Privacy Policy

1. Data we collect

We collect only what we need to respond to enquiries, deliver contracted services, issue invoices, and keep legally required records.

• Contact details you submit to us, such as name, company, email, phone number, and preferred language.
• Information contained in messages, documents, and materials you share with us during an engagement.
• Billing information required to issue invoices and collect payment, such as billing address and tax identifiers.
• Basic website usage information, such as pages visited and approximate country, collected through privacy-respecting analytics where used.

2. How we use data

We use personal data to:

• Respond to enquiries and prepare written scopes and quotes.
• Deliver, support, and improve our services.
• Issue invoices and collect payment.
• Comply with accounting, tax, and other legal obligations.
• Maintain security and prevent fraud or abuse.

3. Legal bases

Where the GDPR applies, we rely on the following legal bases: performance of a contract with you, our legitimate interests in running and securing our business, compliance with legal obligations, and, where required, your consent.

4. Sharing

We share personal data only with:

• Service providers who process data on our behalf under a written agreement, such as hosting, email, accounting, and payment providers.
• Professional advisors (for example, lawyers and accountants) bound by confidentiality.
• Authorities when required by law.

5. International transfers

Data is processed in Thailand and, where our service providers operate from other countries, may be transferred abroad. Where required, we rely on appropriate safeguards such as standard contractual clauses.

6. Retention

We keep personal data only as long as needed for the purposes described above and for the periods required by Thai tax and accounting law. Project and correspondence data is typically kept for 7 years after the end of the engagement.

7. Your rights

Subject to applicable law (including the Thai PDPA and the EU GDPR where it applies), you may have the right to access, correct, delete, or restrict processing of your personal data, to object to certain processing, and to data portability. To exercise these rights, contact hello@everlastx.com. We may ask you to verify your identity before acting on your request.

8. Security

We apply reasonable technical and organisational measures to protect personal data, including access controls, encryption in transit, and restricted access to client information on a need-to-know basis.

9. Cookies

This website uses only the cookies strictly necessary to operate the site. We do not use advertising cookies. Where we introduce optional analytics, we will update this Policy and request consent as required.

10. Changes

We may update this Policy from time to time. The current version is always published on this page with an updated "Last updated" date.

11. Contact

For any privacy enquiry, please contact hello@everlastx.com. Postal address is listed on the Legal Notice page.