01Scope
This policy explains how Invisor Co., Ltd. (“Invisor”, “we”), as data controller, collects, uses and discloses the personal data of visitors to this website and people who contact us, under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).
It does not cover data inside systems our customers use — FarmBoss, Power Management, IoT SCADA, Invisor IoT Platform or SecureDrive — which is governed by each service's contract and terms.
02Data we collect
Information you give us through the quote / demo request form:
- Full name, company or organization, email and phone number
- Province or installation site (if provided)
- Devices, systems and services of interest, project details and timeline
- Your consent, and the date and time of the request
Information you give us when you email or call, and technical data our servers record automatically when you visit — such as IP address, browser type, pages requested and timestamps.
We do not ask for sensitive personal data (such as health, religion or national ID numbers). Please don't include it in the project details field.
03Purposes and legal bases
- Answering your quote, demo or project request, and following up on it
- Your consent, and steps taken at your request before entering a contract (Sections 19 and 24(3))
- Keeping the website secure — preventing spam, attacks and abuse
- Legitimate interest (Section 24(5))
- Complying with the law or lawful orders of authorities
- Legal obligation (Section 24(6))
We will not use your data for newsletters or direct marketing unless you separately consent to it.
06International transfers
Some of our service providers may store data on servers outside Thailand. We transfer data only where the destination has adequate data-protection standards, or with appropriate safeguards as required by law (Sections 28 and 29).
07How long we keep data
- Enquiries that don't lead to a sale: no longer than 2 years after our last contact
- Customer data: for the duration of the contract, then as long as the law requires (e.g. accounting and tax law)
- Server technical logs: no longer than 90 days, unless needed to investigate a security incident
After that, we delete the data or make it no longer identifiable.
08Security
We use appropriate technical and organizational measures, such as HTTPS encryption in transit, access limited to the people who need it, and validation of everything submitted through our forms. No system is perfectly secure; if a breach puts your rights at risk, we will notify as the law requires.
09Your rights
Under the PDPA you have the right to:
- Access your data and obtain a copy
- Have inaccurate or outdated data corrected
- Have your data erased or anonymized
- Restrict the use of your data
- Object to processing
- Receive your data, or have it transferred to another controller
- Withdraw consent at any time, without affecting processing done before withdrawal
- Complain to the Personal Data Protection Committee (PDPC) office
Send requests to support@invisorcorp.com. We respond within 30 days and may ask you to verify your identity first.
10Minors
This website is intended for organizations and businesses. We do not knowingly collect data from minors; if we learn we have done so without parental consent, we will delete it.
11Changes to this policy
We may update this policy from time to time. The current version, with its effective date, is always on this page. If a change materially affects your rights, we will let you know appropriately.
12Contact us
- Data controller
- Invisor Co., Ltd.
- Address
- Room 202, 2nd Floor, 6/54 Soi Ngamwongwan 59, Lat Yao, Chatuchak, Bangkok 10900
- support@invisorcorp.com
- Phone
- +66 2 106 4023