Epic Endeavors Co., Ltd., trading as Digital Distinct ("we", "us", "our"), is the data controller for the personal data described in this policy. We are a video production house and creative agency based in Bangkok, Thailand.
This policy explains how we collect, use, disclose and protect personal data in line with the Personal Data Protection Act B.E. 2562 (2019) ("PDPA") and its subordinate regulations. It applies to visitors of digitaldistinct.com, our clients and their representatives, job applicants, freelancers and crew, talent, and anyone who appears in content we produce.
Personal data we collect: Identity and contact data: name, job title, company, email, phone number, LINE ID. Business and contract data: quotations, purchase orders, invoices, tax ID, billing address, bank details for payment. Communications: messages sent through our contact form, email, LINE, WhatsApp or social media, and meeting notes. Website and technical data: IP address, browser type, device, pages visited, referral source, cookie identifiers. Recruitment data: CV, portfolio, work history, education, references, showreels. Freelancer, crew and talent data: ID card or passport copy (for contracts and payment), bank details, availability, rates, emergency contact. Image, voice and likeness: photographs, video footage and audio recordings captured during shoots and interviews. We do not intentionally collect sensitive personal data under Section 26 of the PDPA, such as health, religious belief, ethnic origin or biometric data. Where a production requires it (for example, a health condition relevant to a stunt or physical activity), we will ask for your explicit consent first.
How we collect personal data Directly from you: when you fill in our contact form, email or message us, request a quotation, sign a contract, apply for a job, or take part in a shoot. Automatically, through cookies and similar technologies when you browse our website. From your employer or our client, when they share your details as a project contact, approver or on-screen participant. From third parties, such as casting agencies, talent managers, recruitment platforms and public professional profiles (for example, LinkedIn).
Why we use your data and our legal basis: Under Section 24 of the PDPA, we process personal data only where we have a lawful basis. Each purpose and the basis we rely on are listed below. Responding to enquiries and preparing quotations: steps before entering a contract (Section 24(3)). Delivering production, design and social media services: performance of a contract (Section 24(3)). Invoicing, accounting, tax and audit: legal obligation (Section 24(6)). Managing freelancers, crew and talent bookings and payments: performance of a contract (Section 24(3)) and legal obligation (Section 24(6)). Assessing job applications: steps before entering a contract (Section 24(3)). Running and securing our website, preventing fraud: legitimate interests (Section 24(5)). Showing completed work in our portfolio, showreel and social media: legitimate interests (Section 24(5)), subject to client approval and any release terms. Sending news, insights and marketing emails: consent (Section 19). Analytics and advertising cookies: consent (Section 19). Establishing or defending legal claims: legitimate interests (Section 24(5)). Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect processing carried out before it. If you choose not to provide data we need for a contract or a legal requirement, we may be unable to work with you.
People who appear in our productions As a production house, we record images, video and voice. How we handle this depends on your role. Talent, presenters and interviewees: We ask you to sign a talent or model release before filming. The release states where the content will be used, for how long, and whether it covers paid advertising. Your likeness is used only within those terms. Crew and behind-the-scenes footage: We may capture crew on set for behind-the-scenes content. Tell the producer on the day if you prefer not to appear. Members of the public: When filming in public places, people may be captured in the background. We avoid making any identifiable bystander the focus of a shot without their agreement, and we blur or remove people on request where reasonably possible. Final footage usually belongs to our client, who becomes a separate data controller for its use in their own channels. Requests about a published advertisement may need to go to the client as well as to us. We will help direct your request.
Cookies and analytics Our website uses cookies. Strictly necessary cookies run by default because the site cannot work without them. All other cookies load only after you agree through our cookie banner. Strictly necessary cookies keep the site secure and remember your cookie choice. No consent is needed. Analytics cookies measure visits and page performance (for example, [Google Analytics / Framer Analytics]). These require your consent. Marketing cookies measure ad performance and build audiences (for example, [Meta Pixel, Google Ads tag]). These require your consent. You can change your choice at any time through the cookie settings link in our footer, or by clearing cookies in your browser.
Who we share data with We do not sell personal data. We share it only as needed with: Our clients, for the project you are involved in (for example, talent details for approval, or footage for delivery). Production partners, such as freelance crew, casting agencies, post-production studios, location owners and equipment rental companies. Service providers who process data on our behalf, including website hosting, cloud storage, email, accounting software and payment services. They act as data processors under written agreements. Professional advisers, such as our auditor, accountant and lawyers. Government authorities, including the Revenue Department, where Thai law requires it or under a lawful order.
International transfers Some of our service providers store data on servers outside Thailand, for example in the United States, Singapore or the European Union. We also work with clients based overseas. When we transfer personal data abroad, we follow Sections 28 and 29 of the PDPA. We rely on safeguards such as standard contractual clauses or the provider's certified data protection standards, or on another basis the PDPA allows, such as performing a contract with you or your consent.
How long we keep data We keep personal data only as long as the purpose requires, then delete or anonymise it. Accounting and tax records (invoices, contracts, payment details): at least 5 years from the end of the accounting period, as required by the Accounting Act B.E. 2543, or longer if the Revenue Department requires. Client and project communications: duration of the relationship plus [5] years. Unsuccessful job applications: [12] months, unless you agree to a longer period. Enquiries that do not become projects: [2] years from the last contact. Raw footage and production files: as set out in the client contract, normally [2] years after delivery. Released content featuring talent: for the usage period in the signed release. Marketing contacts: until you unsubscribe or withdraw consent. Analytics data: [14] months.
Security We protect personal data with access controls, password-protected and encrypted cloud storage, two-factor authentication on key accounts, and confidentiality obligations for staff and freelancers. When we receive a copy of a Thai ID card, we ask that sensitive fields such as religion and blood type are covered, and we store it only as long as needed for the contract or payment. If a personal data breach is likely to affect your rights, we will notify the Personal Data Protection Committee (PDPC) within 72 hours of becoming aware of it. Where the risk to you is high, we will also inform you without delay, together with the steps we are taking.
Your rights Under Sections 30 to 36 of the PDPA, you have the right to: Access your personal data and ask how we obtained it (Section 30). Receive your data in a commonly used electronic format, or have it sent to another controller (Section 31). Object to processing based on legitimate interests, or for direct marketing (Section 32). Ask us to delete, destroy or anonymise your data (Section 33). Ask us to suspend use of your data (Section 34). Ask us to correct or complete your data (Section 35). Withdraw consent at any time where we rely on it (Section 19). To use any of these rights, contact us using the details in section 14. We will respond within 30 days of receiving your request. We may need to verify your identity first. Some rights have legal limits; for example, we cannot delete invoices we must keep for tax purposes. If we refuse a request, we will tell you why.
Minors Our website and services are intended for adults. Under Thai law, a person under 20 is a minor. When a production involves a minor, for example as talent, we obtain written consent from a parent or legal guardian in line with Section 20 of the PDPA before filming. A parent or guardian on set supervises the minor at all times. If you believe we hold a minor's data without proper consent, contact us and we will delete it.
Changes to this policy We may update this policy to reflect changes in our services or in Thai law. The date at the top shows the latest version. If a change significantly affects how we use your data, we will notify you by email or through a notice on our website.
