1Who we are
This website, https://abyim.com/, is run by the owner of the domain name abyim.com (“we”, “us”). We decide why and how the personal data described here is used, so we are its data controller under Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) and, where it applies to you, the EU and UK General Data Protection Regulation (“GDPR”).
We run the same website software for several domain names we own. This policy applies to each of them in the same way, and messages sent through any of them are kept in one database.
To reach us about anything in this policy, use the contact form on the home page and put “Privacy request” in the subject. That form is our only contact channel; every message sent through it is read by a person.
2What we collect
When you send the contact or offer form
- What you type: your name, email address, subject and message.
- Added by the page: the domain name the form was sent from and whether it was an offer or a general enquiry.
- Added by our server: the IP address your message came from and the date and time it arrived.
Messages that our spam filter rejects are not stored.
When you visit any page
Like every website, our server receives technical details with each request: your IP address, browser and device type (the User-Agent), the page requested, the page that linked to it, and an approximate location (country) that Cloudflare derives from the IP address. We use these to deliver the page and to spot errors and abuse. We do not use them to identify you or to build a profile of you.
When you start using the form
The moment you click or tap into the form, it loads Cloudflare Turnstile, a check that tells people apart from bots without asking you to solve puzzles. Turnstile processes your IP address, browser details (User-Agent and TLS fingerprint) and the site you are on. Cloudflare states that it cannot identify individuals from these signals. Turnstile does not load at all if you only read the page.
What we do not collect
We do not use analytics, advertising, social media plugins or tracking pixels. We never ask for payment details through this website. Please do not include sensitive information (such as health, religion, financial account or ID card numbers) in your message.
3How and why we use it
| Purpose | Data | Legal basis |
|---|---|---|
| Reply to your offer or question, negotiate and, if we agree, complete the sale of a domain | Form data | Steps you ask for before entering into a contract, and performing that contract (PDPA s.24(3); GDPR art. 6(1)(b)) |
| Keep the website and form secure and free of spam, bots and abuse | IP address, request details, Turnstile signals | Our legitimate interests in running a safe service (PDPA s.24(5); GDPR art. 6(1)(f)) |
| Keep a record of offers and conversations so we can follow up and resolve disputes | Form data | Legitimate interests; establishing or defending legal claims |
| Meet legal obligations, such as tax records for a completed sale or a lawful request from an authority | What the law requires | Legal obligation (PDPA s.24(6); GDPR art. 6(1)(c)) |
We will not send you newsletters or marketing, and we do not sell, rent or trade your data. No decision that has a legal or similarly significant effect on you is made by automated means; the spam filter only blocks messages that match known spam patterns.
Giving us your name and email address is up to you, but without them we cannot reply.
5International transfers
Cloudflare and Telegram operate outside Thailand, so your data may be processed in other countries, including the United States, the European Union and wherever Cloudflare’s network serves you from. Cloudflare protects transfers with the safeguards in its Data Processing Addendum, which include the standard contractual clauses approved by the European Commission. We use these services only to the extent described in this policy (PDPA s.28–29).
6How long we keep it
| Data | Kept for |
|---|---|
| Messages sent through the form, with their IP address | 12 months from the day they arrive, then deleted automatically. We check for and delete older messages every day. |
| Notification copies in our private Telegram chat | Up to 12 months, then deleted. |
| Request logs (IP address, page, browser) | Up to 7 days |
| Your dismissal of the cookie notice | In your own browser, until you clear it |
| Records of a completed sale (names, price, dates) | As long as tax and accounting law requires, kept outside this website |
If you ask us to delete your messages earlier, we will (see your rights).
7Your rights
Under the PDPA (sections 30–36) and, where it applies, the GDPR, you can ask us to:
- access the personal data we hold about you and get a copy of it;
- receive it in a common machine-readable format, or have it sent to someone else;
- correct it if it is wrong or incomplete;
- delete it, or make it anonymous;
- restrict how we use it while a question about it is being resolved;
- object to our using it on the basis of legitimate interests.
How to ask: send the contact form with “Privacy request” as the subject, tell us what you would like, and use the same email address you wrote to us from (or tell us which one it was). We may email that address to confirm the request is yours. We answer within 30 days and do not charge for it. If we cannot do what you ask, for example because the law requires us to keep a record, we will tell you why.
Complaints: you can complain to Thailand’s Office of the Personal Data Protection Committee (pdpc.or.th) or, in the EU or UK, to the data protection authority where you live or work. We would appreciate the chance to sort it out with you first.
9How we protect it
All pages are served over HTTPS only. The database is reachable only by our own website code and by us, through our own Cloudflare account. We keep only what we need for the purposes above, and the form is protected against bots and automated abuse. No system is completely secure; if a breach puts your rights at risk, we will notify the authorities and you as the PDPA requires.
10Children
This website is meant for adults who can make a contract. We do not knowingly collect data from anyone under 20 (the age of legal capacity in Thailand). If you believe a child has sent us their details, contact us and we will delete them.
11Changes to this policy
If we change how we handle personal data, we will update this page and the “Last updated” date at the top. If the change is significant, for example a new purpose or a new type of cookie, we will also point it out in the cookie notice.
See also our Terms of Use.