Data Protection & Privacy

Privacy Policy

How Mind Vertex Core Co., Ltd. collects, manages, and safeguards personal information and client telemetry data.

1. Data Controller Identification

This Privacy Policy applies to personal data collected and processed by Mind Vertex Core Co., Ltd. (“Mind Vertex Core”, “we”, “us”, or “our”), acting as the Data Controller in accordance with the Personal Data Protection Act B.E. 2562 (2019) of Thailand (PDPA) and international privacy frameworks.

  • Data Controller: Mind Vertex Core Co., Ltd.
  • Registered Address: Office 11, 19 Sample Street, Phuket 00000, Thailand
  • Privacy Contact Email: info@mind-vertexcore.click
  • Direct Phone: +66 76 000 218

2. Personal Information We Collect

We collect information only when voluntarily submitted through our inquiry forms or during formal diagnostic engagements:

  1. Inquiry & Contact Details: Full name, business email address, company name, phone number, and project descriptions provided via our contact form.
  2. Session Audit Data: When commissioned for an audit, we may process client-provided telemetry records, sanitized session replays, device metadata, and aggregated event timestamps. We strictly require all clients to mask any Personally Identifiable Information (PII) before granting access.
  3. Technical Website Telemetry: IP address, browser type, operating system, referring URL, and session interaction timestamps when browsing https://mind-vertexcore.click/.

3. Lawful Basis & Purposes for Processing

We process personal data based on the following lawful grounds:

  • Contractual Performance: To evaluate project requirements, prepare audit proposals, and deliver commissioned session behavior diagnostic reports.
  • Legitimate Interests: To maintain website security, prevent fraudulent submissions, and improve our diagnostic methodologies.
  • Consent: Where you have provided clear consent for specific communications or non-essential cookie tracking.
  • Legal Compliance: To maintain business records and comply with tax and statutory requirements under Thai law.

4. Anonymization & Session Telemetry Handling

When conducting session teardowns and interaction audits:

  • We never store unmasked passwords, credit card credentials, or personal identity numbers.
  • Session replay recordings evaluated during audits are accessed through secure, access-controlled channels.
  • Research video clips included in final client deliverables are trimmed, annotated, and sanitized to ensure end-user anonymity.

5. Data Retention Schedule

  • Contact Inquiries: Retained for up to 24 months from the last active correspondence unless an active commercial engagement ensues.
  • Client Audit Telemetry & Recordings: Deleted or de-identified within 60 days following the completion of the final audit walkthrough and project sign-off.
  • Accounting & Contractual Records: Retained for 7 years in compliance with the Thai Revenue Code and commercial accounting standards.

6. International Data Transfers

As our practice operates in Thailand while serving international enterprise clients, personal data may be processed on secure cloud infrastructure located in compliant jurisdictions. All cross-border data transfers are safeguarded with appropriate technical safeguards and Standard Contractual Clauses (SCCs).

7. Your Statutory Rights

Under the Thailand PDPA and applicable international privacy legislation, you have the right to:

  • Right to Access: Request a copy of the personal data we hold concerning you.
  • Right to Rectification: Request correction of inaccurate or incomplete information.
  • Right to Erasure (Right to be Forgotten): Request the deletion of your personal data under certain statutory conditions.
  • Right to Restriction & Objection: Object to or restrict the processing of your personal data.
  • Right to Data Portability: Request transfer of your data in a structured, machine-readable format.
  • Right to Withdraw Consent: Withdraw previously granted consent at any time without affecting prior lawful processing.

To exercise any of these rights, submit a written request to info@mind-vertexcore.click. We will respond within 30 calendar days.

8. Updates to This Policy

We may periodically revise this Privacy Policy to reflect evolving regulatory requirements. The latest version is always published at https://mind-vertexcore.click/privacy/ with the effective revision date.