Privacy policy

1Who this policy covers

1.1This policy covers talvynlabs.com, including its Thai pages, enquiries sent through the contact channels listed on the website, and job applications. “We” and “us” refer to the operator of the Talvyn Labs website in Bangkok, Thailand.

1.2Data handled for a client project is governed by that project’s agreement and any applicable privacy notice. Product concepts shown on this website are illustrations, not live accounts or services that accept your information.

2Information we receive

2.1When you contact us. Your name, email address, organisation, contact details, messages and any project information or attachments you choose to send. The website’s contact links open your email application; a message reaches us when you send it.

2.2When you apply for a role. The details you send to our careers email, such as your contact information, CV, portfolio, experience and application correspondence. Please avoid sending sensitive information or identification documents that the application does not require.

2.3When you browse. Our hosting and security provider, Cloudflare, processes request information such as IP address, requested URL, browser information and access time to deliver and protect the website. Cloudflare Web Analytics also measures visits and page performance; see the analytics section below.

2.4You choose what to send us. If information necessary to respond to your enquiry or assess your application is missing, we may not be able to take it further. Please share another person’s information only when you are entitled to do so.

3Why we use information

3.1Enquiries and potential projects. To respond, discuss your requirements and prepare an agreement at your request. We rely on steps before entering a contract, performance of a contract where applicable, or our legitimate interest in responding to business contacts.

3.2Recruitment. To assess an application and communicate about the role. We rely on steps requested before entering a contract and our legitimate interest in managing recruitment fairly.

3.3Website operation and protection. To deliver pages, investigate faults, understand performance and prevent misuse. We rely on our legitimate interest in operating a reliable and secure website, balanced against your rights.

3.4Legal responsibilities and requests. To meet applicable legal duties, handle privacy requests and establish or defend legal claims. The basis is the relevant legal obligation or legitimate interest, as applicable.

3.5If a use requires consent, we will ask separately and explain how to withdraw it. Visiting this website does not by itself constitute consent to unrelated uses of your information.

4Analytics and cookies

4.1The website uses Cloudflare Web Analytics to understand visits and loading performance. Cloudflare describes this service as operating without analytics cookies, local-storage identifiers or fingerprinting, and without tracking individual visitors across websites.

4.2This is separate from Cloudflare’s hosting and security services, which may use necessary cookies when a security check is triggered. The restricted administrator area also uses authentication cookies. These are not advertising cookies.

4.3You can control or delete cookies in your browser settings. Blocking necessary cookies may affect security checks or administrator sign-in. The public website does not currently use advertising pixels. If we introduce optional tracking that requires consent, we will provide a choice before it starts.

• Cloudflare Web Analytics
• Cloudflare’s cookie information

5Who may receive information

5.1Information may be accessed by people working with Talvyn Labs who need it for the purposes above, and by providers supporting our website, security and email communications. Cloudflare provides website delivery, security and analytics, and Zoho Mail provides our email. Professional advisers or authorities may receive information where necessary to meet legal duties or handle a legal claim.

5.2Cloudflare and Zoho may process information outside Thailand. Where a transfer involves personal data, the applicable legal requirements and appropriate safeguards must be addressed for that transfer. We do not treat a visitor’s use of the website as consent to an international transfer.

5.3Links to Facebook, LinkedIn and other websites lead to services with their own privacy policies. When you use those services or your email application, their handling of information is also governed by their terms and notices.

6How long information is kept

6.1We keep information only as long as the reason we received it requires, or longer where the law requires it. When that period ends, we delete or anonymise it, including copies in backups as those backups expire.

6.2Enquiries and correspondence. If no project goes ahead, up to two years after our last contact. If one does, the relevant records become part of the project record. Records needed for a legal duty or claim may be kept for the applicable period.

6.3Job applications. If an application does not lead to a role, up to one year after we tell you the outcome. Keeping an application for future roles requires a separately communicated purpose and an appropriate legal basis.

6.4Technical records. According to Cloudflare’s retention settings for its hosting, security and analytics services, and the time needed to investigate an incident. Records needed for an active legal matter may be kept longer.

• Ask about retention of your information

7Your rights and choices

7.1Subject to the conditions and exceptions in Thailand’s Personal Data Protection Act, you may exercise the rights below. Contact us using the email at the end of this page. We may ask for proportionate information to verify your identity and clarify the request, and will respond within the applicable legal period. If a request cannot be fulfilled, we will explain why.

7.2Access and correction. Access to or a copy of your personal data, information about its source where applicable, and correction of inaccurate or incomplete information.

7.3Deletion, restriction or objection. Deletion or anonymisation, restriction of use, or an objection to processing in circumstances covered by law.

7.4Portability and withdrawal of consent. Transfer of data where the portability right applies. Where consent is the basis, you may withdraw it without affecting processing that was lawful before withdrawal.

7.5You may also lodge a complaint with Thailand’s Personal Data Protection Committee through its Office if you believe your personal data has been handled unlawfully.

• Office of the Personal Data Protection Committee

8Keeping information secure

8.1The website is served over HTTPS and its publishing area requires authorised access. Personal information should be accessible only to people who need it for the stated purpose, using appropriate access controls. No system can guarantee complete security.

8.2Please do not send passwords, payment-card details or unnecessary sensitive personal information in an enquiry. If you believe information sent to us has been exposed, contact us at the address below.

9Changes to this policy

9.1We will update this page when our information practices change and show the revised date. Where a change requires a new notice or consent, we will provide it before applying that change.

10Contact us about privacy

10.1For questions about this policy or to exercise your rights, contact Talvyn Labs using the email below. We have not appointed a data protection officer, so these requests come to us directly. The operator’s full legal name and postal contact address will be added before this draft takes effect.