Privacy Policy

1. Data controller

GOOD DEV Co., Ltd. is the data controller for personal data collected through this website. You can reach us about personal data at the email in "Contact us" below.

2. Personal data we collect

We only collect what we need:

• Contact form details: full name, email, phone number, company, services of interest, budget and project description.
• Information you send us by email, phone or other channels while discussing a project.
• Technical data generated when you visit, such as IP address, browser type and the page you submitted the form from.
• Website usage data (only with your consent), such as pages viewed, buttons clicked, traffic source, device type and approximate location, via Google Analytics.

3. Purposes and lawful bases

We will not send you marketing messages without your prior consent.

• Replying to you, answering questions, estimating and quoting at your request (pre-contractual steps).
• Managing projects and delivering services under our agreement (contract).
• Preventing spam and abuse and keeping our systems secure (legitimate interests).
• Analysing website usage to improve our content, services and marketing, only if you accept cookies (consent).
• Complying with the law, such as tax and accounting rules (legal obligation).

4. Cookies and browser storage

We use Google Analytics (via Firebase), which sets analytics cookies such as _ga to understand overall website usage. These cookies only run after you click "Accept" on the cookie banner, and you can change your mind at any time via "Cookie settings" in the footer.

We store your language choice (Thai/English) and cookie preference in your browser’s Local Storage for convenience; you can clear them at any time in your browser settings. We do not use advertising cookies.

The site loads fonts from Google Fonts and icons from the Lordicon CDN. These providers may receive your IP address as part of normal internet operation.

5. Disclosure

We never sell, rent or trade your personal data. We may share it only as necessary with:

• Service providers processing data on our behalf, such as Google Firebase (database, hosting and Google Analytics) and Google Workspace (email), under appropriate data protection standards.
• Government authorities or persons legally entitled to it, where the law requires.

6. International transfers

Our database is hosted on Google Cloud in Singapore (asia-southeast1), and our providers may process data in other countries. We use providers with adequate personal data protection safeguards as required by the PDPA.

7. Retention

Contact-form data that does not lead to a contract is kept for up to 2 years from your last contact. Contract and accounting records are kept for the period required by law (generally up to 10 years), after which they are deleted or anonymised.

8. Security

Data is encrypted in transit (HTTPS) and at rest. Database rules prevent public reads, and access is limited to the staff who need it.

9. Your rights

Under the PDPA you have the following rights. Email us below and we will respond within 30 days.

• Access your data and obtain a copy.
• Correct inaccurate or outdated data.
• Have your data deleted, destroyed or anonymised.
• Restrict the use of your data.
• Object to processing.
• Data portability.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the Personal Data Protection Committee (PDPC).

10. Minors

Our services are aimed at businesses and adults. We do not knowingly collect data from minors under 20 without consent from a parent or guardian.

11. Changes to this policy

We may update this policy from time to time. The latest version is always on this page with its update date, and we will announce material changes on the website.