Privacy notice

Last updated 22 October 2026

About this notice

This notice explains how Somdul (Somdul Sites) collects and uses personal data, under Thailand’s Personal Data Protection Act 2019 (PDPA). For anything about your data, contact us on LINE @772asasb or at hello@somdul.app.

Our customers and people who contact us

We keep your name, phone number, LINE ID, email, business details, the text and photos you send us, our conversations, and your payment history, including what you fill in on our quote form and website details form.

• To quote for, make and look after your website (to carry out our contract with you).
• To issue receipts and keep accounts as tax law requires (legal obligation).
• To tell you about renewals and our service (legitimate interests).

We don’t sell your data or use it for advertising.

Visitors to the websites we make

For messages sent through a business’s website, that business is the data controller and we process the data on its behalf.

• Contact and booking forms: your name, how to reach you, your message and any booking details are emailed to the business and kept for it to read for 12 months, then deleted automatically.
• To stop spam we keep a scrambled one-way form (hash) of your internet address for no more than 24 hours.
• Visitor numbers: no cookies. Visitors are counted once a day using a hash that changes daily, and only totals are kept, so no one can be followed.
• Fonts load from Google Fonts, which sees your internet address. The map and LINE buttons take you to Google or LINE only when you tap them.

Companies that help us

These providers may store or process data outside Thailand, under contracts that protect it:

• Cloudflare: hosting the websites and backups (worldwide).
• Supabase: our database (Singapore).
• Zoho: our email, and the emails that pass on form messages.
• Anthropic: translating website text between Thai and English (the business’s own text only, never visitors’ messages).
• Microsoft or Google: only when we set up business email in your account.

How long we keep it

• Customer and website data: while you’re a customer, and 90 days after.
• Payment records: at least 5 years, as Thai tax and accounting law requires.
• Form messages: 12 months.
• Quote requests that don’t go ahead: 12 months.
• Nightly backups: 30 days.

Your rights

You can ask to see and get a copy of your data, correct it, delete it, limit or object to its use, move it elsewhere, and withdraw consent. Contact us as above and we’ll reply within 30 days; for a message you sent through a business’s website, we pass your request to that business and help it act on it. You can also complain to Thailand’s Personal Data Protection Committee (pdpc.or.th).