Information we collect
When you contact us, we may collect your name, work email, company, enquiry details, and any information you choose to include. Newsletter sign-up collects an email address. Our server provider may process basic request logs such as IP address, browser type, requested page, and timestamp for security and reliability.
During client work, we may receive business contact details and access to product analytics data. The client controls that product data; handling requirements are documented in the engagement agreement. Please do not send sensitive personal data through the website form.
Why we use it
We use enquiry information to respond, assess fit, prepare proposals, and administer an engagement. We use business records to deliver contracted services, invoice, keep appropriate records, protect our rights, and meet legal duties. We send optional updates only where you have requested them or applicable law otherwise permits.
Our legal bases, where applicable, are steps requested before a contract, contract performance, consent, legal obligations, and legitimate interests in operating a secure consulting practice and communicating with prospective clients.
Sharing and international access
We do not sell personal information. Limited information may be processed by service providers supporting hosting, email, file collaboration, scheduling, accounting, or professional advice. They receive only what is reasonably needed and are expected to protect it.
Because we work across time zones and may use global cloud services, information can be processed outside your country. We use appropriate contractual and organisational safeguards where required. We disclose information to authorities only when legally required or needed to protect rights and safety.
Retention and security
Enquiries that do not lead to work are generally retained for up to 24 months so we can follow the conversation and manage business records. Client records are generally retained for the engagement and up to seven years afterwards where needed for tax, legal, or professional purposes. Newsletter data is kept until you unsubscribe. We may retain limited suppression records to respect that request.
We use access controls, account protection, minimisation, and reputable service providers. No internet transmission or storage method can be guaranteed completely secure.
Your choices and rights
Depending on your location, you may ask to access, correct, delete, restrict, or receive a copy of personal information, object to certain use, or withdraw consent. Withdrawal does not affect earlier lawful processing. You may unsubscribe from optional messages at any time.
To make a request, email hello@relayflowbase.digital. We may verify your identity and will respond within the timeframe required by applicable law. You may also complain to Thailand’s Personal Data Protection Committee or your local supervisory authority.
Cookies, children, and changes
See our cookie notice for browser storage choices. Our services are directed to organisations and are not intended for children. We do not knowingly collect children’s personal information through this site.
We may update this notice when our practices or legal obligations change. The date above identifies the latest revision. Privacy questions can be sent to hello@relayflowbase.digital or our Bangkok address.