Privacy Policyนโยบายความเป็นส่วนตัว

This website, eleven-a.io, is operated by eleven-a ("we", "us"). We are the data controller for personal data collected through this website, as defined by Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA").

This policy covers this website only. Our apps and the systems we build for clients have their own notices (see section 9).

This website has no user accounts and no forms. We collect personal data only in these cases:

• When you contact us by email, LINE or phone: your name, contact details, company (if given) and the content of your message.
• Analytics, only if you accept analytics cookies: pages visited, time on page, referring site, device and browser type, approximate location (city/country) and a random identifier stored in a cookie, collected through Google Analytics.
• Preferences on your device: your theme, language and cookie choice are saved in your browser's local storage. They stay on your device and are not sent to us.
• Server logs: our hosting servers record standard technical data (IP address, date and time, page requested, browser) for security and troubleshooting.

We do not knowingly collect sensitive personal data (such as health, religion or biometric data). Please do not send it to us.

• To reply to your inquiry and prepare quotations: our legitimate interest, or steps you asked for before entering a contract.
• To provide services you have engaged us for: performance of a contract.
• To understand and improve how the website is used (analytics): your consent, which you can withdraw at any time.
• To keep the website secure and prevent abuse: our legitimate interest.
• To comply with the law, court orders or requests from authorities: legal obligation.

We do not sell your personal data, and we do not use it for advertising or automated decision-making.

We share personal data only as needed with:

• Service providers that run the site and our communications for us, such as hosting, email and messaging providers.
• Google LLC, for Google Analytics, only if you have accepted analytics cookies.
• Professional advisers, or government authorities and courts when the law requires it.

These providers may process data outside Thailand, including in the United States. Where that happens we rely on the safeguards the PDPA allows, such as the provider's standard contractual protections.

• Inquiries that do not lead to a contract: up to 2 years after our last contact.
• Client and contract records: for the contract term plus the period required by Thai accounting, tax and civil law (generally up to 10 years).
• Analytics data: up to 14 months in Google Analytics.
• Server logs: up to 90 days, unless needed to investigate a security incident.

After that we delete or anonymise the data.

Under the PDPA you have the right to:

• withdraw your consent at any time (for analytics, use “Cookie settings” in the footer);
• access and get a copy of your personal data, and ask how we obtained it;
• receive your data in a commonly used format, or have it sent to another controller;
• object to processing based on our legitimate interest;
• have your data deleted, destroyed or anonymised;
• restrict our use of your data;
• have inaccurate or incomplete data corrected;
• complain to the Office of the Personal Data Protection Committee (PDPC), www.pdpc.or.th.

To use these rights, email it-support@eleven-a.io. We will reply within 30 days. We may ask you to confirm your identity first, and some rights are limited by law.

We use reasonable technical and organisational measures to protect personal data, including HTTPS encryption, access control and keeping systems up to date. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach is likely to put your rights at risk, we will notify the PDPC and, where required, you, as the PDPA requires.

This website is meant for businesses and adults. We do not knowingly collect personal data from anyone under 20 (the age of majority in Thailand) without a parent's or guardian's consent. If you believe a minor has sent us personal data, contact us and we will delete it.

Mooban Connect, utilitech.io and other products have their own privacy policies, shown in the app or on their own website and app store listings.

When we build or maintain a system for a client, the client is the data controller for the data in that system and we process it only on their instructions, under our agreement with them. Questions about such data should go to that client first.

We may update this policy from time to time. The new version applies from the date shown at the top of this page. If a change is significant, we will make it clear on this website.

For any question about this policy or your personal data, email it-support@eleven-a.io or see our contact page. See also our Cookie Policy and Terms of Use.