Information We Collect

Personal Information You Provide

When you sign up for our services or contact us, we collect information that helps us deliver and improve our backup solutions. This includes your name, business email address, phone number, company name, and billing details. We also gather technical information about your IT infrastructure to configure backup systems properly.

Information Collected Automatically

Our systems automatically log certain data when you use our services. This includes IP addresses, browser types, device information, backup timestamps, data transfer volumes, and system performance metrics. We use this information to maintain service quality and troubleshoot issues.

How We Use Your Information

We use the information we collect for specific business purposes that directly relate to providing backup and disaster recovery services:

• Configuring and maintaining your backup systems according to your specifications
• Monitoring system health and alerting you to potential issues before they become problems
• Processing payments and maintaining accurate billing records
• Providing technical support when you need help with recovery operations
• Improving our service based on usage patterns and customer feedback
• Sending service notifications about system status, scheduled maintenance, or security updates
• Complying with legal obligations under Thai law and international agreements

Data Storage and Security

Your backed-up data and personal information are stored in secure data centers with multiple layers of protection. We use industry-standard encryption both in transit and at rest. Access to personal data is restricted to authorized personnel who need it to perform their jobs.

Security Measures

• AES-256 encryption for data at rest
• TLS 1.3 encryption for data in transit
• Multi-factor authentication for system access
• Regular security audits and penetration testing
• Automated intrusion detection systems
• Staff training on data protection and security protocols
• Physical security measures at data center facilities

Our primary data centers are located in Thailand, with redundant systems in Singapore for disaster recovery purposes. All facilities meet ISO 27001 standards for information security management.

Sharing Your Information

We share your information only in limited circumstances and with strict protections in place:

Service Providers

We work with carefully selected third-party service providers who help us deliver our services. These include cloud infrastructure providers, payment processors, and customer support tools. All providers are contractually bound to protect your data and use it only for the specific purposes we authorize.

Legal Requirements

We may disclose information when required by Thai law, court orders, or government requests. This includes compliance with the PDPA, tax regulations, and legitimate law enforcement requests. We'll notify you of such requests unless legally prohibited from doing so.

Business Transfers

If ProFluxUltra is involved in a merger, acquisition, or sale of assets, your information may be transferred. We'll notify you before your information becomes subject to a different privacy policy.

Your Rights Under Thai Law

Under Thailand's Personal Data Protection Act, you have specific rights regarding your personal information:

• Right to Access: Request copies of the personal data we hold about you
• Right to Rectification: Ask us to correct inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restriction: Limit how we process your information
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Oppose certain types of processing
• Right to Withdraw Consent: Revoke consent for processing based on consent

Data Retention

We keep your information only as long as necessary for the purposes described in this policy. Retention periods vary based on data type and legal requirements:

Active account data is maintained while you're a customer and for two years after service termination. This allows us to reactivate your account if you return and helps with any post-service questions. Backup metadata related to your systems is kept for 90 days after service ends, giving you time to retrieve any final backups.

Financial records are retained for seven years to comply with Thai tax laws. Technical logs and security records are kept for 12 months to support system integrity and security investigations.

After retention periods expire, we securely delete or anonymize your information using industry-standard data destruction methods.

International Data Transfers

While our primary operations are in Thailand, we may transfer data internationally for backup redundancy and service delivery. When we transfer data outside Thailand, we ensure appropriate safeguards are in place:

• Standard contractual clauses approved by Thai authorities
• Data processing agreements with international service providers
• Encryption during transfer and storage in all locations
• Regular audits of international partners' security practices

Our backup facilities in Singapore operate under similar data protection standards as Thailand, providing consistent security regardless of physical location.

Cookies and Tracking

Our website uses cookies to improve your experience and help us understand how visitors use our services. We use essential cookies for basic site functionality, performance cookies to analyze usage patterns, and functional cookies to remember your preferences.

You can control cookies through your browser settings. Disabling certain cookies may limit some website features. We don't use advertising cookies or sell data to advertising networks.

Changes to This Policy

We may update this privacy policy occasionally to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you by email and post a notice on our website. The "Last Updated" date at the top shows when the policy was most recently revised.

Continued use of our services after policy changes constitutes acceptance of the updated terms. If you disagree with changes, you can close your account by contacting our support team.

Children's Privacy

Our services are designed for businesses and organizations, not for children under 18. We don't knowingly collect information from minors. If we discover we've inadvertently collected such data, we'll delete it promptly.

Complaints and Concerns

If you have concerns about how we handle your personal data, please contact us first so we can address the issue. You also have the right to lodge a complaint with Thailand's Personal Data Protection Committee if you believe we've violated your data protection rights.