Privacy Policy — Modal Studio

Modal Creative Studio Co., Ltd. is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information when you visit our website or engage our services, and outlines your rights under applicable law including Thailand’s Personal Data Protection Act B.E. 2562 ("PDPA").

1. Data Controller

Modal Creative Studio Co., Ltd.
Bangkok, Thailand
Email: hello@modalstudio.co
We are the data controller for personal data collected through our website and in connection with our services.

2. Personal Data We Collect

Information you provide directly: Name, email address, phone number, company name, and project details submitted via contact forms, emails, or meetings.

Automatically collected data: IP address, browser type, device type, pages visited, referring URL, and time spent on site (collected via cookies and analytics tools).

Business relationship data: Contract details, payment information (processed by third-party payment providers — we do not store card data), invoices, and communications.

Sensitive data: We do not intentionally collect sensitive personal data (as defined under PDPA) unless strictly necessary and with your explicit consent.

3. How We Use Your Data

We process your personal data for the following purposes:

To respond to enquiries and provide quotations
To perform and manage contracted services
To process payments and manage accounts
To send project updates and service-related communications
To send marketing communications (with your consent, where required)
To improve our website and services through analytics
To comply with legal obligations

4. Legal Basis for Processing

We rely on the following legal bases under the PDPA and applicable law:

Contract performance: Processing necessary to fulfil our agreement with you
Legitimate interests: Improving our services, fraud prevention, and direct marketing to existing clients (where not overridden by your rights)
Legal obligation: Compliance with Thai law, tax regulations, and court orders
Consent: For marketing to non-clients, cookies beyond strictly necessary, and any sensitive data

5. Cookies & Tracking

Our website uses cookies to ensure functionality and understand usage. Strictly necessary cookies are used without consent. Analytics and marketing cookies are used only with your consent, which you can withdraw at any time via our cookie settings. For full details, see our Cookie Notice.

6. Data Sharing

We do not sell your personal data. We may share it with:

Service providers: Cloud hosting, email platforms, analytics tools, payment processors — bound by data processing agreements
Professional advisors: Lawyers and accountants under confidentiality obligations
Authorities: Government bodies where legally required
Business transfers: In the event of a merger or acquisition, subject to equivalent protections

7. International Transfers

Some of our service providers are located outside Thailand. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses or equivalent protections as required by the PDPA.

8. Data Retention

We retain personal data for as long as necessary for the purposes described in this Policy, or as required by law. Typically: client and contract records are kept for 10 years after the relationship ends (Thai legal and tax requirements); website enquiry data is held for 2 years; marketing data until you unsubscribe or withdraw consent.

9. Your Rights

Under the PDPA and applicable law, you have the right to:

Access your personal data and request a copy
Rectification of inaccurate or incomplete data
Erasure of your data in certain circumstances
Restriction of processing while a dispute is resolved
Data portability in a structured, machine-readable format
Object to processing based on legitimate interests or direct marketing
Withdraw consent at any time, without affecting prior lawful processing
Lodge a complaint with Thailand’s Personal Data Protection Committee (PDPC)

To exercise any right, contact us at hello@modalstudio.co. We will respond within 30 days.

10. Data Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or destruction, including encryption, access controls, and regular security reviews. In the event of a data breach affecting your rights, we will notify you and the relevant authorities as required by law.

11. Children’s Privacy

Our services are not directed at persons under 20 years of age (the age of majority in Thailand). We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us immediately.

12. Updates to This Policy

We may update this Policy to reflect changes in our practices or applicable law. We will post the updated version with a revised date. For material changes, we will provide prominent notice or direct notification.

13. Contact & DPO

For privacy-related enquiries or to exercise your rights:
Privacy / Data Protection Contact
Modal Creative Studio Co., Ltd., Bangkok, Thailand
Email: hello@modalstudio.co