Privacy Policy

1. Introduction

Nimit Studio ("we", "us", "our") is committed to protecting the personal data of everyone who visits our website or engages with our services. This policy explains what information we collect, why we collect it, how we use it, and what rights you have over it.

This policy applies to all personal data processed by Nimit Studio in connection with our website at nimitstu.cyou and our AI integration services. We act as the data controller for personal data collected directly by us.

For questions about this policy, contact us at [email protected].

2. Personal Data We Collect

Data you provide directly

• Full name and contact details (email address, phone number) submitted via our contact form
• The content of messages you send to us
• Business information shared during project scoping or service engagement

Data collected automatically

• Website usage data such as pages visited, time spent, and navigation patterns
• Technical data including browser type, device type, and approximate location via IP address
• Cookie data as described in our Cookie Policy

Data from third-party services

Where we use analytics or advertising tools, those services may collect additional data under their own privacy policies. We reference the specific tools in our Cookie Policy.

3. Legal Basis for Processing

We process personal data under the following legal bases as applicable under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and relevant data protection law:

• Consent — where you have actively agreed (e.g. submitting a contact form or accepting cookies)
• Legitimate interests — for improving our services and for communicating about projects where you are a client
• Contract performance — where we are delivering a service agreed with you
• Legal obligation — where we are required to retain or disclose data by applicable law

4. How We Use Your Data

• To respond to enquiries submitted through our contact form
• To deliver and manage contracted services (Concept Mapping, Drafted Integration, Studio Support)
• To send project updates, monthly summaries, and related communications to active clients
• To improve the content and functionality of our website through aggregated analytics
• To comply with legal and regulatory obligations

We do not sell personal data to third parties. We do not use your data for unsolicited marketing without explicit consent.

5. Data Retention

• Contact form submissions: retained for up to 12 months from the date of submission unless an ongoing client relationship follows
• Active client data: retained for the duration of the engagement plus 3 years thereafter for legitimate business record purposes
• Website analytics data: retained in aggregated, anonymised form for up to 26 months
• Cookie consent records: retained for up to 12 months

6. Data Protection Measures

• Data in transit is encrypted via HTTPS/TLS
• Access to personal data is limited to Nimit Studio team members who require it for their work
• Project documentation containing client data is stored on password-protected systems
• In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within the timeframe required by applicable law

7. Cookies

Our website uses cookies to support its functionality and to understand how it is used. For full details on the types of cookies we use and how to manage them, please see our Cookie Policy.

8. Third-Party Services

Our website may include links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies directly before providing any personal data.

Where we use third-party services that process data on our behalf (such as analytics providers), we ensure they operate under appropriate data processing agreements.

9. Your Rights

Under the PDPA and applicable data protection law, you have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate or incomplete data
• Right to erasure — to request deletion of your data where there is no lawful basis for continued processing
• Right to data portability — to receive your data in a structured, commonly used format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — at any time, where processing is based on consent
• Right to lodge a complaint — with the Personal Data Protection Committee (PDPC) in Thailand

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Children's Privacy

Our services are directed at businesses and individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If we become aware that data from a minor has been submitted, it will be deleted promptly.

11. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. Significant changes will be communicated via a notice on our website. The date at the top of this page reflects when the policy was last updated. Continued use of our services after changes become effective constitutes acceptance of the revised policy.

12. Contact

Data controller: Nimit Studio
27 Huay Kaew Road, Su Thep, Chiang Mai 50200, Thailand
Email: [email protected]
Phone: +66 53 327 6814