leka.studio
Legal

Privacy Policy

Last updated: 2026-05-01

This policy describes how GO Corporation Co., Ltd. (“Leka Studio”, “we”) handles personal data submitted via the leka.studio website. We comply with Thailand's Personal Data Protection Act (PDPA).

What we collect

  • Contact form submissions: name, email, phone (optional), company, role, project details, message, country/city.
  • Newsletter signups: email address only.
  • Anonymous analytics: pages viewed, referrer, anonymised IP, user-agent, session duration.
  • Optional session replay (only after explicit consent): masked input fields, scroll/click behaviour, anonymised user identifier.

How we use it

  • To respond to your enquiry.
  • To send periodic updates if you subscribe to our newsletter (you can unsubscribe at any time).
  • To improve the website (analytics).

Where it lives

Contact submissions are stored in Google Cloud Firestore in the asia-southeast1 region (Singapore). Our session-replay data lives in PostHog (EU region — Frankfurt). Newsletter data lives in our email service provider.

Sharing

We do not sell or rent personal data. We share enquiry data internally with our sales team (via Slack) and with our email service provider for newsletter delivery. We do not transfer your data outside these vendors.

Cookies

We use minimal cookies for site functionality (a consent state cookie) and optional analytics cookies (only after you accept). Decline freely — the site works fully without analytics cookies.

Your rights (PDPA)

You can request access, correction, deletion, or portability of your personal data by emailing hello@leka.studio. We respond within 30 days.

Retention

Contact submissions: retained for 5 years for relationship continuity, then deleted. Newsletter data: retained until you unsubscribe. Analytics data: 12 months.

Children

Our services are designed for properties and schools. We don't knowingly collect data directly from children.

Contact

Data Protection contact: hello@leka.studio

We use cookies for analytics and to understand how visitors use the site (anonymised, EU-hosted). You can accept or decline — declining never breaks anything on the site.