Legal

Privacy policy

This policy explains what personal data SystemFlow Financial Planning collects, why, for how long, and how to exercise your rights under Thailand's Personal Data Protection Act (PDPA).

Data controller

The data controller for personal data collected on this site is SystemFlow Financial Planning Co., Ltd., registered at 83/2, Rama III Road, Yan Nawa, Bangkok, 10120, Thailand. Tax ID (TIN): 0105104332181. Contact: info@systemflow.click, +66-2-294-5817.

What this policy covers

This policy covers personal data collected through the inquiry form on the /contact/ page and the cookie consent preference stored in your browser. It does not cover data handled by your year-end accountant, your bank or any third-party service you use separately from this site.

What data we collect and why

Inquiry form data. When you submit the inquiry form, the following personal data is sent to our same-domain server endpoint (/api/inquiry) and used only to respond to your inquiry:

  • Your name (required).
  • Your business name (optional).
  • Your email address (required).
  • Your phone number (optional).
  • The message you write (required).

The legal basis is your consent, given when you submit the form. The purpose is to read your inquiry and reply to it. We do not use this data for marketing, profiling or any secondary purpose.

Consent preference. When you accept or reject the cookie banner, a single preference string is stored in your browser’s localStorage under the key sfp_consent_v1. No cookie is set. This preference holds only your accept or reject choice; it stores no other personal data.

What we do not collect

This site runs no analytics, no tracking pixels, no advertising tags and no third-party scripts. We do not collect data about your browsing across other sites, we do not build an advertising profile, and we make no third-party requests of any kind. Fonts and scripts are hosted on this domain and served from its own assets.

Where data goes

Inquiry form data is sent only to the same-domain server endpoint (/api/inquiry) on systemflow.click. It is not sent to any third party. It is used only to respond to your inquiry. Consent preference data is stored only in your own browser and never leaves your device.

Retention

Inquiry form data is retained for as long as needed to respond to your inquiry and for a reasonable period afterwards to keep a record of the advice given, then deleted. You may request earlier deletion at any time (see your rights below). The consent preference persists in your browser until you clear browser storage.

Data-subject rights

Under the PDPA you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate personal data.
  • Request deletion of your personal data.
  • Withdraw consent at any time (withdrawal does not affect processing already carried out).
  • Request that we restrict or stop processing your personal data.

To exercise any of these rights, write to info@systemflow.click from the email address you used in your inquiry, and include enough detail for us to identify your record. We will respond within 30 days.

Security

Inquiry data is transmitted over HTTPS to our same-domain server. Access to submitted inquiries is restricted to the people who respond to them. No method of transmission or storage is fully secure, and we cannot guarantee absolute security, but we take reasonable steps to protect your data.

Changes to this policy

If we change how we handle personal data, this page will be updated and the “last reviewed” date below will change with it.

Contact and last reviewed

For any question about this policy or your personal data, contact info@systemflow.click or +66-2-294-5817.

Last reviewed: October 2026.