Privacy notice

This notice applies to thanakorn.site, its subdomains, and services that link to this notice. A service may publish a supplemental notice when it processes different data or needs more specific terms. The supplemental notice controls for that service if the two differ.

External websites reached through this site—including GitHub, LinkedIn, and other publishers—operate under their own privacy notices.

The site and its services may process:

• Request and device data: IP address, request time, requested URL, response status, browser or user-agent information, and security or diagnostic events.
• Communications: your email address, name if supplied, message content, and related correspondence when you contact me.
• Service data: information you deliberately submit to a subdomain or data-processing tool, together with the result needed to provide that service.

Please do not submit patient-identifiable health information, government identifiers, credentials, or other sensitive data unless a service expressly states that it is designed and authorised to receive it.

Data is processed only as needed to:

• deliver a page, tool, or result you requested;
• respond to a message or take steps you ask for;
• secure, debug, and maintain the services;
• measure reliability using operational, preferably aggregated data;
• comply with law or establish, exercise, or defend a legal claim.

Depending on the interaction, processing is based on your request or a contract, legitimate interests in operating and securing the services, a legal obligation, or consent where the interface specifically requests it. Consent can be withdrawn without affecting earlier lawful processing.

The site is delivered using Cloudflare. Cloudflare may process network and customer-log data, including IP addresses and traffic metadata, to deliver, protect, and observe the service. Cloudflare describes its role and practices in its privacy policy.

Personal data may also be disclosed to a provider required by a specific subdomain, professional advisers under confidentiality, or a competent authority where legally required. Data is not sold or rented.

Operational logs are retained according to the configured infrastructure plan and are deleted or allowed to expire when no longer needed for security, diagnosis, or legal obligations. Correspondence is kept while a request remains active and afterwards only when reasonably needed for continuity or legal records.

Service input and output follow the retention statement shown by that service. If no service-specific period is shown, they should be treated as transient and retained no longer than necessary to return the requested result and investigate immediate errors.

Providers may process data outside Thailand. Where cross-border processing occurs, reasonable contractual, organisational, and technical safeguards are used as applicable.

This portfolio does not use advertising cookies. Essential security or routing technologies may be set by infrastructure providers. A subdomain that adds analytics, authentication, preferences, or other storage must explain that processing in its own interface or supplemental notice.

Subject to applicable law, you may request access, correction, deletion, restriction, objection, data portability, or withdrawal of consent. You may also lodge a complaint with Thailand’s Personal Data Protection Committee. Identity may need to be verified before a request is completed.

Thailand’s PDPA requires collection notices to identify purposes, data, retention, recipients, controller contact details, and data-subject rights. See the Ministry of Digital Economy and Society’s unofficial English translation of the PDPA.

The controller for this site is Thanakorn Buathongtanakarn, Bangkok, Thailand. Send privacy questions or rights requests to thanakorn@thanakorn.site.

This notice is a transparency statement, not legal advice. It will be updated when the services or their processing materially change.