1. Data Controller Information

Resource Canvas Core Ltd. (“we,” “us,” or “our”) acts as the Data Controller responsible for personal data collected through resourcecanvascore.digital and during technical diagnostic engagements.

2. Categories of Information We Collect

We collect information necessary to facilitate engineering consultations, diagnostic service delivery, and website operation:

  1. Contact & Professional Identification Data: Name, business email address, company name, telephone number, and job title provided when submitting an incident brief or scheduling a technical scoping session.
  2. Technical Telemetry & Incident Artifacts: Stack trace dumps, application logs, memory registers, symbol maps, and environment parameters uploaded for diagnostic evaluation. We strictly advise clients to sanitize personally identifiable user data from all diagnostic dumps before transmission.
  3. Automated Site Telemetry: Anonymized IP addresses, browser types, device operating systems, referring URLs, and page navigation patterns collected via essential and diagnostic cookies.

3. Legal Basis & Purposes for Processing

We process your data under the Personal Data Protection Act (PDPA) of Thailand and international data protection standards:

  • Performance of Contract: To evaluate incident briefs, conduct commissioned diagnostic investigations, author root-cause dossiers, and provide engineering debriefs.
  • Legitimate Interests: To maintain website security, prevent fraudulent submissions, improve diagnostic methodologies, and optimize laboratory performance.
  • Consent: Where you provide explicit consent for analytical cookies or marketing communications (which may be withdrawn at any time).

4. Data Retention Policy

  • Diagnostic Dumps & Memory Artifacts: Retained for a maximum of 60 days following the completion and acceptance of a diagnostic engagement, after which they are permanently destroyed using cryptographic erasure standards, unless extended retention is requested in writing by the client for ongoing regression tracking.
  • Commercial & Contact Records: Retained for 5 years to comply with statutory Thai accounting, tax, and contractual requirements.
  • Website Analytical Logs: Retained in aggregated, anonymized format for 12 months.

5. International Data Transfers

Resource Canvas Core operates from Chiang Mai, Thailand, and provides diagnostic services to global clients. Where personal data or diagnostic artifacts are transferred internationally, we ensure appropriate safeguards are implemented, including standard contractual clauses, end-to-end TLS 1.3 encryption, and localized encrypted data storage conforming to international privacy benchmarks.

6. Your Rights Under Data Protection Laws

Depending on your jurisdiction and applicable data protection regulations (including the Thai PDPA and EU GDPR), you possess the right to:

  • Access: Request a copy of the personal data we hold concerning you.
  • Rectification: Request correction of inaccurate or incomplete records.
  • Erasure (“Right to be Forgotten”): Request deletion of your personal data where retention is no longer necessary for contractual or legal obligations.
  • Restriction & Objection: Object to or restrict specific processing activities.
  • Data Portability: Receive your data in a structured, commonly used, and machine-readable format.

To exercise any of these rights, contact our Data Protection Officer at privacy@resourcecanvascore.digital.

7. Policy Updates

We may update this Privacy Policy periodically to reflect evolving legal requirements or diagnostic practices. The latest revision date will always appear at the top of this document.