Privacy Policy

Last Updated: August 28, 2026

WebWork Base Co., Ltd. (“WebWork Base,” “we,” “us,” or “our”) values your privacy and is committed to protecting your personal information. This Privacy Policy explains our practices regarding the collection, storage, processing, and protection of data collected through our website webworkbase.digital and during our consulting engagements.

1. Data Controller Information

The data controller responsible for your personal data is:

WebWork Base Co., Ltd.
Office 8, 67 Test Road, Hat Yai 00000, Thailand
Registration Country: Thailand
Contact Email: hello@webworkbase.digital
Telephone: +66 74 000 630

2. Information We Collect

A. Information You Provide Directly

• Consultation & Contact Inquiries: When you submit a brief via our contact form, we collect your full name, business email address, application tech stack details, and project description.
• Client Engagement Data: During active consulting engagements, we collect billing contact details, company registration data, and communication records.

B. Technical & Operational Log Data

When you navigate our website, our web servers automatically log standard technical requests, including:

• Anonymized IP addresses
• Browser type and operating system
• Requested URLs and timestamps
• Referrer headers

We do not collect sensitive personal data such as biometric data, health records, or political affiliations.

3. How We Use Your Data

We process personal data strictly for legitimate operational purposes:

1. Responding to Inquiries: To evaluate project briefs and schedule advisory consultations.
2. Executing Consulting Services: To deliver telemetry audits, event dictionaries, and retention analyses under contract.
3. Invoicing & Compliance: To fulfill statutory accounting, taxation, and corporate governance requirements in Thailand.
4. Site Security & Reliability: To monitor technical server performance and prevent malicious network activity.

We do not sell, rent, monetize, or trade your personal information to third-party advertisers or data brokers.

4. Legal Basis for Processing

We process personal information under the following legal bases:

• Contractual Necessity: Processing required to enter into or perform a consulting contract with you.
• Legitimate Interests: Operating our professional practice, maintaining data security, and responding to business inquiries.
• Legal Obligation: Fulfilling statutory tax and accounting obligations under Thai law.
• Consent: Where you have explicitly granted consent (such as non-essential analytical cookies).

5. Data Retention & Erasure

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Inquiry Communications: Retained for up to 12 months after the last communication.
• Client Engagement & Deliverable Archives: Retained for up to 5 years following project completion to support ongoing governance and warranty inquiries.
• Financial & Invoicing Records: Retained for 7 years in accordance with Thai statutory accounting standards.

6. International Data Transfers & Safeguards

As an international consultancy headquartered in Thailand, we may collaborate with clients and utilize secure cloud infrastructure hosted in various global jurisdictions. Whenever data is transferred internationally, we implement strict technical safeguards, including TLS 1.3 encryption in transit, AES-256 encryption at rest, and standardized data protection agreements.

7. Your Statutory Privacy Rights

Depending on your jurisdiction, you may exercise the following rights regarding your personal information:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal records.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data where retention is no longer legally required.
• Right to Restrict Processing: Request limitation of data processing under specific circumstances.
• Right to Object: Object to data processing based on legitimate interest grounds.
• Right to Data Portability: Request transfer of your data in a structured, machine-readable format.

To exercise any of these rights, contact us at hello@webworkbase.digital. We respond to verified requests within thirty (30) days.

8. Updates to This Privacy Policy

We may periodically update this policy to reflect modifications in our operational practices or legal requirements. Material updates will be indicated by the “Last Updated” date at the top of this page.