OutDeptWho we are
OutDept is a technology services brand operated by LuxTech Co., Ltd., a company registered in Thailand (Registration No. 0835566044525) at 49/2 Moo 6, Chalong Sub-District, Mueang Phuket District, Phuket Province 83130, Thailand.
LuxTech Co., Ltd. is the data controller for the personal data described in this policy and processes it in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA") and, where it applies to you, other data protection laws such as the EU/UK GDPR.
In this policy, "OutDept", "we", "us" and "our" refer to LuxTech Co., Ltd. operating under the OutDept brand.
What we collect
We only collect data you give us directly, plus the minimum technical data needed to run a secure website:
- Contact form: your name, email address, company name (optional), the message you write, and a record that you accepted this Privacy Policy and our Terms of Service.
- Direct messages: when you contact us via Telegram, WhatsApp, LINE, LinkedIn, email or phone, we receive what you send us together with your name, username or number on that platform.
- Project information: business details, documents, content and system access you share with us during consultations and projects.
- Technical data: your IP address and standard request data (browser, device, time of visit) that our hosting infrastructure processes to deliver the website and protect it from abuse.
Please don't send us sensitive personal data (health, financial account numbers, government IDs and similar) through the contact form. If a project genuinely requires it, we'll agree on a secure way to handle it first.
How we use your data
We use personal data only for these purposes, each with a lawful basis under the PDPA:
- To reply to your enquiry and prepare an estimate, architecture and delivery plan — steps you've asked us to take before entering into a contract.
- To deliver, support and invoice the services you've engaged us for — performance of a contract.
- To keep the website and our systems secure, including limiting spam and abusive requests — our legitimate interest.
- To meet accounting, tax and other legal obligations — legal obligation.
- To keep in touch about your project or a proposal you've asked about — legitimate interest. We don't add you to marketing newsletters without your consent.
We don't use your data for automated decision-making or profiling that affects you.
What happens when you send the contact form
To be fully transparent: when you press "Send message", our server checks the submission for spam and forwards it to two places — a private team chat in Telegram (delivered through the Telegram Bot API) and our internal CRM, where your enquiry is tracked until we've replied and agreed on next steps.
Only OutDept team members who handle enquiries can see it. Your submission is not shared with advertisers or data brokers, and it isn't used to train AI models.
International transfers
OutDept is based in Phuket, Thailand, and works as an international team with clients worldwide. Some of our team members and service providers are located outside Thailand, so your data may be processed in other countries.
When that happens, we take the steps the PDPA requires — for example, relying on providers with adequate data protection standards or appropriate contractual safeguards.
How long we keep data
- Enquiries that don't turn into a project: up to 24 months after our last conversation, then deleted or anonymised.
- Client and project records: for the duration of our work together, and afterwards for as long as Thai accounting and tax law requires (generally at least 5 years for financial records).
- System access and credentials you give us for a project: used only for that work and removed when the engagement ends. We recommend rotating any shared passwords afterwards.
- IP addresses used for spam protection: held in server memory only, and discarded within minutes.
How we protect it
The whole website is served over encrypted HTTPS with strict transport security, access to enquiries and client data is limited to the people who need it, and our contact form has built-in spam and abuse protection. Team members and contractors are bound by confidentiality obligations.
No method of transmission or storage is 100% secure, so we can't guarantee absolute security. If a breach affecting your data occurs, we'll notify you and the relevant authority as required by the PDPA.
Your rights
Under the PDPA — and, where applicable, other data protection laws — you have the right to:
- Access your personal data and get a copy of it.
- Ask us to correct data that is inaccurate or incomplete.
- Ask us to delete or anonymise your data.
- Ask us to restrict how we use your data, or object to its use.
- Receive your data in a commonly used format, or have it transferred to another organisation.
- Withdraw consent you've given, at any time.
- Lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) of Thailand, or your local data protection authority.
To exercise any of these rights, email manager@outdept.online. It's free, and we'll respond within 30 days. We may ask you to confirm your identity first.
Children
Our services are designed for businesses and adults. We do not knowingly collect personal data from minors. If you believe a minor has sent us personal data, contact us and we'll delete it.
Links to other websites
Our website links to third-party services such as Telegram, WhatsApp, LINE and LinkedIn. We aren't responsible for their content or privacy practices — please review their policies before sharing information with them.
Changes to this policy
We may update this policy as our website and services evolve. The latest version is always published on this page with its "Last updated" date. If we make significant changes, we'll highlight them on the website or tell you directly.
Contact us
Questions about this policy or your data? Get in touch — a real person will reply.