Privacy Policy
Last updated: 22/06/2026
1. Who we are
This website, niccolong.com, is operated by Nicco Long (“I”, “me”, “my”), based in Bangkok, Thailand. This policy explains how I collect, use, store and protect your personal data when you visit this site, sign up to my newsletter, or otherwise interact with me online.
If you have any questions about this policy or how your data is handled, you can contact me at nicco.digital@gmail.com.
2. Scope of this policy
This website is based in Thailand, and this policy is written to comply with Thailand’s Personal Data Protection Act B.E. 2562 (PDPA) and the EU General Data Protection Regulation (GDPR), including the UK GDPR. Where these laws differ, I aim to meet whichever standard is higher.
3. What personal data I collect
Depending on how you use this site, I may collect:
- Contact and identity data: your name and email address, if you sign up to my newsletter or contact me directly
- Usage data: pages visited, time spent on site, referral source, browser and device type, approximate location, collected via Google Analytics
- Advertising data: interactions with ads, collected via Google Ads, if you arrive at this site through one of my campaigns
- Technical and security data: collected via Cloudflare, used to protect the site from malicious traffic
- Cookie data: see Section 7 below
I do not collect sensitive personal data (such as health, religious, or biometric information) through this site.
4. How I collect your data
- Directly from you: when you fill in the newsletter sign-up form (powered by Mailchimp) or contact me by email
- Automatically: through cookies and similar tracking technologies when you browse the site, via Google Analytics, Google Ads, Cloudflare, Google Fonts, Google reCAPTCHA, Google Maps, and YouTube embeds where used
5. Why I collect your data and my legal basis
| Purpose | Data used | Legal basis |
|---|---|---|
| Sending newsletter content and updates | Name, email | Your consent (given when you sign up) |
| Understanding site traffic and improving content | Usage data, cookies | Consent (analytics cookies) |
| Running and measuring ad campaigns | Advertising data, cookies | Consent (advertising cookies) |
| Protecting the site from abuse and spam | Technical data | Legitimate interest (Cloudflare, reCAPTCHA) |
| Responding to enquiries | Name, email, message content | Legitimate interest / consent |
You can withdraw your consent at any time. For the newsletter, this means unsubscribing via the link in any email I send. For cookies, see Section 7.
6. Where your data is stored and international transfers
The tools used on this site, including Google Analytics, Google Ads, Mailchimp, Cloudflare, and Google’s other embedded services, are operated by companies based outside Thailand, primarily the United States. This means your data may be transferred to and processed in countries outside Thailand.
Where this happens, I rely on the safeguards these providers have in place, including Standard Contractual Clauses and other recognised transfer mechanisms, to ensure your data continues to receive an appropriate level of protection in line with PDPA Sections 28 and 29 and, where applicable, GDPR Chapter V.
7. Cookies
This site uses cookies to operate properly, understand how visitors use the site, and support advertising. You can view exactly what cookies are used, their purpose, and how long they last, and manage your preferences, through the cookie consent tool that appears when you first visit the site. You can reopen this at any time to change your preferences or withdraw consent.
8. How long I keep your data
- Newsletter data: kept for as long as you remain subscribed, and deleted or anonymised within a reasonable period after you unsubscribe
- Analytics data: retained according to Google Analytics’ standard retention settings
- Enquiry emails: kept only as long as needed to respond to and resolve your query, unless a longer period is needed for legal or accounting reasons
- Cookie consent records: retained to demonstrate compliance with consent requirements
9. Your rights
Depending on where you’re located, you have some or all of the following rights over your personal data:
- Access: ask what data I hold about you
- Correction: ask me to correct inaccurate data
- Deletion: ask me to delete your data
- Withdraw consent: opt out of marketing or tracking at any time
- Portability: request your data in a portable format
- Object or restrict: object to or limit certain processing
To exercise any of these rights, email nicco.digital@gmail.com. I’ll respond within a reasonable timeframe and in line with applicable law.
If you’re in Thailand and have concerns I haven’t resolved, you can contact the Personal Data Protection Committee (PDPC). If you’re in the EU or UK, you have the right to lodge a complaint with your local data protection authority.
10. Children’s data
This site is not directed at children, and I do not knowingly collect personal data from anyone under the age of consent in their jurisdiction. If you believe a child has provided personal data to me, please get in touch and I’ll delete it.
11. Data security
I take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse, including relying on the security measures built into the third-party platforms I use. No method of transmission or storage is completely secure, but I aim to use providers with strong, industry-standard security practices.
12. Changes to this policy
I may update this policy from time to time, for example if I start using a new tool or a law changes. The “last updated” date at the top will reflect the most recent revision. I’d encourage you to check back periodically.
13. Contact
Nicco Long, nicco.digital@gmail.com