Privacy Policy

1. Who we are

WinnerSoft Co., Ltd. is the data controller for personal data collected through winnersoft.co.th and the channels described in this policy.

If you have a question about this policy, or want to exercise any of your rights, contact us using the details at the end of this page.

2. What the contact form collects

When you submit the contact form, we receive only what you typed into it:

• Your name
• Your email address
• Your phone number
• Your company name
• The subject and message you wrote

3. What we collect automatically

Beyond what you type, the site records some technical information on its own. We spell this out because an IP address counts as personal data:

• Your IP address — used to limit how many submissions come from one address per hour and to filter spam. It is not used to identify you for marketing.
• The time of your submission and the result of the spam check — written to server-side logs.
• A session cookie — used to tell a human submission from an automated one. It expires when you close your browser.

4. Cookies and analytics

This site uses Google Analytics through Google Tag Manager to see which pages are read and where visitors arrive from. This places third-party cookies in your browser and sends usage data to Google.

We do not use this data to identify individuals, and we do not sell it. You can block these cookies in your browser settings or with a tracker-blocking extension; the site works normally without them.

5. What we use your data for

We use what we receive only for the following purposes:

• Answering the question or request you sent
• Following up about services you asked about
• Preventing spam and abuse of the website
• Improving the site's content and structure based on aggregate usage

6. What we do not do with your data

We do not sell, rent, or trade your personal data to third parties for marketing.

We do not add addresses submitted through the contact form to a marketing mailing list unless you ask us to send you more information.

7. Processors acting on our behalf

We use outside services only where operations require it. Each one has access strictly to what it needs to provide its service to us:

• Microsoft 365 — receives and stores email sent from the contact form
• Google (Analytics and Tag Manager) — website usage statistics
• Our website hosting provider — stores site files and server logs

8. The application connected to our own social media pages

WinnerSoft operates an internal application connected to the company's own Facebook Page and Instagram account. It publishes content we create and reads statistics for those posts.

The application accesses only pages WinnerSoft owns. It does not collect, process, or store personal data belonging to people who visit or interact with those pages. No third party uses this application, and it has no consumer login of any kind.

What it reads is post content, publication times, and engagement totals such as like and comment counts — as aggregate numbers, never per person.

9. How long we keep it

Email from the contact form is kept in the company mailbox for as long as the business correspondence requires, and deleted when it is no longer needed.

Technical logs containing IP addresses are kept only briefly, for system security.

If you ask us to delete your data, we handle it as described on our data deletion page.

10. Your rights

Under Thailand's Personal Data Protection Act B.E. 2562 (PDPA), you have the right to:

• Ask what data of yours we hold
• Ask us to correct data that is wrong
• Ask us to delete your data
• Object to, or ask us to suspend, our use of your data
• Receive a copy of your data in a readable format
• Complain to the Personal Data Protection Committee if you believe we have handled your data improperly

11. Security

The site is served entirely over HTTPS, and configuration files holding sensitive values are blocked from web access.

No system is perfectly secure, so we ask that you do not send especially sensitive information — national ID numbers, financial details — through the website contact form.

12. Changes to this policy

If we revise this policy we will update the date at the top of the page. Any change that materially affects how we use your data will be stated plainly here.