Privacy Policy

Last Updated: January 20, 2026

Introduction

Obvex is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage our consulting services.

By using our website or services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

For questions about this Privacy Policy or our data practices, please contact us at [email protected].

Information We Collect

Personal Data

We collect personal information that you provide directly to us, including:

  • Name and contact information (email address, phone number, business address)
  • Company or organization name and position
  • Communication preferences
  • Any other information you choose to provide when contacting us or using our services

Automatically Collected Information

When you access our website, we automatically collect certain information about your device, including:

  • IP address and browser type
  • Operating system and device information
  • Pages visited and time spent on pages
  • Referring website addresses
  • Cookies and similar tracking technologies (see our Cookie Policy for details)

How We Use Your Information

We use the information we collect for the following purposes:

  • To provide and maintain our consulting services
  • To respond to your inquiries and communicate with you
  • To send you information about our services, updates, and relevant business information
  • To improve our website and services based on your feedback and usage patterns
  • To protect against fraudulent or illegal activity
  • To comply with legal obligations and enforce our terms

Legal Basis for Processing

We process your personal data based on:

  • Consent: When you provide explicit consent for specific processing activities
  • Contract: When processing is necessary to fulfill our contractual obligations to you
  • Legitimate Interest: When we have a legitimate business interest that does not override your privacy rights
  • Legal Obligation: When we must process data to comply with applicable laws

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

  • Service Providers: With trusted third-party vendors who assist us in operating our website and providing services (e.g., hosting providers, analytics services)
  • Professional Advisors: With legal, financial, or other professional advisors when necessary for business operations
  • Legal Requirements: When required by law, court order, or governmental authority
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, subject to confidentiality obligations

All third parties with whom we share data are required to maintain appropriate security measures and use your information only for the purposes for which it was disclosed.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit using SSL/TLS protocols
  • Secure server infrastructure with regular security updates
  • Access controls limiting data access to authorized personnel only
  • Regular security assessments and monitoring
  • Staff training on data protection and privacy practices

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Retention periods vary based on:

  • The nature of the information collected
  • The purpose for which it was collected
  • Legal, regulatory, or contractual requirements
  • Our legitimate business interests

Typically, we retain client engagement data for seven years following the conclusion of services. Marketing communications data is retained until you opt out or request deletion.

Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Right to Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data under certain circumstances
  • Right to Restriction: Request limitation of processing of your data
  • Right to Data Portability: Request transfer of your data to another service provider
  • Right to Object: Object to processing based on legitimate interests or direct marketing
  • Right to Withdraw Consent: Withdraw previously given consent at any time

To exercise these rights, please contact us at [email protected]. We will respond to your request within 30 days.

You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your personal data appropriately.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website usage. Cookies are small text files stored on your device when you visit our website.

We use the following types of cookies:

  • Essential Cookies: Necessary for basic website functionality
  • Analytics Cookies: Help us understand how visitors use our website
  • Marketing Cookies: Track your online activity to deliver relevant advertising

For detailed information about our cookie practices and how to manage your preferences, please see our Cookie Policy.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction.

When we transfer personal data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions by relevant authorities, to protect your information in accordance with this Privacy Policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. We will notify you of any material changes by:

  • Posting the updated policy on our website with a revised "Last Updated" date
  • Sending an email notification to registered users
  • Displaying a prominent notice on our website

Your continued use of our services after changes become effective constitutes acceptance of the updated Privacy Policy.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Obvex

77/9 Phetkasem Road

Hat Yai, Songkhla 90110

Thailand

Email: [email protected]

Phone: +66 74 362 581