google Analytics — website statistics, only with your consent;
• Resend (email) and LINE (messaging) — tell our team about a new enquiry or when a client acts in the workspace, with the details of that enquiry or action;
• Google Sheets — a private spreadsheet our team may use to keep track of enquiries.

Some of these providers store or process data outside Thailand. We use established providers that protect data with safeguards required by the PDPA.

How long we keep it

• Enquiries: as long as needed to answer and follow up, or until you ask us to delete them.
• Client projects: for the project and afterwards while you may need support; invoices for as long as Thai accounting and tax law requires.
• Freelancer records: while we work together; payment records for as long as Thai accounting and tax law requires.
• Signed contracts and their signing details: while the agreement applies, and afterwards for as long as they may be needed as evidence or the law requires.
• Scrambled internet addresses used against spam: one day.
• Automatic backups of our database: 30 days.
• Website statistics: according to our Google Analytics retention setting.

Your rights

Under the PDPA you can ask us to:

• show you and give you a copy of the data we hold about you;
• correct it, or delete it;
• stop or limit using it, or object to how we use it;
• send it to you or another company in a common format.

You can withdraw your cookie consent at any time with Cookie settings. To use any other right, write to klickode@gmail.com; we reply within 30 days. If you think we have handled your data wrongly, you can also complain to the Office of the Personal Data Protection Committee (PDPC).

How we protect it

Every connection is encrypted. Only our team can open enquiries and client records, and each person sees only what their role needs; clients see only their own projects. Team accounts can use two-step verification, and changes are recorded in an activity log.

Changes to this policy

When we change how we use personal data, we update this page and the date at the top.

Klickode · Bangkok, Thailand · klickode.com