--- lang: en title: "Website Privacy and Cookie Policy" url: https://nabrio.com/legal/privacy canonical: https://nabrio.com/legal/privacy updated: 2026-10-27 publisher: Nabrio Co., Ltd. (nabrio.com) --- # Website Privacy and Cookie Policy This policy explains how **Nabrio Co., Ltd.** ("Nabrio", "we", "us") handles personal data when you visit **nabrio.com** or contact us through it. It is written to meet Thailand's **Personal Data Protection Act B.E. 2562 (PDPA)**. It covers this website only. Nara and Reva run on our customers' own hardware, and personal data processed by the Nabrio Platform is governed by the Platform Terms of Use and the Nabrio Platform Policies published at [help.nabrio.com](https://help.nabrio.com). ## 1. Who is responsible Nabrio Co., Ltd., 52/25 Supalai Suanluang, Chaloem Phrakiat Rama 9 Rd., Prawet, Prawet, Bangkok 10250, Thailand, is the data controller for this website. Contact us about privacy at [hello@nabrio.com](mailto:hello@nabrio.com). ## 2. What we collect | Data | When | Why | Legal basis | | ------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------- | | Name, email address, company, phone number and the content of your message | When you email us, message us on LINE or otherwise contact us | To answer your enquiry, prepare a proposal or proof of concept, and keep a record of our correspondence | Steps before entering a contract, and our legitimate interest in responding to business enquiries | | CV and application details | When you apply for a job | To assess your application | Steps before entering a contract, and your consent where required | | Aggregated, anonymous usage statistics (pages viewed, referrer, country, device type, page performance) | When you browse the site | To understand which content is useful and to keep the site fast | Our legitimate interest. Vercel Web Analytics and Speed Insights do not use cookies and do not identify you | | Analytics cookies and identifiers set through Google Tag Manager | Only if you accept analytics cookies | To measure visits and campaigns in more detail | Your consent, which you can withdraw at any time | | Technical logs (IP address, browser, time of request) | When your browser requests a page | To deliver the site securely and to detect abuse | Our legitimate interest in operating a secure website | We do not sell personal data, and we do not use this website to make automated decisions about you. ## 3. Cookies | Cookie | Type | Purpose | Duration | | ------------------------------------------------------------------------------------ | -------------------- | ------------------------------------------------------------ | --------------- | | `nabrio_consent` | Strictly necessary | Remembers whether you accepted or rejected analytics cookies | 12 months | | Google Analytics cookies set through Google Tag Manager (for example `_ga`, `_ga_*`) | Analytics (optional) | Measure visits and campaigns | Up to 24 months | Analytics cookies are set only after you click **Accept** in the cookie banner. You can change your choice at any time with the **Cookie settings** link in the footer. Rejecting analytics cookies does not affect how the site works. ## 4. Who we share data with We share personal data only with service providers that help us run the website and our business, under contracts that require them to protect it: - **Vercel Inc.** hosts the website and provides cookieless analytics. - **Google LLC** provides Google Tag Manager and Google Analytics, only if you accept analytics cookies. - Our email, messaging and office software providers, to handle the messages you send us. We may also disclose data where the law requires it, or to protect our rights. ## 5. International transfers Some of these providers process data outside Thailand, including in the United States. Where we transfer personal data abroad, we rely on the safeguards the PDPA allows, such as the provider's contractual commitments and standard data protection clauses. ## 6. How long we keep data - Enquiries and correspondence: for as long as needed to respond and to manage our business relationship, and then for up to 2 years, unless a longer period is required by law. - Job applications: up to 12 months after the recruitment process ends, unless you agree to a longer period. - Analytics data: according to the retention settings of the analytics tool, at most 24 months. - Technical logs: for a short period set by our hosting provider. ## 7. Your rights Under the PDPA you have the right to: - be informed about how we process your data; - access and obtain a copy of your data; - have your data transferred to another controller (data portability); - object to processing; - ask us to delete, destroy or anonymise your data; - ask us to restrict processing; - ask us to correct inaccurate or incomplete data; - withdraw your consent at any time, without affecting processing that took place before; and - complain to the Personal Data Protection Committee (PDPC) of Thailand. To exercise these rights, email [hello@nabrio.com](mailto:hello@nabrio.com). We will respond within the time the law requires. ## 8. Security We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS) and access controls on the systems that hold it. ## 9. Children This website is intended for businesses and is not directed at children under 20. We do not knowingly collect their personal data. ## 10. Changes to this policy We may update this policy from time to time. The "Last updated" date shows when it last changed. Significant changes will be highlighted on this page.