Privacy Policy

This Privacy Policy explains how One Stop Marketing Agency ("we", "us", "our") collects, uses, and protects information when you visit onestopmarketing.agency or interact with our services. We comply with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Who we are

One Stop Marketing Agency is a digital marketing agency based in Suratthani, Thailand. We provide SEO, Google Ads, Facebook Ads, website design, content, and branding services for clients in Thailand and internationally.

For the purposes of Thai data-protection law, we are the Data Controller for personal data collected through this website.

• Email: [email protected]
• Phone: +66 92-929-9888
• Address: Suratthani, Thailand

2. Information we collect

Information you give us

When you fill in our contact form or send us a message, we collect:

• Your name
• Email address
• Phone number (if provided)
• Company name (if provided)
• The content of your message

Information collected automatically

When you visit our website, we automatically collect technical information through cookies and similar technologies:

• IP address (anonymised for analytics purposes)
• Browser type and version
• Device type and operating system
• Pages viewed, time spent, and the referring source
• Approximate location (country/city level, derived from IP)
• Interaction events (clicks, scrolls, form submissions)

We do not collect special-category data (race, religion, health, sexual orientation, biometric data) and we do not knowingly collect data from children under 16.

3. How we use your information

We use your information for the following purposes, with the legal bases shown:

• Respond to inquiries and quote requests — contractual necessity / consent
• Send you proposals or information you requested — contractual necessity / consent
• Operate, secure, and improve our website — legitimate interest
• Measure traffic and understand content performance — legitimate interest / consent (where required)
• Show relevant ads to past visitors (remarketing) — consent (where required)
• Comply with legal obligations — legal obligation

4. Cookies and tracking technologies

Our website uses cookies and similar technologies to function and to understand how visitors use the site. The main third-party services we load are:

• Google Analytics 4 (Google LLC) — to understand visitor behaviour and improve our site. We have enabled IP anonymisation. Data may be transferred to the United States.
• Google Tag Manager (Google LLC) — to manage tags on our site. GTM itself does not set tracking cookies.
• Google Ads (Google LLC) — when active, used to measure ad performance and to show ads to past visitors (remarketing).

We may add other tracking pixels (such as Meta Pixel or LinkedIn Insight Tag) for advertising on those platforms. We will update this policy when we do.

You can control cookies through your browser settings. To opt out of Google Analytics specifically, install the Google Analytics opt-out browser add-on.

5. Sharing your information

We share information only with:

• Service providers who help us run the site or business — Google (analytics, ads, fonts), Web3Forms (contact-form processing), Cloudflare (hosting and security), Sanity (content storage). These providers process data only on our instructions.
• Legal authorities, if required by law, court order, or to protect our rights or the safety of others.

We do not sell your personal data.

Some providers may store data outside Thailand, including in the United States and the European Union. Where this happens, we rely on the data exporter's standard contractual clauses or equivalent safeguards.

6. How long we keep data

• Contact-form messages: up to 3 years from your last interaction with us
• Analytics data: up to 14 months (Google Analytics default)
• Server logs: up to 90 days

After these periods, data is deleted or anonymised.

7. Your rights

Under Thailand's PDPA and (where applicable) the EU GDPR, you have the right to:

• Access — receive a copy of the personal data we hold about you
• Rectification — correct data that is inaccurate
• Deletion — ask us to delete your data ("right to be forgotten")
• Restrict processing — pause our use of your data
• Data portability — receive your data in a portable format
• Object — object to processing based on legitimate interest, including direct marketing
• Withdraw consent — at any time, where processing is based on consent
• Lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand or, if you are in the EU, your local Data Protection Authority

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

8. Security

We use HTTPS/TLS encryption end-to-end, hosted infrastructure with security certifications (Cloudflare Pages), and standard access controls. No system is 100% secure, so we cannot guarantee absolute security, but we take reasonable steps to protect your data.

9. International transfers

If you are located outside Thailand, your data will be transferred to and processed in Thailand and in the countries where our service providers operate (notably the United States and the European Union). We rely on appropriate safeguards such as Google's Standard Contractual Clauses for such transfers.

10. Children

Our website and services are not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has given us their data, please contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new "Last updated" date. Material changes will be highlighted on the site or notified to you where required by law.

12. Contact

Questions about this policy or about your data?

• Email: [email protected]
• Phone: +66 92-929-9888
• Mail: One Stop Marketing Agency, Suratthani, Thailand