Privacy Policy
How Conzento Global collects, uses, and protects your personal data in compliance with the Thailand Personal Data Protection Act (PDPA) B.E. 2562 (2019).
Last updated: March 14, 2026
1. Introduction
Conzento Global, operated by Reddot Digital Co., Ltd. ("we," "us," or "our"), is committed to protecting the privacy and personal data of individuals who visit our website at conzento.ai ("the Website") and use our services. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with the Thailand Personal Data Protection Act B.E. 2562 (2019) ("PDPA") and other applicable data protection laws in the jurisdictions where we operate, including Vietnam, Indonesia, and other Southeast Asian countries.
As a provider of data governance and PDPA compliance solutions, we hold ourselves to the highest standards of data protection. We practice what we preach.
2. Data Controller Information
The data controller responsible for your personal data is:
Reddot Digital Co., Ltd.
Srinakarin Rd, Bang Mueang, Samut Prakan 10270, Thailand
Email: [email protected]
Phone: +66-93-698-9497
3. Personal Data We Collect
We collect the following categories of personal data:
3.1 Information You Provide Directly
- Contact information: name, email address, phone number, company name, and job title when you fill out contact forms, request demos, or subscribe to communications
- Account information: credentials and profile data if you create an account to access our services
- Communication data: the content of messages you send to us through email, contact forms, or chat
- Business information: company name, industry, size, and data governance needs shared during consultations
3.2 Information Collected Automatically
- Device information: browser type, operating system, screen resolution, and device identifiers
- Usage data: pages visited, features used, time spent on pages, click patterns, and navigation paths
- Network data: IP address, approximate geographic location (country/region level), and referring URLs
- Cookie and tracking data: information collected through cookies, pixels, and similar technologies (see Section 9)
3.3 Information from Third Parties
- Analytics data from Google Analytics and Google Tag Manager
- Bot protection verification data from Cloudflare Turnstile
- Publicly available business information from LinkedIn or company websites
4. How We Use Your Personal Data
We process your personal data for the following purposes:
- Service delivery: To provide, maintain, and improve our data governance and PDPA compliance platform
- Communication: To respond to your inquiries, send requested information, and provide customer support
- Marketing: To send you relevant updates, newsletters, and promotional content about our services (with your consent)
- Analytics and improvement: To understand how users interact with our Website and improve our services
- Security: To protect against unauthorized access, fraud, and other security threats
- Legal compliance: To comply with applicable laws, regulations, and legal processes
- Demo and consultation: To schedule and conduct product demonstrations and consultations
- Bot protection: To verify that interactions with our Website are from genuine human users via Cloudflare Turnstile
5. Legal Basis for Processing (PDPA)
Under the PDPA, we process your personal data based on the following legal grounds:
Consent (Section 19)
For marketing communications, non-essential cookies, and newsletter subscriptions. You may withdraw consent at any time.
Contractual Necessity (Section 24(3))
To perform our obligations under service agreements, including providing our platform, support, and related services.
Legitimate Interests (Section 24(5))
For website analytics, service improvement, fraud prevention, and security purposes, where such interests are not overridden by your rights.
Legal Obligation (Section 24(6))
To comply with applicable Thai law, tax regulations, and regulatory requirements.
6. Data Sharing and Third Parties
We do not sell your personal data. We may share your personal data with the following categories of recipients:
6.1 Service Providers
- Cloud hosting: Microsoft Azure (data center locations in Southeast Asia)
- Analytics: Google Analytics and Google Tag Manager for website usage analysis
- Security: Cloudflare for CDN, DDoS protection, and Turnstile bot verification
- Communication: Email service providers for transactional and marketing communications
6.2 Other Disclosures
- Legal authorities: When required by law, court order, or regulatory request
- Business transfers: In connection with a merger, acquisition, or sale of assets (with prior notice)
- With your consent: When you have explicitly authorized us to share your data
All third-party service providers are contractually required to protect your personal data and process it only in accordance with our instructions and applicable data protection laws.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes described in this policy:
- Contact and inquiry data: 2 years from your last interaction with us
- Customer account data: For the duration of the service agreement plus 3 years for legal compliance
- Website analytics data: 26 months (as configured in Google Analytics)
- Marketing consent records: For the duration of the consent plus 1 year after withdrawal
- Legal and regulatory records: As required by applicable Thai law (typically 5-10 years)
When personal data is no longer needed, we securely delete or anonymize it in accordance with our data retention and destruction procedures.
8. Your Rights Under PDPA
Under the PDPA, you have the following rights regarding your personal data. You may exercise these rights by contacting our Data Protection Officer at [email protected].
Right of Access (Section 30)
You have the right to request a copy of the personal data we hold about you and information about how it is processed.
Right to Rectification (Section 35)
You have the right to request correction of inaccurate or incomplete personal data.
Right to Erasure (Section 33(5))
You have the right to request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements.
Right to Data Portability (Section 31)
You have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as JSON or CSV).
Right to Object (Section 32)
You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Restrict Processing (Section 34)
You have the right to request that we limit the processing of your personal data in certain circumstances.
Right to Withdraw Consent (Section 19)
Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
Right to Lodge a Complaint
You have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand if you believe your data protection rights have been violated.
We will respond to your request within 30 days of receipt. In certain cases, we may request additional information to verify your identity before processing your request.
9. Cookies and Tracking Technologies
Our Website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver targeted content. Below are the categories of cookies we use:
9.1 Strictly Necessary Cookies
These cookies are essential for the Website to function and cannot be disabled. They include session management, language preference (NEXT_LOCALE), and security tokens.
9.2 Analytics Cookies
We use Google Analytics (via Google Tag Manager, ID: GTM-N5R7FZCF) to collect anonymized usage data about how visitors interact with our Website. This helps us understand traffic patterns and improve our services. Google Analytics cookies include _ga, _ga_*, and _gid.
9.3 Marketing and Conversion Cookies
We use Google Ads conversion tracking (ID: AW-954200715) to measure the effectiveness of our advertising campaigns. These cookies help us understand which ads lead to website visits.
9.4 Security Cookies
We use Cloudflare Turnstile as a bot protection mechanism on our contact forms. Turnstile may set cookies to distinguish between human users and automated bots without requiring CAPTCHA challenges.
You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our Website.
10. International Data Transfers
As Conzento Global serves customers across Southeast Asia (Thailand, Vietnam, Indonesia, and other markets), your personal data may be transferred to and processed in countries outside your country of residence.
When we transfer personal data internationally, we ensure appropriate safeguards are in place in accordance with the PDPA (Section 28), including:
- Transferring data only to countries with adequate data protection standards as recognized by the Personal Data Protection Committee
- Implementing appropriate contractual safeguards with data processors in other jurisdictions
- Obtaining your consent for transfers where required by applicable law
- Ensuring our cloud infrastructure providers (Microsoft Azure) maintain data residency options within the ASEAN region
11. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit (TLS/SSL) and at rest
- Regular security assessments and vulnerability testing
- Access controls and authentication mechanisms
- Employee training on data protection and information security
- Incident response procedures for data breaches
- ISO 27001 certified information security management practices
12. Children's Privacy
Our Website and services are not directed to individuals under the age of 20 (the age of majority under Thai law for PDPA purposes, unless the minor is emancipated by marriage). We do not knowingly collect personal data from children under 20 without verifiable parental or guardian consent. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete such data promptly.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:
- Update the "Last updated" date at the top of this policy
- Post a prominent notice on our Website
- Notify you by email if the changes materially affect how we process your personal data
- Where required by the PDPA, obtain your renewed consent for any new processing activities
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:
Data Protection Officer
Reddot Digital Co., Ltd.
Srinakarin Rd, Bang Mueang
Samut Prakan 10270, Thailand
Email: [email protected]
Phone: +66-93-698-9497
If you are not satisfied with our response or believe your data protection rights have been violated, you have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.