Template for legal review. This policy is a professionally-structured draft. Replace every [bracketed] field with your verified company details, and have qualified counsel confirm compliance with Thailand's PDPA, the EU/UK GDPR and any other applicable law before publication.

01Who we are

This website and the XZYNEXA platform are operated by XZYMODS ([full legal entity name, registration number]), [registered address, Bangkok, Thailand] ("XZYMODS", "we", "us"). XZYMODS is the data controller for personal data collected through this website.

For privacy matters, contact our data protection contact at privacy@xzymods.com.

02Data we collect

We collect only what we need to respond to you and to operate our services:

  • Enquiry & demo requests: name, work email, company, optional phone number, role, asset types and any message you provide.
  • Technical data: limited information your browser sends (e.g. IP address, device/browser type) and any cookies you accept — see our Cookie Policy.
  • Platform data (XZYNEXA customers): account and usage information processed under a separate customer agreement and Data Processing Statement.

We do not intentionally collect special-category personal data through this website.

03How we use data

  • To respond to enquiries and schedule product demonstrations.
  • To provide, maintain and improve our website and services.
  • To communicate about your request and, where permitted, relevant updates.
  • To meet legal, security and accounting obligations.

We do not sell your personal data.

04Lawful basis

Where applicable law (such as the GDPR or PDPA) requires a lawful basis, we rely on: your consent (e.g. when you submit the demo form); our legitimate interests in operating and securing our business; and compliance with legal obligations. You may withdraw consent at any time.

05Sharing & processors

We share personal data only with service providers who process it on our behalf under appropriate agreements, including [hosting/cloud infrastructure provider], [email/CRM provider] and [analytics provider, if any]. We may also disclose data where required by law.

06Retention

We keep enquiry data only as long as necessary for the purpose it was collected and to meet legal requirements, after which it is deleted or anonymised. [State specific retention periods.]

07Your rights

Subject to applicable law, you may have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent. To exercise these rights, contact privacy@xzymods.com. You may also lodge a complaint with your local data protection authority (in Thailand, the PDPC).

08Security

We apply appropriate technical and organisational measures designed to protect personal data, including encryption in transit and at rest, access controls and tenant isolation. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

09International transfers

Where personal data is transferred outside your jurisdiction, we use appropriate safeguards (such as standard contractual clauses) as required by applicable law. [Confirm data residency and transfer mechanisms.]

10Contact

Questions about this policy or your data? Contact privacy@xzymods.com or write to us at [registered address]. We may update this policy from time to time; the "last updated" date above reflects the current version.