Privacy Policy

WACC Service Limited (“WACC Service”, “we”, “our”) respects the privacy of visitors to waccservice.co.th (the “Site”). This policy explains how we collect, use, disclose, and protect your personal data under Thailand's Personal Data Protection Act B.E. 2562 (“PDPA”).

1. Personal Data We Collect

• Information you give us: name, email, phone, company name, messages sent via contact / booking forms
• Usage data: pages visited, time on site, device, browser, anonymized IP address
• Free tools data: tax IDs, numbers used in calculations (not linked to a person unless you sign up)
• LINE OA data: LINE user ID, display name, messages you send us (only when you contact us first)

2. Purposes of Processing

• Reply to your questions / service requests (basis: consent / contract)
• Provide accounting, tax, and related services under our agreement (basis: contract)
• Send newsletters and promotions (basis: consent — you can unsubscribe anytime)
• Analyse and improve the Site (basis: legitimate interest)
• Comply with laws such as the Accounting Act B.E. 2543 (basis: legal obligation)

3. Third-Party Disclosure

We do not sell your personal data. We disclose only to:

• Necessary service providers — e.g. Resend (email delivery), LINE (when you message our OA), Google (analytics), Vercel (hosting)
• Government agencies — Revenue Department, DBD, Social Security Office, as required by law
• Court / competent authority orders — strictly as required

4. Data Retention

• General contact data — no more than 2 years after last contact
• Client service data — throughout the service agreement + 5 years after termination (per Accounting Act)
• Anonymous free-tools data — indefinitely
• Cookies — as described in Cookie Policy

5. Your Rights

Under the PDPA you have the right to:

• Access — request a copy of your data
• Rectify — correct inaccurate data
• Erase — request deletion (unless legally required to retain)
• Restrict — temporarily pause processing
• Withdraw consent — anytime
• Object — to certain kinds of processing
• Portability — receive data in machine-readable form
• Complain — to the Personal Data Protection Committee (PDPC)

Exercise any right by emailing privacy@waccservice.co.th — we reply within 30 days.

6. Data Security

• HTTPS (SSL/TLS) encryption for all traffic
• Passwords hashed with bcrypt (never stored in plain text)
• Daily backups
• Role-based access control
• Audit logs for critical changes

7. Cookies

See our Cookie Policy for details.

8. Policy Changes

We may update this policy from time to time. Changes take effect when posted, with an updated “Effective” date at the top.

9. Data Controller