Privacy Policy

The data controller responsible for the processing of your personal data under the Thai Personal Data Protection Act (PDPA) is:

Sirochita Lemke
(trading as miraTEQ, Web Design & Digital Marketing)
208/74 Siwalee Lakeview
Moo 7, Tambon Suthep
Amphoe Mueang Chiang Mai
Chiang Mai 50200
Thailand

Phone: +66 98 118 0831
Email: [email protected]

Given the small scale of our processing, we are not required to appoint a Data Protection Officer. For any privacy question you can always reach us directly at the email address above.

We take the protection of your personal data seriously. Personal data is any information relating to an identified or identifiable person (for example your name, email address, phone number or IP address).

We only process personal data where this is necessary to provide a functional website and our services, to respond to your enquiry, to fulfil a contract, or where we have another lawful basis under the PDPA. Where the law requires your consent, for example before setting non-essential cookies, we ask for it first (Section 19 PDPA). We never sell your personal data, and we only share it with third parties where this is described in this policy.

This website is hosted by:

Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany

The servers are located exclusively in Germany. Hetzner processes technical connection data (server log files) on our behalf under a data processing agreement.

Because our servers are in Germany, hosting your data involves a cross-border transfer out of Thailand. Germany is part of the European Union, whose data protection law (the GDPR) provides a level of protection recognised as adequate. This transfer is necessary to operate the website securely and reliably.

Further information: Hetzner Privacy Policy

Each time this website is accessed, our hosting provider automatically records information that your browser transmits (server log files):

• IP address of the requesting device
• Browser type and version
• Operating system used
• Referrer URL (the previously visited page)
• Hostname of the accessing device
• Date and time of the request
• Volume of data transferred

This data is technically necessary to deliver and secure the website. It is not combined with other data sources and does not allow us to identify you directly.

Lawful basis: our legitimate interest in operating, securing and debugging the website (Section 24 PDPA).
Retention: maximum 7 days, then automatically deleted.

When you contact us through the contact form on this website, we collect:

• Name
• Email address
• Industry (required field)
• Your message
• Timestamp of the request

The form is processed by our own PHP script on the Hetzner server and forwarded to us by email. The whole process runs on Hetzner servers in Germany. Form data is not stored permanently on the server, and third parties have no access to it.

To protect the form against spam and automated abuse, we use Cloudflare Turnstile, a privacy-friendly bot check by Cloudflare, Inc. (USA). Turnstile analyses technical signals (such as your IP address and browser behaviour) to confirm that you are a real person. It does not use tracking cookies and does not profile you across other websites. This check is strictly necessary for the security of the form.

Lawful basis: steps taken at your request before entering into a contract, and our legitimate interest in protecting the form from abuse (Section 24 PDPA).
Retention: your request stays in our email inbox until it is fully handled, and is deleted after 6 months at the latest if no business relationship results.

When you contact us by email or phone, we store the data you provide (such as your name, email address, phone number and the content of your message) in order to handle your request and answer any follow-up questions.

Lawful basis: steps taken at your request before a contract, or our legitimate interest in responding to enquiries (Section 24 PDPA).
Retention: until your request is fully handled, and after 6 months at the latest if no business relationship results. Statutory retention periods apply once a contract is concluded.

LINE

You can choose to contact us via LINE, a service of LY Corporation, 1-3 Kioicho, Chiyoda-ku, Tokyo 102-8282, Japan.

When you contact us via LINE, we process:

• Your LINE ID or phone number
• The content of your message
• Metadata (timestamp, device information)

Data may be transferred to servers in Japan and other countries. This is a cross-border transfer that happens only because you choose to use LINE. Further information: LINE Privacy Policy

Facebook Messenger

You can also reach us via Facebook Messenger, a service of Meta Platforms, Inc. (USA) and Meta Platforms Ireland Ltd. (Ireland).

When you contact us via Messenger, we process:

• Your Facebook profile name
• The content of your message
• Metadata (timestamp, device information)

Using Messenger involves a transfer of data to Meta, including to the USA.

Please note: LINE and Messenger are optional. You can always reach us by email or phone instead.

Lawful basis: steps taken at your request before a contract (Section 24 PDPA), based on your choice to use these channels.
Retention: until your request is fully handled.
Further information: Meta Privacy Policy

This website uses only locally hosted fonts (WOFF2 format). No external font services such as Google Fonts are used, so no data is transferred to external font servers.

We keep cookies and similar technologies to a minimum, and we distinguish clearly between what is strictly necessary and what needs your consent.

Strictly necessary (no consent required)

• A small consent cookie that remembers your own choice from the cookie banner, so we do not ask you again on every visit.
• Cloudflare security and Turnstile signals that protect the site and the contact form (see sections 5 and 10).
• Functional browser storage that remembers your light or dark display mode.

These contain no advertising identifiers and are never used for tracking or profiling.

Non-essential (only with your consent)

Anything that is not strictly necessary, such as the Meta Pixel and the interactive Google Map (section 10), is loaded only after you actively agree through our cookie banner (Section 19 PDPA). You can accept or reject each category, and you can change or withdraw your choice at any time by reopening the cookie settings from the banner.

Record of consent: to comply with the PDPA, we keep a minimal record of each consent decision (the date, the categories you chose and a non-reversible technical marker instead of your IP address). This record is stored securely as proof of consent and is never used to track or identify you.

Google Maps (external content)

Our contact page can show an interactive map from Google Maps, a service of Google LLC (USA). By default we show only a placeholder graphic drawn by your own browser, no map image is requested from any server, so no data is sent to Google when the page loads. The interactive Google Map is loaded only if you consent, either through the cookie banner or by clicking “Show interactive map”. Once it loads, Google may set cookies and process your IP address, and data may be transferred to the USA. This happens on the basis of your consent (Section 19 PDPA). Further information: Google Privacy Policy

Cloudflare (content delivery and security)

This website is delivered through Cloudflare, Inc. (USA), which acts as a content delivery network and security layer. Cloudflare processes technical connection data to deliver the site quickly and to protect it against attacks, and may provide us with aggregated, cookieless traffic statistics that do not identify individual visitors. Further information: Cloudflare Privacy Policy

Meta Pixel (advertising on Facebook and Instagram)

We use the Meta Pixel, a service of Meta Platforms, Inc., 1 Meta Way, Menlo Park, CA 94025, USA. It lets us measure whether our ads on Facebook and Instagram actually reach people who are interested in our services, and it lets us show relevant ads to people who have already visited this website.

The Meta Pixel is loaded only after you have actively agreed to the marketing category in our cookie banner (Section 19 PDPA). Before that, no script is loaded and no data is sent to Meta.

Once loaded, the Meta Pixel processes:

• your IP address, browser and device information
• the pages you open on this website and what you do on them – specifically: visiting one of our service pages, clicking a contact channel (LINE, phone, email), sending the contact form or the quote configurator, and booking an appointment. For a quote request we also transmit the estimated order value, so that we can measure which ads lead to genuine enquiries.
• cookie identifiers stored in your browser (_fbp, _fbc and fr)

If you have a Facebook or Instagram account and are logged in, Meta can link this information to your account. The data is transferred to servers in the USA. This cross-border transfer takes place on the basis of your consent (Sections 19 and 28 PDPA).

For the collection of this data and its transmission to Meta, we and Meta act as joint controllers. Any further processing that Meta carries out for its own purposes is Meta’s sole responsibility.

You can withdraw your consent at any time by reopening the cookie settings from the banner. The pixel then stops loading and the cookies listed above are deleted. You can also object to personalised advertising in your Meta ad settings. Further information: Meta Privacy Policy

Web analytics (cookieless)

To understand how many people visit our website and which pages are useful, we use Cloudflare Web Analytics, a service of Cloudflare, Inc. It is privacy-first and cookieless: it sets no cookies, uses no local storage, does not fingerprint your device and does not store your IP address or any data that identifies you. Because it processes no personal data, it runs without requiring your consent. We do not use Google Analytics or any other cookie-based analytics.

Under the PDPA you have the following rights regarding your personal data:

• Right of access: to ask whether and what personal data we hold about you, and to receive a copy.
• Right to rectification: to have inaccurate data corrected and incomplete data completed.
• Right to erasure: to have your data deleted, unless we are legally required to keep it.
• Right to restriction: to ask us to suspend the use of your data in certain cases.
• Right to object: to object to processing based on our legitimate interest.
• Right to data portability: to receive your data in a structured, machine-readable format.
• Right to withdraw consent: where processing is based on your consent, you can withdraw it at any time with effect for the future, for example through the cookie settings.

To exercise any of these rights, please email [email protected]. We will respond within 30 days of receiving your request. Responses are free of charge.

If you believe we have handled your personal data unlawfully, you have the right to lodge a complaint with the competent supervisory authority.

In Thailand this is the:

Office of the Personal Data Protection Committee (PDPC)
Ministry of Digital Economy and Society
Bangkok, Thailand
www.pdpc.or.th

If you are located in the EU/EEA, you may instead contact the data protection authority in your country of residence.

This privacy policy was last updated in July 2026. As our website evolves or legal requirements change, we may need to update it. The current version is always available at mirateq.com/en/privacy/.

On some pages we embed our own booking tool (miraBOOK) in a window. It runs on tools.mirateq.com, our own system on the same Hetzner servers in Germany. It is not a third-party service, and no data is passed to anyone outside miraTEQ.

When you book an appointment, we store:

• Name
• Email address
• Phone number (optional)
• Your message (optional)
• Requested date and time
• Your language and the time of booking

We use this data solely to arrange, confirm and, if necessary, reschedule your appointment, and to send you the confirmation by email. Your IP address is not stored with the booking.

Opening a page that contains the booking window connects your browser to tools.mirateq.com, our own server; the server log files described in section 4 apply. Personal details are only transmitted once you actively submit a booking.

Lawful basis: steps taken at your request before entering into a contract (Section 24 PDPA).
Retention: we keep bookings for as long as we need them to serve you and to meet our record-keeping obligations. You can ask us to delete a booking at any time (see section 11).