Privacy Policy

We keep only what we need to talk about your project, do the work and get paid. We never sell your data or use it for advertising.

Last updated November 11, 2026

Who looks after your data

APLab Studio ("we") designs and builds websites, business systems, LINE chatbots and design work.

APLab Studio is not a registered company. The data controller under Thailand’s Personal Data Protection Act B.E. 2562 (2019) is Kittipot Saenpradit, who runs APLab Studio.

For anything about your personal data, write to aplab.agency@gmail.com.

What we collect and where it comes from

Name, email, phone, the service you’re interested in, your message and attachments
Where it comes from
The contact form on this website
Name, business name, email, phone, LINE ID and project details
Where it comes from
When you discuss a project or become a client (kept in our project system)
Project files such as logos, photos and documents
Where it comes from
Files you send us or upload on your project tracking page
Name, email, amount and payment status
Where it comes from
When you pay through our payment link. You enter card details on Stripe; we never see or store your card number
Your language and cookie choices
Where it comes from
Stored in your own browser, not sent to us
Anonymous page load speed
Where it comes from
Vercel Speed Insights

Data	Where it comes from
Name, email, phone, the service you’re interested in, your message and attachments	The contact form on this website
Name, business name, email, phone, LINE ID and project details	When you discuss a project or become a client (kept in our project system)
Project files such as logos, photos and documents	Files you send us or upload on your project tracking page
Name, email, amount and payment status	When you pay through our payment link. You enter card details on Stripe; we never see or store your card number
Your language and cookie choices	Stored in your own browser, not sent to us
Anonymous page load speed	Vercel Speed Insights

Why we use it

Answer your questions and send the quote you asked for
Legal basis
Steps you asked for before a contract
Do the agreed work, deliver it, update you and support you afterwards
Legal basis
Performance of a contract
Take payments, issue receipts and keep accounting records
Legal basis
Contract, and our legal duties under accounting and tax law
Measure how the website is used (only if switched on and you agree)
Legal basis
Consent
Keep the website secure and prevent misuse
Legal basis
Our legitimate interests

We use your data to	Legal basis
Answer your questions and send the quote you asked for	Steps you asked for before a contract
Do the agreed work, deliver it, update you and support you afterwards	Performance of a contract
Take payments, issue receipts and keep accounting records	Contract, and our legal duties under accounting and tax law
Measure how the website is used (only if switched on and you agree)	Consent
Keep the website secure and prevent misuse	Our legitimate interests

Without your name and a way to reach you, we can’t reply or do the work.

We don’t sell personal data and don’t use your data for advertising.

Who receives it

These providers process data on our behalf, under their own data processing terms:

Vercel: hosts the website and stores uploaded files
Neon: the database for the website and our project system
Stripe: card and PromptPay payments
Resend: sends us an email when someone submits the contact form
Google (Gmail): the mailbox we use to talk with you

We may also disclose data to public authorities when the law requires it.

Transfers outside Thailand

These providers store data on servers outside Thailand, such as in the United States and Singapore. We use providers with appropriate data protection measures and data processing agreements.

How long we keep it

Contact form messages that don’t become a project: up to 2 years after the last contact
Client, project and file data: for the project and its support period, then up to 5 years
Receipts and payment records: at least 5 years, as accounting and tax law requires

After that we delete the data or make sure it can no longer identify you.

How we protect it

Everything travels over an encrypted connection (HTTPS)
Only administrators with a password can open the admin area
Project tracking and file links can’t be guessed; share them only with people you trust

Your rights

See or get a copy of your data
Correct data that is wrong
Have your data deleted, or its use restricted
Object to how we use it
Receive your data, or have it sent to someone else, in a machine-readable format
Withdraw consent at any time, without affecting what happened before
Complain to the Personal Data Protection Committee (PDPC) of Thailand

Send requests to aplab.agency@gmail.com. We reply within 30 days and may ask you to confirm who you are. Some requests we can’t fully meet, such as deleting receipts the law makes us keep; if so we’ll tell you why.

Children

This website and our services are for business owners and adults. We don’t knowingly collect data from minors.

Changes to this policy

If we change how we use data, we update this page and the date at the top. For important changes we also email clients with active projects.

Contact us

Email aplab.agency@gmail.com

Bangkok, Thailand