Privacy Policy

1. Who We Are

Haliviq Co., Ltd. ("Haliviq", "we", "us", "our") is a digital product studio headquartered at 111 Sukhumvit Rd, Bang Chak, Phra Khanong, Bangkok 10260, Thailand, with an office at 2025 Olympic Hwy N Ste 105, Shelton, WA, USA. For personal data collected through this website and our own business activities, Haliviq is the data controller. For personal data we handle on a client's behalf while building or running their product, Haliviq acts as a data processor under the client's instructions and contract.

2. Scope of This Policy

This policy applies to haliviq.com (including the /th and /en versions), our communication channels (email, LINE, WhatsApp, social media), our events and sales conversations, and our recruitment process. It does not cover third-party websites we link to, or the privacy practices of our clients' own products, which are governed by those clients' policies.

3. Personal Data We Collect

We collect only what we need, grouped as follows:

• Identity & contact data: name, email address, phone number, company name, job title.
• Enquiry & project data: the content of your messages, project descriptions, budget range, and how you heard about us, when you use our contact form or reach out by email, LINE, or WhatsApp.
• Chat assistant data: the questions you type to our website assistant (Havy) are logged without your name. If you choose "Ask the team to contact me", we also receive the contact detail you enter and a short summary of what you asked, only after you tick the consent box. We use it solely to get back to you, and it is sent to our team through LINE.
• Subscription data: your email address and preferences if you subscribe to our newsletter.
• Technical & usage data: IP address, browser and device type, pages viewed, referring page, and approximate location, collected through cookies and similar technologies (see our Cookie Policy).
• Recruitment data: CV, portfolio, work history, and contact details, if you apply for a role with us.
• Business relationship data: contract details, invoicing and payment information of clients and suppliers.

4. How We Collect It

• Directly from you, when you fill in a form, email or message us, subscribe, apply, or meet us.
• Automatically, when you use our website, through cookies and analytics tools — optional analytics cookies are only activated if you consent.
• From third parties, such as referrals, public business profiles (e.g. LinkedIn), or clients who introduce you as a project contact.

5. Why We Use Your Data (Purposes & Legal Bases)

Under Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA") we need a lawful basis for each use:

• To respond to enquiries, prepare proposals, and start a project — legal basis: steps taken at your request before entering a contract, and our legitimate interest in running our business.
• To deliver, support, and invoice our services — legal basis: performance of a contract.
• To send newsletters, insights, and event invitations — legal basis: your consent, which you can withdraw at any time.
• To understand and improve our website and marketing, using analytics and advertising measurement — legal basis: your consent (optional cookies).
• To keep our systems secure and prevent fraud or abuse — legal basis: our legitimate interest.
• To comply with tax, accounting, and other legal obligations — legal basis: legal obligation.
• To evaluate job applications — legal basis: steps taken at your request and our legitimate interest in hiring.

6. Marketing & Your Choices

We only send marketing emails if you subscribed or have an existing business relationship with us. Every marketing email includes an unsubscribe link, and you can also write to info@haliviq.com at any time. Unsubscribing does not affect service-related messages about an active project.

7. Who We Share Data With

We do not sell your personal data. We share it only as needed with:

• Service providers acting on our instructions — for example website hosting, email and communication tools, project management and file-sharing tools, analytics and advertising measurement (Google), and accounting and legal advisers.
• Our team members and contractors who need access to do their work, under confidentiality obligations.
• Clients and partners, where you are a project contact or have asked us to introduce you.
• Authorities, courts, or other parties, where required by law or to establish, exercise, or defend legal claims.
• A successor entity, in the event of a merger, acquisition, or restructuring, subject to this policy continuing to apply.

Each service provider is expected to protect personal data to a standard consistent with this policy and applicable law.

8. International Transfers

Because we operate in Thailand and the USA and use global cloud and software providers, your personal data may be processed outside Thailand. Where we transfer data abroad, we take steps to ensure the destination provides appropriate protection — for example by choosing providers with recognised security and privacy commitments and by using contractual safeguards — in line with the PDPA.

9. How Long We Keep Data

We keep personal data only as long as needed for the purposes above, then delete or anonymise it. As a guide:

• Enquiries that do not become a project: up to 24 months.
• Client project and contract records: for the duration of the relationship plus the period required by tax, accounting, and limitation laws (generally up to 10 years for accounting records).
• Newsletter subscriptions: until you unsubscribe.
• Job applications: up to 12 months unless you agree that we keep them longer.
• Analytics cookies: according to the provider's standard schedule, generally up to 13 months.

10. Data Security

We use reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls based on need-to-know, secure storage with reputable providers, and confidentiality obligations for our people. No system is completely secure. If a personal data breach occurs that is likely to put your rights and freedoms at risk, we will notify the Personal Data Protection Committee and affected individuals as required by the PDPA.

11. Use of AI Tools

We use AI tools to help with our work (for example drafting, research, and code assistance), and we build AI products for clients. We do not put client confidential data or personal data into AI tools that may use it to train public models, we use enterprise or API tiers that contractually exclude your data from model training where personal data is involved, and we review AI-assisted output before delivery. Any AI system we build for a client is handled under that client's contract and instructions.

12. Your Rights

Subject to the PDPA and other applicable law, you have the right to:

• Access your personal data and request a copy.
• Correct data that is inaccurate or incomplete.
• Request deletion or anonymisation of data we no longer need or have no basis to keep.
• Withdraw consent at any time, without affecting processing already carried out.
• Object to or restrict certain processing, including direct marketing.
• Request your data in a portable, machine-readable format.
• Lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand if you believe we have not complied with the law.

To exercise a right, email info@haliviq.com with enough detail for us to identify you and your request. We may need to verify your identity, and we aim to respond within 30 days.

13. Cookies & Similar Technologies

We use essential cookies to run the site and optional analytics and advertising cookies only with your consent. You can change your choice at any time by clearing this site's data in your browser. Full details are in our Cookie Policy.

14. Third-Party Links

Our website may link to third-party sites and social channels (such as Facebook, Instagram, LinkedIn, LINE, and WhatsApp). We are not responsible for their content or privacy practices, and we encourage you to read their policies.

15. Children

Our website and services are intended for businesses and are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

16. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices, technology, or law. We will publish the updated version here with a new "last updated" date, and where changes are significant we will take reasonable steps to let you know.

17. Contact Us

Questions, requests, or complaints about privacy: info@haliviq.com. Postal address: Haliviq Co., Ltd., 111 Sukhumvit Rd, Bang Chak, Phra Khanong, Bangkok 10260, Thailand. Phone: +66 90 918 9009.