Privacy Policy

Who We Are

Voltara ShineUp operates as a specialized IT service company focused on manual software testing and validation. We're based in Thailand and work with clients who need thorough, human-centered testing for their software projects. This means we handle various types of data during our testing processes, and we want you to understand exactly how we protect your information.

Our business revolves around careful examination of software systems, which sometimes requires us to work with real or simulated user data. We take this responsibility seriously and have built our privacy practices around the principle that your data belongs to you — we're just temporary guardians of it.

Information We Collect

The type of information we collect depends on how you interact with our services. We've organized this into clear categories so you know exactly what we're talking about:

We don't collect personal information from end-users of the software we test unless it's specifically required for testing functionality. When we do need to work with personal data for testing purposes, we use anonymized or synthetic data whenever possible.

How We Use Your Information

Everything we collect serves a specific purpose in delivering our testing services. We don't use your data for marketing campaigns or sell it to third parties. Here's what we actually do with it:

Your business contact information helps us communicate about projects, schedule testing phases, and provide updates on our findings. We use this data to maintain our working relationship and ensure you get the results you need when you need them.

Testing-related data gets analyzed to identify bugs, performance issues, and usability problems. We document our findings and create reports that help you improve your software. This data stays strictly within the context of your project unless you specifically ask us to use it as an anonymous case study.

Sometimes we need to keep certain project data for quality assurance purposes — if a bug resurfaces months later, having historical testing data helps us understand patterns and provide better service.

Data Sharing and Transfers

We operate on a strict need-to-know basis. Your data doesn't leave our team unless there's a specific business reason and your explicit consent. Here are the only circumstances where sharing might occur:

Our testing team members working directly on your project will have access to relevant data. These are employees and contractors who've signed confidentiality agreements and understand their responsibilities for data protection.

If your project involves integration testing with third-party systems, we might need to share limited technical data with those service providers. This only happens with your approval and under strict confidentiality terms.

We use secure cloud storage services for some project data, which means your information might be stored on servers outside Thailand. We only work with providers that meet international security standards and provide adequate data protection guarantees.

Legal requirements might occasionally force us to disclose information to Thai authorities, but this would only happen under lawful orders and we'd notify you unless legally prohibited from doing so.

Your Rights and Control

You have significant control over your data, and we've made it straightforward to exercise these rights. Don't hesitate to reach out if you want to make changes or have questions about what we have on file.

Security Measures

Protecting your data is fundamental to our business. We've implemented multiple layers of security that go beyond basic password protection, because software testing often involves access to sensitive systems and information.

Our team uses encrypted connections for all data transfers, and we maintain separate secure environments for different client projects. Access to your project data requires multi-factor authentication and is limited to team members directly involved in your testing.

We conduct regular security reviews and update our procedures based on the latest threats. Our employees receive ongoing training about data protection and security best practices.

If we ever experience a security incident that might affect your data, we'll notify you within 72 hours and explain what happened, what data might be involved, and what steps we're taking to resolve the situation.

Data Retention and Deletion

Active project data stays accessible throughout your testing engagement and for 90 days afterward, in case you need clarification on our findings or want additional analysis.

Historical project records get archived after six months and are kept for two years to help us improve our testing methodologies and provide better service to future clients. This archived data has restricted access and additional security controls.

Business contact information is retained for three years after our last interaction, unless you ask us to delete it sooner. This helps us maintain continuity if you return for additional testing services.

Some project documentation might need to be kept longer for legal or contractual reasons, but we'll always use the shortest retention period that meets our legitimate business needs.

Cookies and Website Data

When you visit our website, we collect standard web analytics data like page views, time spent on site, and general geographic location. This helps us understand what information is most useful to potential clients and improve our content.

We use session cookies to remember your preferences during your visit, but these are automatically deleted when you close your browser. Any persistent cookies we use are limited to basic functionality and don't track your behavior across other websites.

Changes to This Policy

We review and update this privacy policy annually or when significant changes occur in our data handling practices. We don't make changes lightly — any updates reflect real changes in how we operate or new legal requirements.

When we update this policy, we'll post the new version on our website and notify existing clients by email. Significant changes that affect how we use your data will include an explanation of what's changing and why.

You always have the right to review these changes and decide whether you're comfortable continuing our business relationship under the new terms.