Privacy policy

Who we are

PORVIX designs, builds and looks after websites for businesses, working from Bangkok, Thailand. For the personal data described in this notice, PORVIX is the data controller: we decide why and how it is used, and we are responsible for looking after it.

This notice covers theporvix.com and the enquiries you send us through it, by email. It doesn’t cover the websites we build for clients — each of those is run by its owner, under its own privacy notice.

For anything to do with your personal data, email hello@theporvix.com.

What we collect

Details you give us

When you use our project enquiry form or free website audit form, we collect what you type in:

• your name and email address
• your phone number
• your company name
• your website address
• what you need and any project details you choose to share.

Only a few of these are required, and each form marks which. The same applies when you email us: we receive what you send, along with your email address.

Our project brief asks for more detail to prepare for our first call: your goals, customers, current website, brand, timing and budget. Everything except your name and email is optional. While you fill it in, your answers are saved in your own browser so you can finish later. They stay on your device until you send the brief, and are removed once it’s sent (including when you send it by email), when you choose “Clear answers”, or after 14 days.

Technical data your browser sends

Like every website, ours is delivered by a hosting provider that receives some basic technical information each time a page loads: your IP address, browser and device type, the page requested, the page you came from, and the date and time. It is used to deliver the site and keep it secure — not to build a profile of you.

What we don’t collect

We don’t ask for ID card numbers, payment details or sensitive personal data — such as health information or religious beliefs — through this website. Please don’t include them in a message.

Why we use it, and our legal basis

The PDPA only allows personal data to be used for a clear reason with a lawful basis. These are ours:

We don’t use your data for advertising, we don’t add you to a mailing list, and we don’t make automated decisions about you. If we ever want to use it for something new, we’ll tell you first and ask for your consent where the law requires it.

Who else sees it

We share personal data only with the service providers that help us run this website and handle messages, and only so they can do that job:

• Our form-handling provider, which receives what you submit through our forms and delivers it to us.
• Our email provider, which stores and delivers our email.
• Our website host, which serves the site and receives the technical data described above.

These providers act on our behalf and receive only what they need to deliver their service.

We will disclose personal data to others only where Thai law requires it — for example, to a court or a regulator. We never sell or rent it.

International transfers

Some of our providers may store or process data on servers outside Thailand. When that happens, we rely on the safeguards the PDPA allows — such as the provider’s contractual data protection commitments, or the destination country having adequate protection — so your data stays protected to the standard Thai law expects.

How long we keep it

We keep personal data only for as long as we need it for your enquiry and any relationship that follows, then delete it.

• Enquiries and audits that don’t lead to a project: kept while the conversation is active and for as long as we reasonably need to follow up, then deleted.
• Clients: kept for the length of the project and any care plan, then deleted — except business records such as contracts and invoices, which we keep for as long as Thai accounting and tax law requires.
• Technical data: kept by our host only as long as it needs it for security and operations.

Cookies and tracking

This website doesn’t use advertising or analytics cookies, and it doesn’t load tracking scripts from other companies. Our fonts and images are served from our own domain, so opening a page doesn’t tell anyone else you were here.

The one thing we store in your browser is your project brief answers while you fill it in, so you don’t lose them. That stays on your device and is never used to track you.

If that changes — for example, if we add analytics to learn which pages help visitors most — we’ll update this notice first and ask for your consent where the law requires it.

How we protect it

• This website is served over an encrypted (HTTPS) connection, so what you type into our forms is protected in transit.
• Only the people handling your enquiry or project can see your details.
• We never ask for passwords through our forms. If a project needs access to your website, we’ll arrange it with you directly.

No system is perfectly secure. If a breach ever affected your personal data and put your rights at risk, we would report it to the Office of the Personal Data Protection Committee and, where the risk is high, tell you — as the PDPA requires.

When we work on your website

If you’re a client and we build or look after your website, we may see personal data that your website collects — enquiries submitted through your forms, for example. We handle it only to do the work you’ve asked for, as a data processor acting on your instructions. You remain the controller of that data and responsible for your own website’s privacy notice. The same applies under our website care plans.

Your rights

Under the PDPA, you have the right to:

• Access Ask for a copy of the personal data we hold about you, and where it came from.
• Correction Ask us to fix anything that is inaccurate, out of date or incomplete.
• Deletion Ask us to delete or anonymise your data when there’s no longer a reason to keep it.
• Objection Object to us using your data where we rely on our legitimate interests.
• Restriction Ask us to pause using your data — for example, while we check a correction.
• Portability Get the data you gave us in a common electronic format, or have it sent to another organisation where possible.
• Withdraw consent Where we rely on your consent, withdraw it at any time. This doesn’t affect anything done before.
• Complain Complain to the Office of the Personal Data Protection Committee if you think we’ve mishandled your data.

To use any of these rights, email hello@theporvix.com. We may need to confirm it’s really you before acting. We’ll acknowledge your request within one business day and respond in full as soon as we can, and within the 30 days the PDPA allows. Some rights have legal limits — we may need to keep invoices, for example — and if we can’t do what you ask, we’ll explain why.

You can also complain to the Office of the Personal Data Protection Committee (PDPC), Thailand’s data protection regulator, at pdpc.or.th (opens in a new tab). We’d appreciate the chance to put things right first.

Changes to this notice

We’ll update this notice when our practices or the law change, and the date at the top will always show the latest version. If a change affects how we use data you’ve already given us, we’ll tell you directly.

Contact us

Questions, requests or concerns about your personal data — we’re happy to help.