Privacy Policy

This Privacy Policy explains how Monitor PulsePoint Co., Ltd. (“Monitor PulsePoint”, “we”, “us”, or “our”), with registered office at Office 8, 28 Test Avenue, Pattaya 00000, Thailand, collects, uses, and safeguards information gathered through our website (monitor-pulsepoint.digital) and in connection with our analytical advisory engagements.

1. Data Controller Identification

The designated data controller responsible for personal information processed under this policy is:

Monitor PulsePoint Co., Ltd.
Office 8, 28 Test Avenue, Pattaya 00000, Thailand
Corporate Registration: Kingdom of Thailand
Direct Telephone: +66 38 000 985
Data Privacy Desk: hello@monitor-pulsepoint.digital

2. Information We Collect

A. Information You Voluntarily Provide

When you submit a consultation request, request a sample report, or correspond with our advisory desk, we collect:

• Professional contact details: full name, business email address, job title, and organization name.
• Project specifications: application platform, estimated monthly active user (MAU) volume, current data infrastructure, and specific analytical questions.

B. Analytical Engagement Telemetry

In the course of performing advisory audits, we may access anonymized or pseudonymized event logs and database replicas provided by clients. We strictly mandate that clients omit or sanitize end-user Personally Identifiable Information (such as names, national IDs, credit card numbers, or plain-text email addresses) prior to data transfer.

C. Technical Web Data

When you navigate our website, our web servers collect standard, non-identifying technical metadata including IP addresses (anonymized), browser types, operating systems, referring URLs, and basic navigation timestamps to ensure site security and performance.

3. Purposes & Legal Bases for Processing

We process collected information for the following lawful purposes:

1. Contract Negotiation & Performance: To evaluate analytical project requirements, deliver formal proposals, perform agreed cohort retention audits, and provide executive briefings.
2. Client Communication & Invoicing: To respond to commercial inquiries, issue statutory tax invoices, and maintain accounting records under Thailand commercial law.
3. Security & Infrastructure Integrity: To protect our website and systems against malicious activity, unauthorized access, and denial-of-service attempts.
4. Legal Compliance: To comply with statutory obligations under the Thai Personal Data Protection Act (PDPA B.E. 2562) and other relevant regulatory requirements.

4. Data Storage, Security & International Transfers

• Encryption in Transit & at Rest: All client correspondence and project artifacts are transmitted using TLS 1.3 encryption and stored in encrypted storage volumes with strict role-based access controls.
• Isolated Project Environments: Telemetry logs and SQL transformation staging schemas for each client are maintained in strictly isolated sandboxes with zero cross-tenant contamination.
• International Transfers: Where client data is accessed or processed across international borders (for example, between our Pattaya headquarters and client engineering teams in Singapore, Japan, or Europe), we implement standard contractual data protection clauses to guarantee adequate safeguards.

5. Data Retention Schedule

• Consultation Inquiries: Retained for up to twenty-four (24) months following last correspondence, unless a formal client engagement is initiated.
• Client Engagement Telemetry: Sanitized event logs and temporary staging tables are permanently purged from our secure compute instances within thirty (30) days of final dossier acceptance, unless a continuing monthly retainer agreement is in effect.
• Financial & Statutory Records: Invoices and commercial contracts are retained for seven (7) years in compliance with Thai Revenue Code and corporate accounting requirements.

6. Your Statutory Privacy Rights

Under applicable data protection legislation (including the Thailand PDPA and applicable international privacy standards), you have the right to:

• Access & Review: Request confirmation and copies of personal data we maintain concerning you.
• Rectification: Request correction of inaccurate, outdated, or incomplete personal information.
• Erasure: Request deletion of your personal data where retention is no longer necessary for our lawful purposes.
• Restriction & Objection: Object to or request restriction of data processing based on legitimate interests.
• Data Portability: Request transfer of your provided data in a structured, commonly used format.

To exercise any of these statutory rights, please submit a written request to our Data Privacy Desk at hello@monitor-pulsepoint.digital. We will verify your identity and respond within thirty (30) calendar days.

7. Updates to This Policy

We may periodically revise this Privacy Policy to reflect operational or regulatory changes. Any modifications will be posted to this page with an updated effective date.