Privacy Policy

growizsy operates the website at growizsy.digital and provides custom software development services to businesses. This policy explains what personal data we collect, why we process it, and the choices available to users. Our contact address is Thanon Nittayo, Amphoe Kusuman District, Sakon Nakhon Province 47210, Thailand. For inquiries call +66974184637 or reference Business ID 5531777631137. The effective date of this policy is 2026-01-17.

2026-01-17 growizsy.digital Co., Ltd. Thanon Nittayo, Amphoe Kusuman District, Sakon Nakhon Province 47210, Thailand [email protected]

Definitions

This section explains key terms used in this policy so you can better understand what we mean by personal data, processing and service.

Personal data means any information relating to an identified or identifiable natural person, such as a name, email address, phone number, company name, billing details, or other identifiers collected during engagement with our services.
Processing refers to any operation performed on personal data, including collection, recording, organization, storage, adaptation, retrieval, use, disclosure, erasure or destruction performed by growizsy or its service providers.
User means any visitor to growizsy.digital, prospective client, customer, or business contact who interacts with our site or engages our services.
Service means the custom software development, consulting, integration and maintenance services provided by growizsy through client engagements and the growizsy.digital website.
Cookies are small text files placed on your device by a website to store preferences, enable functionality, and collect analytical data about site use. They help us operate features and improve the user experience.

Data Collection

We collect data that is necessary to deliver services, communicate with users, process payments and improve our offerings. Data is gathered directly from you, automatically via systems, and from trusted third-party sources when relevant.

Data You Provide

When you contact us, request a quote, register for an account, or sign a contract, we collect information you submit to us to manage the relationship and deliver services.

  • Contact details: names, email addresses and phone numbers
  • Company information: business name, registration numbers and business ID 5531777631137
  • Project details: requirements, specifications, and technical preferences
  • Billing and invoicing information: billing address and payment details provided for invoicing
  • Account credentials and authentication data you create for project portals
  • Communications and support correspondence, including emails and messages platform with our team

Automatically Collected Data

When you visit growizsy.digital or use our online tools, we automatically collect technical and usage information that helps us operate the site and analyze performance.

  • Technical data such as IP address, browser type and device identifiers
  • Usage data including pages visited, time on site and navigation paths
  • Analytics data from services we use to measure site performance and user behavior
  • Error logs and diagnostic data generated by applications during use
  • Cookie and tracking identifiers for session management and preferences
  • Aggregated performance metrics related to hosted applications

Third-party Sources

We may receive data about you from trusted third parties when it is required for service delivery or payment processing. We limit third-party data sharing to necessary purposes.

  • Payment processors and business institutions used to handle billing
  • Analytics and hosting providers that support website and application performance
  • Professional advisors and subcontractors engaged to support delivery under confidentiality terms

Purposes of Processing

We process personal data only for specified, legitimate purposes related to delivering our services and managing our relationship with you. Processing is limited to what is necessary for each purpose.

  • To deliver and maintain software development and consulting services
  • To manage onboarding, project planning and technical delivery
  • To issue invoices, process payments and manage business records
  • To communicate project status, support requests and contractual matters
  • To detect, prevent and contribute security incidents and misuse
  • To personalize content and improve user experience on growizsy.digital with opt-out options available
  • To comply with legal obligations and respond to lawful requests from authorities
  • To analyze service performance and operational metrics for internal improvement

Legal Basis for Processing

Where applicable, we rely on one or more lawful bases to process personal data. The basis used depends on the nature of the data and the processing purpose.

  • Performance of a contract: processing necessary to provide services you request
  • Consent: where we ask for and you provide explicit consent (you may withdraw consent at any time)
  • Legal obligation: processing required to comply with laws and regulations
  • Legitimate interests: for business operations, security, and fraud prevention where interests are balanced with your rights

GDPR and Data Protection Rights

If you are located in the European Economic Area or the UK, certain data protection rights apply. We aim to respond to requests regarding your personal data in a timely manner.

  • Right of access: you can request a copy of personal data we hold about you
  • Right to rectification: you may ask us to correct inaccurate or incomplete data
  • Right to erasure: subject to legal limits, you can request deletion of personal data
  • Right to restrict processing: in certain circumstances you can request limited processing
  • Right to data portability: you can request portable copies of certain data you provided
  • Right to lodge a complaint with a supervisory authority if you consider our handling of your data unacceptable

Cookies

Cookies and similar technologies are used on growizsy.digital to enable core functionality, store preferences and gather analytics. You can manage cookie preferences through your browser and consent tools provided on the site.

We use session cookies, persistent cookies, analytics cookies and functional cookies to operate services and measure usage.

Cookies are categorized as necessary, preferences, analytics and marketing. Necessary cookies enable site basic features and cannot be disabled via the site controls.

You can control cookies via your browser settings or through the cookie consent banner on the site. Disabling certain cookies may affect site functionality.

Cookie Policy

Data Sharing

We share personal data only with parties necessary to provide the service, fulfill legal obligations, or support operations under contractual confidentiality safeguards.

  • Service providers and subcontractors who perform functions on our behalf (hosting, analytics, billing)
  • Payment processors used to securely handle transactions
  • Professional advisors such as legal or tax advisors when required
  • Regulatory or law enforcement authorities when disclosure is legally required
  • Affiliated companies and business partners when necessary for project delivery
  • Third parties involved in mergers, acquisitions or corporate restructuring, subject to confidentiality commitments

International Transfers

Personal data may be transferred to, stored, and processed in countries outside your country of residence, including Thailand and other jurisdictions where our providers operate. We take steps to ensure appropriate protections are in place.

Safeguards can include contractual data transfer agreements, standard contractual clauses, and assessment of third-party security practices to maintain an adequate level of protection.

Data Retention

We retain personal data only as long as necessary to fulfill the purposes described, comply with legal obligations, resolve disputes and enforce agreements.

Account and project data are retained for the duration of the client relationship and for a period after project completion to support maintenance, typically aligned with contractual terms and local accounting rules.

Support and communication records are retained for operational and troubleshooting purposes for a reasonable period to ensure service continuity.

System logs and analytics data are kept for diagnostic and security purposes for a limited timeframe based on operational needs.

On request we will delete personal data where there is no legal requirement to retain it, subject to verification and reasonable time to complete deletion across backups and systems.

Security

growizsy implements administrative, technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration and destruction. Security controls are reviewed periodically and updated as technology and risks evolve.

  • Access controls, encryption in transit and at rest, secure development practices and regular security reviews
  • Encrypted backups stored in geographically separated data centers to reduce risk of data loss and ensure business continuity in case of infrastructure issues.
  • Access controls with role-based permissions and periodic reviews so only authorized team members can reach sensitive project data and client code repositories.

User Rights

Users can review and manage personal data collected by growizsy. Below are the key rights available to individuals under applicable privacy principles relevant in Thailand and internationally.

  • Right to access: request a copy of personal data we hold about you and receive information about how it is processed.
  • Right to rectification: request correction of inaccurate or incomplete personal data to keep records accurate for project delivery and communication.
  • Right to erasure: request deletion of personal data where retention is no longer necessary for the purposes it was collected, subject to legal and contractual constraints.
  • Right to restriction: request temporary suspension of processing where the accuracy of personal data is contested or the legality of processing is being verified.
  • Right to data portability: request a structured, commonly used machine-readable copy of personal data you provided to growizsy where technically feasible.
  • Right to object: object to processing based on legitimate interests or direct marketing; we will review such requests and adjust processing where appropriate.
  • Right to withdraw consent: withdraw consent for direct marketing or optional processing at any time without affecting processing based on other legal grounds.
  • Right to lodge a complaint: contact the relevant supervisory authority in Thailand if you believe your rights are not being upheld; we will also assist with internal reviews.

How to request your rights

To exercise any of the rights above, contact growizsy by email or postal mail using the contact details below. Provide a clear description of the data and the action requested. We may require identity verification to protect your privacy.

[email protected]

We aim to acknowledge requests within 7 business days and to respond substantively within 30 calendar days. Complex requests may require additional time; we will notify you if more time is needed.

Marketing communications

growizsy may send business-related updates, product news, case studies, and offers to clients who opt in. Communications are tailored to business needs and focused on improving your software outcomes and operational efficiency.

You can opt out of marketing messages at any time using the unsubscribe link in emails or by contacting growizsy directly. Opting out will not affect transactional messages related to active projects.

Children's privacy

growizsy does not knowingly collect or target personal data from children under the age of 13. If we become aware that personal data from a child has been collected without appropriate consent, we will take steps to promptly delete that information.

Third-party links

Our services may reference or link to third-party websites and tools. growizsy is not responsible for the privacy practices or content of external sites. Review third-party privacy policies before sharing personal information with them.

Changes to this privacy policy

We may update our privacy information to reflect changes in practices, legal requirements, or new services. Notable updates will be communicated via growizsy channels and the revised effective date will be shown at the top of the policy.