Privacy Policy
Last updated: March 1, 2026
True Group Holdings Co., Ltd., operating under the trade name "True Dev" ("we," "our," or "us") operates the website at https://truedev.co.th (the "Site"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our Site or use our services.
1. Data Collection
We collect the following types of information:
Personal Information
Name, email address, phone number, and company name when you submit a contact form, request a quote, or create an account.
Technical Data
IP address, browser type and version, operating system, referral source, pages visited, time spent on pages, and other diagnostic data collected automatically through cookies and similar technologies.
Project Data
Information you provide about your project requirements, files uploaded, and communications within our client portal.
Payment Information
Billing details processed securely through our third-party payment provider (Stripe). We do not store credit card numbers on our servers.
2. Use of Data
We use your personal information to:
- Provide, maintain, and improve our services
- Respond to your inquiries and fulfil your requests
- Send you project updates, invoices, and service-related communications
- Send marketing communications (only with your explicit consent, and you may opt out at any time)
- Analyze usage patterns to improve our website and user experience
- Detect, prevent, and address technical issues and fraud
- Comply with legal obligations
4. Third-Party Services
We may share your information with trusted third-party service providers who assist us in operating the Site and conducting our business:
These providers are contractually obligated to protect your information and may only use it for the specific purposes for which it was shared.
5. GDPR Compliance (European Users)
If you are a resident of the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):
Right of Access
You may request a copy of the personal data we hold about you.
Right to Rectification
You may request correction of inaccurate or incomplete data.
Right to Erasure
You may request deletion of your personal data, subject to legal retention requirements.
Right to Restrict Processing
You may request that we limit how we use your data.
Right to Data Portability
You may request your data in a structured, machine-readable format.
Right to Object
You may object to processing based on legitimate interests or direct marketing.
To exercise any of these rights, please contact us using the details provided below. We will respond within 30 days.
6. Thai PDPA Compliance
As a company incorporated in Thailand, we comply with the Personal Data Protection Act B.E. 2562 (2019) (PDPA). Under the PDPA, you have similar rights to those described in the GDPR section above, including the right to access, correct, delete, and restrict the processing of your personal data.
We collect and process personal data only with a lawful basis, which may include your consent, the performance of a contract, compliance with legal obligations, or legitimate interests that do not override your fundamental rights.
If you wish to exercise your rights under the PDPA or have concerns about how your data is handled, please contact our Data Protection Officer at the address below.
7. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Project-related data is typically retained for the duration of our business relationship plus seven (7) years for legal and tax compliance purposes.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (TLS/SSL), encryption at rest, access controls, regular security audits, and employee training.
9. Children's Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.
11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us: