1. Introduction

Pocavalley, operated by Skillsauce.Tech Co., Ltd. ("we," "us," or "our"), is committed to protecting the privacy and personal data of our clients, website visitors, and business partners. This Privacy Policy explains how we collect, use, disclose, and protect your personal data in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA") and other applicable laws.

By using our website and services, you acknowledge that you have read and understood this Privacy Policy.

2. Data We Collect

We may collect the following categories of personal data:

Identity Data

• Full name, job title, and company name
• Email address, phone number, and business address

Technical Data

• IP address, browser type, operating system
• Pages visited, time spent, referral source
• Device identifiers and cookie data

Business Data

• Consultation requests and assessment responses
• Project requirements and engagement history

3. How We Use Your Data

We process your personal data for the following purposes:

• To provide and improve our AI consulting services
• To respond to inquiries and consultation requests
• To send relevant industry insights and service updates (with your consent)
• To analyze website usage and improve user experience
• To comply with legal obligations and regulatory requirements
• To protect our legitimate business interests

4. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience:

• Essential Cookies: Required for website functionality (session, security)
• Analytics Cookies: Help us understand how visitors use our site (Google Analytics)
• Marketing Cookies: Used to deliver relevant content and measure campaign effectiveness
• Preference Cookies: Remember your language and display preferences

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

5. Data Sharing & Disclosure

We do not sell your personal data. We may share your data with:

• Cloud service providers (AWS, Google Cloud) for hosting and processing
• Analytics providers for website performance insights
• Professional advisors (legal, accounting) when required
• Government authorities when required by law or court order

All third-party processors are contractually bound to protect your data and process it only as instructed.

6. Your Rights Under PDPA

Under Thailand's PDPA, you have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data we hold
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal obligations)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw previously given consent at any time

To exercise any of these rights, please contact our Data Protection Officer.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by applicable laws. Typical retention periods:

• Client engagement data: Duration of relationship + 5 years
• Website analytics: 26 months
• Marketing consent records: Duration of consent + 1 year
• Legal/tax records: As required by Thai law (typically 5-10 years)

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS 1.3) and at rest
• Access controls and authentication for internal systems
• Regular security assessments and vulnerability testing
• Employee training on data protection and privacy

9. Contact Our Data Protection Officer

If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via our website or email. The "Last Updated" date at the top reflects the most recent revision.