Marketing
Legal

Privacy Policy

This policy explains what personal data OXE Marketing collects through this website, why we collect it, who we share it with and the choices and rights you have. It follows Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA").

Last updated: 21 October 2026

Who we are

This website is run by OXE Marketing, a creative and digital marketing agency in Bangkok, Thailand ("OXE", "we", "us"). We decide how and why your personal data is used, so we are the data controller.

For any question about this policy or your personal data, email us at info@oxemarketingth.com or call +66 82 448 0050.

The data we collect

When you contact us. If you send the enquiry form, we receive your name, email address and phone number, and, if you give them, your company, the services you are interested in, your project details, your budget range and how you prefer to be contacted. If you contact us by email, phone or WhatsApp, we receive the details you share there.

When you browse the website. Our hosting and security services record technical information such as your IP address, browser and device type and the pages you request, to deliver the website and protect it from spam and abuse.

Cookies and analytics, only with your consent. If you accept cookies, Google Analytics collects information about how the website is used (pages viewed, time spent, approximate location, device and browser) through cookies. See "Cookies" below.

We do not ask for sensitive personal data, and the website is not intended for children under 10.

Why we use your data

  • To reply to your enquiry and discuss, quote for and deliver our services. This is needed to take steps at your request before entering into a contract, or to perform that contract.
  • To keep a record of enquiries and client communication, so we can follow up and manage our work. This is our legitimate interest in running our business.
  • To keep the website secure and filter spam. This is our legitimate interest.
  • To understand how the website is used and improve it (Google Analytics). We do this only with your consent.
  • To meet legal obligations, for example accounting and tax records when you become a client.

We do not sell your personal data. We will only send you marketing messages if you have agreed to receive them, and you can stop them at any time.

Who we share it with

We share personal data only with service providers that help us run the website and our business, and only as much as they need:

  • Vercel hosts the website.
  • Supabase stores the enquiries sent through the form.
  • Google provides Google Analytics (only with your consent) and Google Maps on our Contact page (only when you choose to show the map). The website's fonts are served from our own site.
  • Cloudflare may check form submissions for spam.
  • Email and messaging services we use to reply to you, such as WhatsApp when you message us there.

We may also disclose data when the law requires it, or to protect our rights.

Transfers outside Thailand

Some of these providers store or process data on servers outside Thailand. When this happens, we rely on the providers' contractual commitments and safeguards to protect your data, as the PDPA requires.

How long we keep it

We keep enquiries for as long as needed to respond to you and manage our relationship, and then delete them. When we delete an enquiry, it is removed permanently after 30 days. Records we must keep by law (for example invoices) are kept for the period the law requires. Google Analytics data is kept for the retention period set in our Google Analytics account, no longer than 14 months.

Cookies

Cookies are small files a website stores in your browser. We use:

  • Necessary storage: remembers your cookie choice on this device, so we don't ask again on every page. This is always on.
  • Analytics cookies (Google Analytics): for example _ga and _ga_…, kept for up to 2 years. These are set only if you click Accept.
  • Google Maps: the map on our Contact page is loaded only when you accept cookies or click Show map. Google may then set its own cookies.

You can change your choice at any time with Cookie settings at the bottom of every page, or clear cookies in your browser settings.

Your rights

Under the PDPA you have the right to:

  • ask for access to, and a copy of, your personal data;
  • ask us to correct data that is wrong or incomplete;
  • ask us to delete or anonymise your data, or to restrict its use;
  • object to how we use your data;
  • receive your data in a commonly used format, or have it sent to another organisation;
  • withdraw your consent at any time (this does not affect what was done before);
  • complain to Thailand's Personal Data Protection Committee (PDPC).

To use any of these rights, email info@oxemarketingth.com. We will reply within 30 days.

Keeping your data safe

The website uses HTTPS encryption, enquiries are stored in a database that only authorised OXE team members can access, and our admin system requires a personal login. No system is completely secure, but we work to protect your data and will act quickly if something goes wrong.

Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with the date it was last updated at the top.