Key definitions
To ensure clarity, we define the main terms used in this policy. These definitions describe the types of data we process, actors involved, and the technical concepts relevant to connected devices and online services.
Personal data: Any information that identifies or can reasonably identify a natural person, individually or in combination with other data (for example: name, email, phone number, shipping address, device identifiers linked to an individual).
Processing: Any operation performed on personal data, whether automated or not, including collection, storage, retrieval, use, modification, transmission, erasure and anonymization.
User: An individual who interacts with leadmaxxhq services, including customers who purchase devices, registered account holders, household members, and end users of connected devices.
Service: The commercial and technical offerings provided by leadmaxxhq, encompassing the online storefront, device management portals, support services, software updates and associated applications.
Cookies: Small data files placed on a device by a website or service to store preferences, session information and identifiers used to improve usability and measure performance.
Data we collect
We collect a limited set of personal and technical information necessary to process purchases, deliver hardware, keep devices operational, provide customer support and comply with legal requirements. Collection methods include direct entry by users, automated telemetry from devices, and data received from third-party service providers.
Data you provide
Data supplied directly when registering, ordering, or interacting with support teams. We only request information required for the specific service you use.
- Full name and contact details (email address and phone number) for order confirmation and support.
- Billing and shipping address required to fulfill purchases and arrange on-site services or returns.
- Account credentials and profile settings used to authenticate access to device management dashboards.
- Payment transaction metadata such as payment provider reference and billing verification vouchers (we do not store raw card numbers).
- Support communications, warranty registration details and diagnostic notes shared with our technical teams.
- Device pairing information, customization preferences and consent choices for telemetry or marketing communications.
Data collected automatically
When you use our website, apps or connected devices, we and our service providers collect technical data automatically to operate services securely and improve reliability.
- IP addresses, device type, browser or client software version and basic system metrics logged to maintain service availability.
- Cookies, local storage identifiers and web/beacon analytics used to measure site performance and user flows.
- Device telemetry and operational metrics from connected devices (battery status, error codes, firmware version) when you enable device connectivity.
- Approximate location data derived from IP addresses or device settings to support delivery routing and localized service features.
- Usage statistics and anonymized aggregates used for product improvement and research on device reliability.
- Security logs, access timestamps and authentication events retained for monitoring and incident response.
Data from third parties
We may receive personal data about you from trusted third parties when necessary to perform our services, including payment processors, logistics companies and authorized analytics providers.
- Payment processors and business institutions supplying payment confirmations and fraud screening results.
- Shipping carriers providing tracking updates and delivery status for orders.
- Cloud infrastructure and hosting providers that log operational metrics and store encrypted backups.
Purposes of processing
We process personal data for well-defined operational, legal and improvement purposes. Processing is limited to what is necessary for each purpose.
- Order processing and fulfillment: to accept payments, arrange shipment and confirm delivery.
- Account administration: to create, secure and manage user accounts and preferences.
- Customer support: to respond to inquiries, diagnose device issues and coordinate repairs or returns.
- Device maintenance and updates: to deliver firmware updates, manage configurations and monitor device health when connectivity is enabled.
- Product improvement and research: to analyze aggregated usage patterns and reliability data to inform engineering decisions.
- Security and fraud prevention: to detect abuse, secure systems and contribute incidents.
- Legal compliance and dispute resolution: to fulfill legal obligations and respond to lawful requests from authorities.
- Marketing and communications: to send service-related notices and promotional content where you have provided consent or where permitted by law.
Legal basis for processing
We rely on appropriate legal bases for data processing depending on the activity and your relationship with leadmaxxhq.
- Contractual necessity: processing required to perform the sales contract and deliver purchased devices and services.
- Consent: where lawfulness depends on your explicit consent (for marketing communications or optional telemetry).
- Legal obligations: processing necessary to comply with statutory or regulatory requirements.
- Legitimate interests: limited processing to protect systems, prevent fraud and improve products, balanced against individual rights.
GDPR rights (available to EU/EEA individuals)
Individuals in the EU/EEA have specific rights regarding their personal data. We provide mechanisms to exercise these rights and will respond within applicable legal timelines.
- Right of access: obtain confirmation of processing and a copy of personal data we hold.
- Right to rectification: request correction of inaccurate or incomplete personal data.
- Right to erasure: request deletion of personal data when legal conditions are met, subject to retention obligations.
- Right to restrict processing: request limitation of processing in certain circumstances.
- Right to data portability: receive personal data in a structured, commonly used format where processing is based on consent or contract.
- Right to object: object to processing based on legitimate interests or direct marketing; we will assess and respond in line with law.
Cookies and similar technologies
Cookies and similar technologies are used to make the site functional, analyze performance and, with consent, provide tailored content. You can control cookie preferences at any time.
We use session cookies, persistent cookies and third-party cookies provided by analytics and service partners to enable the features described in this policy.
Cookies fall into necessary (essential operation), performance (analytics), functional (preferences) and advertising (personalized offers) categories. Necessary cookies are required to use the site.
You may manage cookie settings via the cookie banner, browser controls or device privacy settings. Opt-outs for analytics and advertising services are available through the banner and partner links.
Full cookie policy
Data sharing and processors
We share personal data with third-party processors strictly to support the services you request. All processors operate under written agreements that limit use to our instructions and impose security safeguards.
- Payment processors and banks for transaction authorization and settlement.
- Logistics and delivery partners to coordinate shipments and returns.
- Cloud hosting providers and infrastructure vendors that store encrypted data and support service availability.
- Analytics and research partners to measure performance and improve product reliability (with appropriate anonymization where applicable).
- Customer support and CRM providers to deliver and document support interactions.
- Legal, regulatory or law enforcement entities when required by applicable law or to protect legal rights.
International data transfers
Data may be transferred and processed in countries outside Thailand, including jurisdictions where our service providers operate. When transfers occur we implement safeguards such as contractual protections, encryption and access controls to protect personal data.
Typical safeguards include standard contractual clauses where available, data processing agreements with subprocessors, use of providers in jurisdictions with adequate protections, and technical measures such as encryption in transit and at rest.
Data retention
We retain personal data only for as long as necessary for the purposes described, to comply with legal obligations, and to resolve disputes or enforce agreements. Retention decisions consider the nature of the data and the service relationship.
Account information and related records are retained for the duration of the active account and thereafter for a limited period to meet regulatory and tax obligations or to address claims.
Support and transactional communications are retained for service continuity and quality monitoring, typically up to three years unless a longer retention period is required by law.
Security and system logs are retained for a defined operational period (commonly 12 months) to support monitoring and incident response, subject to legal requirements.
When data retention periods expire or upon valid deletion requests, we proceed with deletion or irreversible anonymization. Typical completion of deletion processes occurs within 30 to 90 days, depending on backup and archival systems.
Security of personal data
Protecting personal data is a core operational requirement. We apply a combination of technical, organizational and procedural controls to reduce risks to confidentiality, integrity and availability. Security measures are periodically reviewed and updated to reflect emerging threats and best practices.
- Encryption of data in transit (TLS) and encryption at rest for sensitive datasets.
- Role-based access controls, strong authentication (MFA) and least-privilege principles for personnel and system accounts.
- Ongoing monitoring, vulnerability management, regular security assessments and incident response procedures.
Your rights and choices
You have rights to access, correct or request restrictions on your personal data, subject to legal exceptions. To exercise rights, contact our privacy team using the details provided. We will verify requests to protect data against unauthorized disclosure.
- Access: Request a copy of personal data we hold about you and information about processing purposes.
- Rectification: Ask us to correct incomplete or inaccurate personal data.
- Erasure: Request deletion where legal conditions are met; retention requirements may apply.
- Restriction: Request limitation of processing in certain scenarios.
- Portability: Receive data you provided in a structured, machine-readable format when applicable.
- Complaint: Lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.
- Right to withdraw consent for specific processing activities where processing is based on consent, subject to applicable law and with clear instructions on how to withdraw.
- Right to lodge a complaint with the competent supervisory authority in Thailand if you consider our processing of your personal data infringes applicable data protection laws.
How to Exercise Your Privacy Rights
Users may submit requests to access, correct, restrict, port, or delete personal data related to their interactions with leadmaxxhq. Requests must include sufficient details to verify identity and scope of the request. We will evaluate requests in accordance with applicable Thai law and respond within the stated timeframe. Certain requests may be limited by legal obligations or the need to preserve security and fraud prevention measures.
[email protected]
We typically acknowledge receipt of rights requests within 5 business days and aim to provide a substantive response within 30 calendar days. Extended review periods may apply where complex verification or third-party consultations are required; if so, you will be informed of any extension and expected completion timeframe.
Marketing Communications
leadmaxxhq may use contact details provided to send product updates, offers, and educational information about AI home devices tailored to customer preferences. These communications are based on declared preferences, prior interactions, or legitimate business interest where permitted. Users can manage preferences at any time through profile settings or via the unsubscribe mechanism included in each message.
To stop receiving marketing emails, click the unsubscribe link in any marketing email or update your preferences within your account. Alternatively, contact us to request removal from marketing lists; allow up to 7 business days for processing.
Children's Data
leadmaxxhq does not knowingly collect personal information from children under the age of 13. If we become aware that we have collected personal data from a child without appropriate parental consent, we will take steps to delete that data promptly. For parental inquiries, contact our data protection representative.
Third-Party Links
Our website and device integrations may include links to third-party websites, services, or stores. Those third parties operate under their own privacy policies and practices, which may differ from ours. Reviewing third-party privacy policies is recommended before providing any personal information or connecting devices.
Changes to This Privacy Policy
We review our privacy practices periodically to reflect changes in law, technology, and business operations. Material changes to this policy will be posted at leadmaxxhq.click with an updated effective date. Non-material changes may be implemented without prior notice but will be reflected in the policy text.
For questions about this privacy policy, requests to exercise your rights, or data access inquiries, contact our privacy team. Include your name, contact details, and a clear description of the request to help us respond efficiently. We will verify identity before disclosing or modifying personal data.