Home

Privacy Policy

Last updated: January 28, 2026

This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

Interpretation and Definitions

Definitions

For the purposes of this Privacy Policy:

  • Account means a unique account created for You to access our Service or parts of our Service.
  • Company (referred to as "the Company", "We", "Us" or "Our") refers to EchoStory, located at 55/228 - 229 Soi 7 Moo 5 Monwadee Exclusive Village, Phimonrat, Bangbuathong, Nonthaburi 11110, Thailand. For the purpose of the PDPA, the Company is the Data Controller.
  • Country refers to: Thailand.
  • Personal Data is any information that relates to an identified or identifiable individual.
  • Service refers to the Website and the Hosting Services provided.
  • Website refers to EchoHosting, accessible from hosting.echostory.in.th.
  • You means the individual accessing or using the Service.

Collecting and Using Your Personal Data

Lawful Basis for Processing

Under the Personal Data Protection Act (PDPA) of Thailand, we process your personal data under the following lawful bases:

  1. Contractual Necessity: To fulfill the hosting service agreement, create your account, and provide technical support.
  2. Legal Obligation: To comply with the Computer Crime Act B.E. 2550 (2007) regarding the retention of traffic data (logs).
  3. Legitimate Interest: To detect fraud, improve security, and analyze service performance.
  4. Consent: For marketing communications or non-essential cookies. You may withdraw this consent at any time.

Types of Data Collected

Personal Data

  • Email address
  • First name and last name
  • Phone number
  • Address, State, Province, ZIP/Postal code, City
  • Billing information (if applicable)

Usage Data & Traffic Data

Usage Data is collected automatically when using the Service. This includes IP address, browser type, pages visited, and timestamps.

Important Note on Server Logs: In compliance with the Computer Crime Act of Thailand, we retain computer traffic data (Log Files) for a minimum of 90 days.

Retention of Your Personal Data

  • Account Information: Retained for the duration of your account plus 24 months after closure.
  • Traffic Data (Logs): Retained for a minimum of 90 days and up to 2 years.
  • Support Tickets: Retained for up to 24 months.

Your Rights Under the PDPA

  1. Right to Access: Request a copy of the personal data we hold about you.
  2. Right to Rectification: Request correction of inaccurate or incomplete data.
  3. Right to Erasure: Request deletion of your data (where permitted).
  4. Right to Restrict Processing: Request that we suspend the processing of your data.
  5. Right to Object: Object to the processing of your data for direct marketing.
  6. Right to Data Portability: Request transfer of your data to another controller.
  7. Right to Withdraw Consent: Withdraw consent at any time.
  8. Right to Complaint: Lodge a complaint with the Personal Data Protection Committee (PDPC).

To exercise these rights, please contact our Data Protection Officer at pdpa@echostory.in.th.

Children's Privacy

  • Under 20: If You are under the age of 20 (a minor), You represent that You have obtained parental consent.
  • Under 10: We do not knowingly collect Personal Data from children under 10 without verifiable parental consent.

Data Breach Notification

In the event of a personal data breach, We will notify the PDPC within 72 hours after becoming aware of it.

Contact Us