Privacy Policy

Last Updated: January 1, 2026

1. Introduction & Data Controller Identification

Registry Canvas Grid (“we”, “us”, or “our”) respects the privacy of our website visitors, prospective clients, and corporate partners. This Privacy Policy explains our practices regarding the collection, use, retention, and protection of personal data in compliance with the Personal Data Protection Act (PDPA) of Thailand and relevant international data privacy principles.

The designated Data Controller responsible for your personal data is:

Data Controller: Registry Canvas Grid
Principal Office: Office 12, 31 Example Street, Chiang Mai 00000, Thailand
Contact Email: hello@registrycanvasgrid.digital
Telephone: +66 52 000 763

2. Personal Information We Collect

We limit personal data collection to what is strictly necessary to conduct our professional consulting business:

1. Inquiry & Contact Data: When you submit a scoping form or email our practice, we collect your name, business email address, corporate entity name, and your stated diagnostic objectives.
2. Engagement & Billing Information: For contracted clients, we collect billing contact details, corporate tax identification numbers, and authorized signatory contact records.
3. Technical Server Log Data: When accessing our static website, standard technical logs (IP address, user agent, requested URL, and timestamp) are temporarily recorded by server infrastructure for security and operational monitoring.

3. Our Zero-PII Policy on Diagnostic Telemetry

As a core principle of our analytical practice, we do not accept, collect, or store unmasked personally identifiable information (PII) from our clients’ end users.

When conducting session behavior audits and funnel diagnostics:

• We require clients to enable client-side DOM edge masking for all text inputs, passwords, credit card fields, and sensitive identifiers.
• If raw session recordings contain unmasked personal data, we immediately halt the review and assist the client’s engineering team in implementing edge redaction filters prior to resumption.
• Sampled diagnostic recordings and extracted video clips are permanently deleted from our encrypted review environments within thirty (30) days following final project handover.

4. Legal Basis for Data Processing

We process personal data based on one or more of the following legal grounds:

• Contractual Necessity: To perform our obligations under an agreed Statement of Work or respond to your service inquiry.
• Legitimate Business Interests: To maintain website security, prevent fraud, and manage our business operations.
• Consent: Where you have explicitly opted in to receive technical advisory updates or accepted analytics cookies.
• Legal Compliance: To comply with statutory accounting, tax, and regulatory reporting obligations in Thailand.

5. Data Retention Periods

• Inquiry Communications: Retained for up to twelve (12) months following the last correspondence if no engagement is contracted.
• Client Financial & Contract Records: Retained for seven (7) years in compliance with Thai statutory accounting requirements.
• Diagnostic Session Files: Securely purged within thirty (30) days of final audit delivery.

6. International Data Transfers

When collaborating with clients across international jurisdictions, personal data and project communications may be processed using secure cloud service providers situated in Singapore, Japan, the European Union, or the United States. All cross-border transfers are conducted under strict encryption and contractual safeguards.

7. Your Data Protection Rights

Under applicable data protection legislation (including Thailand’s PDPA), you possess the following rights regarding your personal information:

• Right to Access: Request a copy of the personal data we hold concerning you.
• Right to Rectification: Request correction of inaccurate or incomplete personal records.
• Right to Erasure (‘Right to be Forgotten’): Request deletion of your personal data where retention is no longer legally necessary.
• Right to Restriction: Request the suspension of data processing under specific conditions.
• Right to Withdraw Consent: Revoke consent previously granted for optional communications at any time.

8. Exercising Your Rights

To submit a formal data privacy request or ask questions about our data handling protocols, please contact our Data Protection Officer:

• Email: hello@registrycanvasgrid.digital
• Postal Address: Office 12, 31 Example Street, Chiang Mai 00000, Thailand
• Phone: +66 52 000 763

We respond to all verified data subject requests within thirty (30) calendar days.