What Information We Collect

When you interact with our services, we collect different types of information depending on what you need from us. Here's what that typically includes:

Information You Give Us Directly

• Contact details like your name, email address, phone number, and business address
• Company information when relevant to the services we provide
• Project requirements, preferences, and any specific requests you share
• Payment information needed to process invoices (though financial data is handled by secure third-party processors)
• Communication records from emails, calls, or meetings we have with you

Information We Collect Automatically

When you visit our website, we collect some technical data to help us understand how people use the site and improve the experience:

• Browser type, device information, and operating system
• IP address and general location (city/region level, not exact coordinates)
• Pages you visit, time spent on site, and how you navigate through content
• Referral sources that brought you to our website

How We Use Your Information

We use the information we collect for straightforward business purposes. Nothing surprising or hidden.

• Delivering the website content creation and management services you hire us for
• Communicating with you about projects, timelines, and deliverables
• Processing payments and maintaining accurate financial records
• Improving our services based on feedback and usage patterns
• Sending relevant updates about your projects (we don't do marketing spam)
• Meeting legal obligations under Thai law and maintaining proper business records

How We Share Your Information

There are specific situations where we need to share your information with others—but only when necessary:

• Service Providers: We work with hosting companies, payment processors, and other technical partners who help us deliver services. They only access data needed for their specific role and are contractually required to protect it.
• Legal Requirements: If Thai authorities require it, or if we need to protect our legal rights, we may disclose information. This is rare but sometimes necessary.
• Business Transfers: In the unlikely event ExcelMaxOnix is acquired or merged with another company, your information would transfer as part of that process. You'd be notified if this happens.
• With Your Consent: If you ask us to share information with a specific third party (like a partner you're working with), we'll do so.

We don't have a long list of data-sharing partnerships. Most of your information stays within our team, used solely for the work you hired us to do.

Data Storage and Security

Your data is stored on secure servers, primarily located in Thailand and within Southeast Asia. We use industry-standard security measures to protect it:

• Encrypted connections (SSL/TLS) for data transmission
• Regular security audits and software updates
• Access controls that limit who on our team can view sensitive information
• Secure backup systems to prevent data loss
• Password protection and two-factor authentication for internal systems

That said, no system is 100% secure. We do our best to protect your information, but we can't guarantee absolute security. If we ever experience a data breach that affects you, we'll notify you promptly and explain what happened.

Your Rights Regarding Your Data

Under Thai data protection law, you have several rights when it comes to your personal information. Here's what you can do:

• Access: You can request a copy of the personal data we hold about you. We'll provide this within 30 days.
  • Email us at help@excelmaxonix.com with your request
  • We may ask for identification to verify it's really you
  • We'll send you a comprehensive report of your data
• Correction: If any information we have is inaccurate or outdated, let us know and we'll update it.
• Deletion: You can ask us to delete your data, though we may need to keep some records for legal or contractual reasons.
• Objection: You can object to certain uses of your data, particularly for marketing purposes (though we rarely use data this way).
• Data Portability: You can request your data in a structured, commonly used format to transfer to another service provider.
• Withdraw Consent: If we're processing data based on your consent, you can withdraw that consent anytime.

To exercise any of these rights, contact us using the information at the bottom of this page. We'll respond within a reasonable timeframe, typically within 30 days.

How Long We Keep Your Data

We don't keep your information longer than necessary. Here's our general approach:

• Active Client Data: We retain information for the duration of our business relationship and for a reasonable period afterward to handle any follow-up questions or support needs.
• Project Files: Website content and project materials are typically kept for 2 years after project completion, unless you request earlier deletion or extended storage.
• Financial Records: Thai law requires us to keep accounting records for 7 years for tax purposes.
• Communications: Email correspondence and meeting notes are kept for 3 years to maintain project history and resolve any disputes.
• Website Analytics: Anonymous usage data is typically retained for 18 months.

After these periods, we either delete the data or anonymize it so it can't be linked back to you. If you want us to delete your information sooner, just ask—we'll accommodate your request whenever legally possible.

Cookies and Tracking Technologies

Our website uses cookies—small text files stored on your device—to improve functionality and understand site usage. Here's what we use:

• Essential Cookies: These make the website work properly. They remember your session and preferences.
• Analytics Cookies: We use these to understand which pages people visit and how they navigate the site. This helps us improve content and user experience.
• Performance Cookies: These help us monitor site speed and identify technical issues.

We don't use advertising cookies or tracking pixels from third-party ad networks. You can disable cookies in your browser settings, though some site features may not work as smoothly if you do.

Third-Party Services

We use a few external services to run our business effectively. Each has its own privacy policy:

• Email Services: For business correspondence and project communication
• Cloud Hosting: To store website files and client materials securely
• Payment Processors: To handle invoicing and payments (we don't store full credit card details ourselves)
• Analytics Tools: To understand website traffic and user behavior

We choose partners carefully and ensure they maintain strong security standards. If you have concerns about any specific service we use, feel free to ask.

International Data Transfers

Most of our operations and data storage are based in Thailand. However, some of the third-party services we use have servers in other countries, including Singapore and other regions in Southeast Asia.

When data is transferred internationally, we ensure appropriate safeguards are in place, such as:

• Using services that comply with international data protection standards
• Implementing contractual protections with service providers
• Ensuring encryption during transfer and storage

If you have specific concerns about where your data is stored, let us know and we'll provide more details about the specific services involved in your project.

Changes to This Policy

We update this privacy policy occasionally to reflect changes in our practices, legal requirements, or services offered. When we make significant changes, we'll notify active clients via email.

The "Effective Date" at the top of this page shows when the policy was last updated. We recommend checking back periodically if you're a regular client or visitor.

Previous versions of this policy are available upon request if you need to review what was in place during a specific time period.

Children's Privacy

Our services are designed for businesses and professional clients. We don't knowingly collect information from individuals under 18 years of age.

If we discover we've accidentally collected data from someone under 18, we'll delete it promptly. If you believe this has happened, please contact us immediately.