Privacy policy overview

Key definitions

This section defines terms used in the policy to ensure clarity about the types of data and processing activities referenced throughout the document.

Personal data means information that identifies or can be used to identify an individual, either directly or in combination with other information. Examples include names, email addresses, phone numbers, company affiliation, billing details, and account credentials.

Processing refers to any operation performed on personal data, such as collection, recording, organization, storage, adaptation, retrieval, consultation, use, disclosure, erasure or destruction, whether automated or manual.

User refers to any visitor, client contact, contractor or candidate who interacts with cybrixti through the website cybrixti.click or through services delivered as part of a software development engagement.

Service refers to custom software development, integration, testing, maintenance, consultancy and related professional services provided by cybrixti to business clients, as well as the related online resources and support interfaces accessible via cybrixti.click.

Cookies are small data files placed on a device by websites to store preferences, improve functionality, measure usage and support security. Cookies can be session-based or persistent and may be set by cybrixti or by third-party providers.

Purposes of processing

We process personal data for clear operational purposes necessary to deliver services, to comply with legal obligations and to maintain secure and efficient operations.

• To deliver software development, integration, testing and maintenance services to business clients.
• To manage accounts, billing, orders and contractual relationships related to our services.
• To communicate with clients, prospects and partners about projects, technical support and administrative matters.
• To detect, prevent and respond to security incidents, fraud and abuse.
• To perform analytics and usability testing that help improve service reliability and user experience.
• To meet legal and regulatory requirements, including tax and accounting obligations.
• To operate and improve the website cybrixti.click and related client portals.
• To support recruitment processes, professional evaluations and background checks where applicable.

Legal bases for processing (where applicable)

When processing personal data in jurisdictions that require a legal basis, we rely on lawful grounds appropriate to the activity. This is presented for informational purposes and does not alter contractual terms.

• Performance of a contract: processing necessary to provide services and fulfil contractual obligations.
• Legal obligation: processing required to comply with laws, tax or regulatory requirements.
• Consent: where we request and receive explicit consent for specific processing activities such as marketing communications.
• Legitimate interests: processing necessary for security, fraud prevention, service improvements and client relationship management, balanced against individual rights.

Cookies and similar technologies

We use cookies and similar technologies to support website functionality, to analyze performance and to customize user settings. Cookies help maintain sessions and provide a consistent experience across visits.

Cookies in use may include essential cookies required for site operation, functional cookies for preferences, analytics cookies for usage measurement, and optional cookies for marketing or integration with third-party services.

Essential: required for basic site features. Functional: remember preferences. Analytics: measure site usage. Marketing: support outreach and integrations with advertising platforms.

Most browsers allow you to control cookie settings including blocking cookies or deleting existing cookies. You can also adjust cookie preferences through any on-site cookie controls provided on cybrixti.click.

Cookie Policy

Sharing and disclosure

We share personal data only as necessary to provide services, to comply with legal requirements, or with authorized third parties that support our operations. Third parties are selected based on their ability to provide services under appropriate confidentiality and security obligations.

• Service providers and subcontractors engaged to perform development, testing, hosting, analytics or payment processing.
• Professional advisors such as legal, accounting and audit firms when required to support business operations or compliance.
• Affiliated entities and corporate partners that participate in service delivery under strict access controls.
• Authorities and regulators when required by applicable law, court order or official request.
• Potential buyers or counterparties in connection with a business transfer, merger or reorganization where personal data is an asset necessary to evaluate or complete the transaction.
• Third-party integrations explicitly authorized by clients for project purposes, where clients provide credentials or consent to share data with specified platforms.

International transfers

Because we operate internationally and use global service providers, personal data may be transferred to and processed in countries other than the country in which the data subject is located. Transfers are limited to jurisdictions necessary for service delivery.

Where transfers occur, we use available safeguards appropriate to the context, such as contractual protections, standard contractual clauses, technical controls and access restrictions. Data stored in cloud services is protected by industry-standard controls.

Data retention

We retain personal data only for as long as necessary to fulfill the purposes described, to meet contractual and legal obligations, and to resolve disputes or enforce agreements.

Account and profile information is retained for the duration of the business relationship and for a reasonable period afterward to meet accounting and compliance obligations.

Communications, support tickets and project correspondence are kept for the duration of the relevant engagement and for a period necessary to address follow-up support, warranty and warranty-like issues consistent with industry practices.

System and security logs are retained for a limited period to support incident response, monitoring and compliance; retention periods vary depending on log type and regulatory requirements.

When personal data is no longer required, we delete, anonymize or securely archive it. Requests for deletion are processed subject to legal, contractual and operational constraints; some data may need to be retained for tax, accounting or dispute resolution.

Security measures

We implement administrative, technical and physical measures designed to protect personal data against unauthorized access, alteration, disclosure and destruction. Measures are reviewed periodically and adjusted in line with changes to threat models and operational needs.

• Access controls and role-based permissions to limit data access to authorized personnel.
• Encryption of data in transit and where appropriate at rest, and use of secure communication channels for sensitive platform.
• Regular backups, secure configuration of infrastructure and monitoring to detect and respond to incidents.

How to exercise your rights

Individuals may contact us to exercise applicable rights such as access, correction, deletion, restriction of processing, data portability and objection. Requests will be handled in accordance with applicable law and in a timely manner.

• Access: request a copy of personal data we hold about you and information about processing.
• Rectification: request correction of inaccurate or incomplete personal data.
• Erasure: request deletion of personal data when processing is no longer necessary and no retention obligations apply.
• Restriction: request limitation of processing in certain situations, for example while a dispute about accuracy is resolved.
• Portability: request transfer of certain personal data in a structured, commonly used and machine-readable format where applicable.
• Objection: object to processing based on legitimate interests or to direct marketing where applicable.
• Request restriction of processing of your personal data under applicable law where processing is contested or limited for legal reasons.
• File a complaint with a supervisory authority in Thailand if you believe your personal data has been processed unlawfully.

How to Exercise Your Privacy Rights

If you wish to review, correct, delete, or restrict use of your personal information, or request a copy of data we hold about you, submit a request to our privacy contact. Please include a clear description of the information you seek and any relevant identifiers. We will verify your identity before responding to protect your privacy.

[email protected]

We aim to acknowledge receipt of privacy requests within 5 business days and complete responses within 30 calendar days where feasible. In complex cases we will inform you of any necessary extension and the reasons for it.