Privacy

Short, because this site does very little. No cookies of ours, no analytics, no tracking, and nothing loaded from anybody else’s server.

Who holds it

OAK AND ANCHOR TECH LLC, trading as OAK AND ANCHOR TECH, is the data controller for this website.

OAK AND ANCHOR TECH LLC
30 N Gould St, Ste N
Sheridan, WY 82801
United States

Questions about anything on this page, or about data we hold, go to hello@oakandanchortech.com, which is read by a person rather than a ticket queue.

What this site does not do

We set no cookies. There is no analytics package, no tracking pixel, no advertising tag and no social widget. Every font, script and image is served from this domain, so loading the page does not tell a third party that you were here. You can confirm that from your browser’s network panel, which is a better guarantee than this paragraph.

If we ever add something that does — an analytics package, an embedded video, a map — it will be blocked until you allow it. The consent tool on this site does not merely record an answer after the fact; the script is inert and cannot run until you say so, and refusing leaves nothing stored on your device at all. Until such a thing exists the tool stays silent, because asking permission for what we do not do would teach you to click through consent dialogs without reading them.

One exception is worth naming: Cloudflare sits in front of this site as our DNS and content-delivery provider. If it decides a visitor may be automated it can present a challenge and set a cookie of its own to remember the outcome. That is Cloudflare’s mechanism, not ours, and it is the only cookie you are likely to encounter here. Because it exists to keep the site available, it is a strictly necessary cookie and we do not ask consent for it.

What is recorded, why, and on what basis

• Web server logs. One line per request: IP address, date and time, the page requested, the response status, the referring page and the browser’s user-agent string. We keep these to run the site and to see abuse when it happens — our legitimate interest in keeping a service available and defensible.
• Cloudflare connection data. As the service in front of ours, Cloudflare processes connection information such as your IP address in order to route and protect the request, under its own terms. Same basis: legitimate interest in keeping the site up.
• Email you send us. Stored in our own mail system so that we can reply and keep a record of the conversation. Where an enquiry turns into work, the basis is performing a contract or taking steps before entering one.

If you choose not to give it

You can read every page on this site without telling us anything. Nothing here asks you to register, and there is no form. The only personal data you can choose to give us is an email, by writing to us — and if you do not, the only consequence is that we cannot reply.

What we never collect

We do not ask for and do not want sensitive personal data — the categories the Act treats specially, such as health, religion, political opinion, biometric or criminal record data. Please do not send it to us. If it arrives in an email anyway, we delete it rather than file it.

This site is not aimed at children and we do not knowingly collect anything from them. If you believe a child has sent us personal data, write to us and we will remove it.

How long it is kept

Server logs rotate daily and fourteen are kept, so nothing older than a fortnight survives. Email is kept while the conversation is live, and afterwards as an ordinary business record; ask us to delete a thread and we will, unless we are required to keep it.

Where it is processed

The server is in Finland, operated by Hetzner Online GmbH of Germany. Cloudflare, a company incorporated in the United States, sits in front of it and operates a global network. Your data may therefore be processed outside Thailand, in countries whose data protection law differs from Thai law. We chose both providers on the basis that they publish data protection terms we are willing to be bound by.

Who else sees it

Nobody. We do not sell, rent or share it, there is no advertising on this site, and nobody is added to a mailing list for having asked a question. There is no newsletter. If we ever start one, it will be something you opt into deliberately.

How it is protected

• Every page is served over TLS, with HSTS set, so a browser will not fall back to plain HTTP.
• Mail is encrypted in transit, and our domain publishes an MTA-STS policy telling other mail servers to require TLS when delivering to us.
• The site loads no third-party script, so no outside code runs in your browser on our behalf.
• Server access is restricted to named administrators using keys rather than passwords, and the mailbox behind our contact address requires TLS to reach.

No arrangement is perfect. These are the measures in place, not a promise that nothing can ever go wrong.

No profiling, no automated decisions

We do not build profiles, score visitors, or make any decision about you by automated means. Nothing on this site does anything with your data beyond serving the page you asked for and keeping a log line about it.

If something goes wrong at our end

If personal data held by us is exposed, and the risk is one the Act requires us to report, we will notify the Office of the Personal Data Protection Committee within the time the Act allows, and tell the people affected directly where the risk to them is high. We would rather tell you early and be wrong about the severity than tell you late.

If the business changes hands

If the company is sold, merged, or its assets transferred, data held about you may transfer with it. Whoever holds it would be bound by a notice no weaker than this one, and we would say so here before it happened.

Links to other sites

Where we link out, that site's own policy applies once you arrive, not this one. We do not control what other people record.

Your rights

Under the Thai Personal Data Protection Act you may ask us to:

• tell you what we hold and give you a copy of it
• correct anything inaccurate or incomplete
• delete it, or make it anonymous
• stop using it for a while, without deleting it
• stop using it at all, where you object to our reason for holding it
• hand it to you, or to somebody else, in a form a machine can read
• withdraw consent, wherever consent was what we relied on

Write to the address above. We answer from a person, usually the same day, and we do not charge for it. Bear in mind that fourteen-day log rotation means most of it is gone before anyone could ask.

If we get it wrong

Tell us first — it is faster. If that goes nowhere, you can complain to the Office of the Personal Data Protection Committee (PDPC) in Thailand, which supervises compliance with the Personal Data Protection Act.

Changes

If this notice changes, the date at the top changes with it. Where a change is significant — a new purpose, a new recipient, a longer retention — we will say what changed rather than quietly reissuing the page. We do not keep a version history yet; if that becomes worth doing, it will be published here.

In force from 2 September 2026. See also our terms.