Privacy Policy

Privacy Policy / นโยบายความเป็นส่วนตัว

How MemoLab handles personal data in English and Thai.

Effective date: April 25, 2026

EN

1. Scope and Applicability

This Privacy Policy explains how MemoLab ('we', 'us', or 'our') collects, uses, discloses, stores, and processes personal data. This policy applies to your access and use of our website, products, applications, tools, and any related services (collectively, the 'Services').

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. This policy complies with applicable data protection laws, particularly the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand.

EN

2. Data Controller

MemoLab acts as the Data Controller under the PDPA for personal data collected through our Services. This means we determine the purposes and means of processing your personal data.

If you have any questions or concerns regarding this policy, please contact our Data Protection Officer (DPO) or privacy team at: hello@memolab.me.

EN

3. Personal Data We Collect

We may collect various types of personal data depending on your interaction with our Services, including:

  • Identity & Contact Data: Name, username, email address, phone number, and social media identifiers.
  • Technical Data: IP address, browser type and version, time zone setting, operating system, and device information.
  • Usage Data: Information about how you use our website, products, and services, including pages viewed and timestamps.
  • Communication Data: Any messages, feedbacks, support requests, or other content you send directly to us.

EN

4. How We Collect Your Data

We collect data through several methods:

  • Direct Interactions: Information you provide when registering, subscribing, or communicating with us.
  • Automated Technologies: Data automatically collected as you interact with our website via cookies and analytics tools.
  • Third Parties: Data received from analytics providers, advertising networks, and integration partners.

EN

5. Purposes and Legal Bases

We process your personal data under the following lawful bases permitted by the PDPA (Consent, Contract, Legal Obligation, or Legitimate Interest):

  • To provide and maintain our Services (Contractual basis).
  • To respond to your inquiries and offer customer support (Legitimate Interest / Contractual basis).
  • To analyze, improve, and secure our Services and user experience (Legitimate Interest).
  • To comply with applicable legal obligations or court orders (Legal Obligation).
  • To send marketing communications and updates, provided we have obtained your consent (Consent).

EN

6. Cookies and Tracking Technologies

We use cookies, transparent pixels, and tracking technologies to distinguish you from other users, provide you with the best experience, and improve our site.

You can configure your browser to refuse some or all cookies. However, disabling cookies may impact your ability to use certain features of the Services.

EN

7. Data Disclosure and Third Parties

We do not sell your personal data. We may share your data strictly on a need-to-know basis with:

  • Service providers acting as data processors (e.g., cloud hosting, database providers, analytics).
  • Professional advisors, including lawyers, bankers, and auditors.
  • Government authorities or law enforcement agencies when necessary to comply with the law.
  • Relevant third parties in the context of business restructuring, mergers, or acquisitions.

EN

8. Cross-Border Data Transfers

In certain instances, your personal data may be transferred to and stored in countries outside Thailand to process on our cloud infrastructure providers.

We will ensure that any cross-border transfer complies with the PDPA, and that the destination country or the recipient organization provides an adequate level of data protection.

EN

9. Data Security and Retention

Security: We implement robust technical, physical, and administrative measures designed to secure your personal data from unauthorized access, loss, misuse, modification, or disclosure.

Retention: We retain personal data only for as long as necessary to fulfill the purposes for which we collected it, or as required to comply with our legal obligations or resolve disputes.

EN

10. Your Rights under the PDPA

Under Thailand's PDPA, you have robust rights regarding your data:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure / Right to be Forgotten: Request deletion or anonymization of your data.
  • Right to Restrict or Object: Restrict certain processing or object to our legitimate interests or direct marketing.
  • Right to Data Portability: Request transfer of your data to another controller.
  • Right to Withdraw Consent: Withdraw consent at any time without affecting prior lawful processing.
  • Right to Lodge a Complaint: File a complaint with the Personal Data Protection Committee of Thailand.

EN

11. Contact Us

To exercise your rights or if you have any questions regarding this Privacy Policy, please contact us at: hello@memolab.me.