Privacy Policy

1. Introduction

Insurance Flow ("we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our insurance management platform. We process personal data in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA") and other applicable laws.

2. Data Controller

The data controller responsible for your personal data is Insurance Flow. You may contact us at khaitechagency@gmail.com or +66 66 134 6438.

3. Personal Data We Collect

We may collect the following categories of personal data:

• Account data: Name, email address, password (encrypted)
• Customer data: Information you enter about your customers (names, contacts, addresses, passport details, bank details, etc.) when using the Service
• Usage data: Log information, IP address, browser type, and how you use the Service
• Contact data: Information you provide when contacting us (e.g. via contact forms)

We collect personal data only for specified, explicit, and legitimate purposes clearly communicated to you.

4. Legal Basis and Purposes

We process your personal data on the following legal bases under the PDPA:

• Consent: Where you have given clear consent for specific processing
• Contract performance: To provide the Service and fulfil our agreement with you
• Legitimate interests: To improve the Service, ensure security, and support our operations
• Legal obligation: Where required by law

We use your data to: (a) provide and maintain the Service; (b) authenticate users and manage accounts; (c) process and store data you upload (e.g. customer records); (d) communicate with you; (e) improve the Service; (f) comply with legal obligations; and (g) protect our rights and security.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Account data is retained while your account is active and for a reasonable period thereafter. Customer data you enter is retained until you delete it or close your account, unless we are required to retain it longer by law. You may request deletion of your data subject to our legal obligations.

6. Data Sharing and Disclosure

We do not sell your personal data. We may share data with: (a) service providers who assist us (e.g. hosting, cloud storage) under strict confidentiality; (b) authorities when required by law; and (c) professional advisers. We ensure that any third party processes data in accordance with the PDPA and our instructions.

7. Cross-Border Transfer

Your data may be stored or processed on servers located outside Thailand. Where we transfer data outside Thailand, we ensure that appropriate safeguards are in place as required by the PDPA, such as standard contractual clauses or adequacy decisions. You may contact us for more information about these safeguards.

8. Security

We implement appropriate technical, organisational, and physical measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption, access controls, and regular security assessments. You are responsible for keeping your account credentials secure.

9. Your Rights Under the PDPA

You have the right to:

• Access your personal data
• Correct or update inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Data portability (where applicable)
• Withdraw consent
• Lodge a complaint with the Personal Data Protection Committee of Thailand

To exercise these rights, please contact us at khaitechagency@gmail.com. We will respond within the timeframe required by the PDPA.

10. Cookies and Similar Technologies

We use cookies and similar technologies to enable the Service to function, maintain sessions, and improve your experience. You can manage cookie preferences through your browser settings. Essential cookies are necessary for the Service to operate.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

12. Contact

For questions about this Privacy Policy or our data practices, please contact us at khaitechagency@gmail.com or +66 66 134 6438.