Privacy Policy

What we collect

The only data you type in yourself goes through the contact form. That means your name, company name, email address, and the message you write.

Every page also sends some technical information to Cloudflare, which serves this site. That includes your IP address. The Cookies and scripts section below sets out what that covers.

Why we use it

We use what you send through the contact form for one purpose only: to follow up on the enquiry you sent us. We don't use it for marketing and we don't send promotional email. We don't share or pass it to any third party for any other purpose.

Cookies and scripts

This site sets no cookies of its own. It carries no advertising and no cross-site tracking scripts. Two third-party scripts run here, and both are Cloudflare's.

The first is Cloudflare Web Analytics, and it runs on every page. It counts page views and measures how fast pages load. We read it to see which pages people open, and which pages are slow on real devices.

It is cookieless. It writes nothing into your browser, so nothing on your device recognises you on a later visit. Cloudflare receives the page you opened, the site that sent you there, and your device type, browser, and operating system. It also receives how long that page took to load.

Those measurements reach Cloudflare from your browser, and like any request to a server they carry your IP address. Cloudflare turns it into a country, and the country is what we see in the report. Cloudflare's Web Analytics documentation says Cloudflare does not track individual end users across its customers' sites.

An earlier version of this policy said we would note it here if we added a cookieless analytics tool. This is that note.

The second script is Cloudflare Turnstile, and it loads on the contact page only. It is a check that a real person is sending the form. Its job is to keep automated submissions out.

Cloudflare names the signals the check reads, and does not present the list as complete. The ones it names are your IP address, your browser's TLS fingerprint, and its user-agent string. It also names the site key and the address of the page asking for the check. Cloudflare's Turnstile Privacy Addendum sets out that list, and says the signals are collected to detect and block bots and for no other purpose.

To read those signals, Cloudflare says Turnstile runs small JavaScript tests in your browser. None of them ask you to do anything. Cloudflare also states that Turnstile uses no cookies to collect or store data, and never reads what you type into the form.

The form itself keeps a copy of your draft in your own browser. That way a failed send doesn't lose what you wrote. It sits in that tab's session storage. It clears the moment your message goes through, and closing the tab clears it too.

How long we keep it

We keep what you send through the contact form for 1 year from the day you send it. It sits in two places. One is the website's database. The other is an email copy sent to our company mailbox when you submit the form.

The database is Cloudflare's, and the record is deleted from it when the year is up. Cloudflare keeps a recovery history of its own. A deleted record can still be restored from that history for up to 30 days.

Our mailbox runs on Microsoft 365. The email copy is kept in a folder that deletes each message 1 year after it arrives. Microsoft checks that folder once a week, so a copy can outlast the year by up to 7 days. Once deleted, it stays recoverable for up to 30 days.

When we reply to you, that reply and any emails after it are ordinary business correspondence. They stay in our mailbox outside that folder, so the 1-year clock does not cover them.

You can ask us to delete any of this at any time, and the next section says how.

Your rights under PDPA

Under Thailand's Personal Data Protection Act (PDPA), you can request access to, correction of, or deletion of your personal data at any time. Email contact@source.co.th and tell us what you want done. Include the email address you used in the form, so we can find your record. We handle these requests by hand, in our business hours of Mon–Fri, 08:30–17:30 (ICT).

Data controller

Source System Company Limited is the data controller for information collected through this site.

Address

Darun Place 1424, Soi Prachasongkhro 16, Prachasongkhro Road, Din Daeng, Bangkok 10400, Thailand

Email

contact@source.co.th

Tel

+66 62 206 2601

Registration No.

0105564178385

Where your data is processed

This site runs on Cloudflare's infrastructure. What you send through the contact form, and what Cloudflare Web Analytics measures, may be processed or routed through servers located outside Thailand. This is part of Cloudflare's network.

The email copy of your message goes through Cloudflare's email service to our company mailbox, which runs on Microsoft 365. Microsoft may also store it on servers outside Thailand.

Changes to this policy

We may update this policy from time to time as how we collect or use data changes. Any change updates the "Last updated" date at the top of this page.