Privacy policy
How API Layer Path collects, uses, and retains personal data when you contact us or browse this site.
Data controller
API Layer Path controls personal data submitted through this website and during audit engagements. Contact: info@apilayerpath.digital, Level 5, 50 Phaya Thai Road, Ratchathewi, Bangkok 10400, phone +66 2 555 1260.
Data we collect
- Contact details you enter on forms (name, email, tender name, message)
- Correspondence related to scoping and delivery of audits
- Technical logs such as IP address and browser type when essential for security
- Cookie-related preferences stored in your browser (see our Cookies page)
We do not ask for national identification numbers or payment card data through this website.
Purposes
We use personal data to respond to audit requests, perform contracted work, issue invoices, improve site security, and meet Thai legal obligations. We do not sell personal data.
Retention
Enquiry records are kept up to 24 months if no engagement follows. Engagement files, including necessary personal contacts, are retained for seven years unless a longer period is required by law or the engagement letter. Server logs are rotated on a shorter cycle.
Your rights
Subject to Thai personal data protection law, you may request access, correction, deletion, or restriction of processing, and you may object to certain processing. Send requests to info@apilayerpath.digital. You may also lodge a complaint with the relevant Thai supervisory authority.
International transfers
Our primary filing sits in Thailand. If a subprocessors or secure transfer tool stores a copy outside Thailand, we apply contractual safeguards appropriate to the destination and limit the data to what the transfer requires.
Processors
We may use email hosting, encrypted file transfer, and analytics providers bound by confidentiality and data-processing terms. Essential processors are listed conceptually on the Cookies page where they set cookies.
Children
This site is aimed at professional buyers and is not intended for children under 16.
Updates
We may revise this policy by updating this page and changing the effective context of the text. Material changes to engagement data handling will also be noted to active clients by email when practical.