Privacy Policy

Who we are and what this policy covers

The data controller is DNA Maker Co., Ltd. (บริษัท ดีเอ็นเอ เมคเกอร์ จำกัด), 1 Empire Tower, 27th Floor, Rooms 2701-3, 2712-14 (TT04), South Sathorn Road, Yannawa, Sathorn, Bangkok 10120, Thailand. You can reach us at dev@dnamaker.com or +66 2 098 6100.

This policy applies to dnamaker.com and the tools on it: the contact form, the AI Solution Finder chat, the voice assistant and proposal requests. It does not cover other websites we link to. Data we handle while delivering a project for a client is governed by that client's agreement with us.

What we collect

We collect data when you give it to us or when it is needed to serve the site. The main cases are:

• Contact form. Your first name, last name, email address, phone number and message. We store these as an enquiry so we can reply.
• AI Solution Finder chat. The messages you type, any images you attach and the replies the assistant gives. These are stored together as a conversation.
• Voice assistant (Dream). While a voice session is active, audio from your microphone is streamed to a speech and AI provider to produce spoken replies. DNA Maker does not keep the audio after the session ends.
• Proposals. When you ask for a proposal, we store the document we generate for you (the diagram and the PDF) and the contact details you give for it.
• Technical data. Our hosting provider, Cloudflare, receives your IP address and standard request logs (such as the page requested, the time and the browser type) as part of serving the site.

Why we use your data and the legal basis

We use your contact details and messages to answer your enquiry, prepare the proposal or estimate you asked for, and follow up with you. The legal basis is the performance of steps you requested before entering into a contract, and our legitimate interest in responding to business enquiries.

We use chat conversations to generate replies during the session, to prepare a proposal when you request one and to let our team follow up with you. The legal basis is our legitimate interest in running the service.

We use technical data to serve pages, keep the site secure and diagnose faults. The legal basis is our legitimate interest in running a secure website.

Where we rely on your consent, for example when you agree to be contacted after sending the form, you can withdraw it at any time by emailing us. Withdrawal does not affect processing that happened before.

Who processes your data on our behalf

We do not sell personal data and we do not share it for advertising. The providers below process data for us so the site can work. Some of them process data on servers outside Thailand. We disclose data to anyone else only when the law requires it.

• Cloudflare hosts the site (Workers, D1 database and R2 storage) and serves it from its network. It receives your IP address and request logs and stores the data described above on our behalf.
• AI model providers receive the messages and images you send in the chat so they can generate a reply. They are third-party API services.
• A speech and AI provider receives your microphone audio during a voice session and returns the spoken reply.
• Google Fonts and Adobe Fonts (Typekit) deliver the typefaces the site uses. When your browser fetches a font file, those services receive your IP address.
• Google LLC (Google Analytics 4), to count visits and the pages read, as the notice on your first visit says.

Cookies and browser storage

The site sets no advertising cookies, and uses one analytics tool, Google Analytics 4, described below.

We use Google Analytics 4 to count visits and see which pages are read. It runs from the first page you open, and the notice shown on your first visit tells you so. If you would rather not be counted, block third-party cookies or Google’s scripts in your browser, or install Google’s Analytics opt-out add-on; the site works exactly the same. Google receives your IP address (shortened), device and browser type, and the pages you open, and processes them under the Google Analytics terms.

The site uses the local storage in your browser for three things: to remember whether you chose the light or dark theme, to remember that you have seen the notice, and to keep your chat session so the conversation continues when you reload the page or come back. This data stays in your browser. You can clear it at any time through your browser settings; the chat will then start a new conversation and the notice will show again.

If we add other analytics or tracking tools later, we will update this policy and, where the law requires it, ask for your consent before setting those cookies.

How long we keep data

Chat conversations that did not lead to a proposal or a contact request are deleted automatically 90 days after the conversation.

Enquiries, proposals and the conversations linked to them are kept for as long as we have a business relationship with you, or until you ask us to delete them. After that we delete them, or keep only what the law requires us to retain.

Voice audio is not kept after the session ends. Request logs held by Cloudflare follow the retention periods Cloudflare sets.

How we protect your data

Data travels over encrypted connections (HTTPS) and is stored on Cloudflare infrastructure. Access is limited to DNA Maker staff who need it to reply to you or prepare your proposal. Staff and contractors who can see personal data are bound by confidentiality obligations.

No system is completely secure. If we learn of a breach that is likely to affect your rights, we will notify the Office of the Personal Data Protection Committee and, where the law requires it, you, within the time the law sets.

Your rights

Under the PDPA you have the rights listed below. To exercise any of them, email dev@dnamaker.com. We will reply within 30 days and may first ask you to confirm your identity so that we do not release your data to someone else.

• Ask for access to the personal data we hold about you and a copy of it.
• Ask us to correct data that is inaccurate or incomplete.
• Receive the data you gave us in a machine-readable format, or have it sent to another controller, where that can be done automatically.
• Ask us to delete your data, or to stop using it, where we no longer have a lawful reason to keep it.
• Withdraw consent you gave earlier.
• Object to processing based on our legitimate interests.
• Lodge a complaint with the Personal Data Protection Committee (PDPC) if you believe we have handled your data unlawfully.

Children

The site is made for businesses and the people who work in them. It is not directed at anyone under 20 years of age, the age of majority in Thailand, and we do not knowingly collect personal data from minors. If you believe a minor has given us personal data, email us and we will delete it.

Illustrations on the site

Many of the illustrations on the site, such as the people, workplaces and screens on the service, solution and blog pages, are made with AI image models. The people in them are not real people, and we do not use photographs or personal data of visitors or clients to make them.

Images made with AI carry the label “AI-generated image”, and we publish a record for each one, naming the model, the provider, the job ID, the time it was made and a hash of the file, on the AI image register. The screenshots of client work on the portfolio pages are not AI-generated.

AI image register →

Links to other websites

The site links to websites we do not control, including our social media pages. This policy does not cover those sites. Read their own privacy policies before giving them personal data.

Changes to this policy and how to contact us

We may change this policy when the site or the law changes. The date at the top shows when it was last updated. Changes apply from the date they are posted and do not apply backwards to data we processed before.

Questions about this policy or about your personal data: DNA Maker Co., Ltd., 1 Empire Tower, 27th Floor, Rooms 2701-3, 2712-14 (TT04), South Sathorn Road, Yannawa, Sathorn, Bangkok 10120. Email dev@dnamaker.com, phone +66 2 098 6100 or +66 81 831 5679, Monday to Friday 10:00 to 18:00 Bangkok time.