Cookie Policy

1. Purpose and Scope

Checku, a web application developed and operated by OrbitInnotive Co., Ltd. (“OrbitInnotive,” “we,” “us,” or “our”), uses cookies and similar technologies when you visit or use our websites, web applications, or mobile apps (collectively, the “Services”).

This Cookie Policy explains how we use those technologies to ensure secure, reliable, and personalized operation of the Services.
It should be read together with our [Privacy Policy] and [Terms of Service].

By continuing to use our Services, you agree that strictly necessary cookies will operate as described below.
Non-essential cookies (if introduced in the future) will be activated only after you provide explicit consent, where required by applicable law.

2. What Are Cookies and Similar Technologies

Cookies are small data files stored on your device to ensure secure and efficient operation of the Services. They may be:

Session cookies (expire when you close your browser), or Persistent cookies (remain for a defined period to remember settings). These technologies operate solely for technical and security purposes at this stage.

We may also use local storage, session storage, SDKs, or server-side tags that perform equivalent technical functions.
We do not use hidden tracking pixels, fingerprinting, or advertising identifiers without notice or consent.

3. What We Use Right Now (Strictly Necessary Only)

At this stage, OrbitInnotive uses only cookies essential for core functionality, such as:

Authenticating users and maintaining secure login sessions.
Remembering minimal settings (e.g., language, display mode).
Preventing abuse, enforcing rate-limits, and ensuring system stability.
Supporting lawful compliance (e.g., cookie-consent records).

No analytics, advertising, or behavioral tracking cookies are currently active.
These limited cookies are required for the operation of the site and cannot be switched off.

Some session identifiers may be generated automatically by our hosting infrastructure (e.g., CDN or load balancer) to ensure performance and security; these do not store personal data.

4. Legal Basis and Business Interest

We process strictly necessary cookies under legitimate interest and/or contract performance to:

- Deliver core digital services you request.
- Protect our platform and user accounts.
- Maintain service reliability and cybersecurity.

Consent is not required for these purposes under the Thai PDPA, EU/UK GDPR, or equivalent laws.
For any future non-essential cookies (e.g., analytics or advertising), explicit opt-in consent will be obtained before activation.

5. How We Use Cookie-Based Data

Cookie and session data may be used, in aggregated or pseudonymized form, to:

- Monitor service performance and prevent fraud or unauthorized use.
- Optimize features and improve reliability.
- Evaluate usage trends or system errors (technical diagnostics).

We may combine these data with other lawful sources (e.g., system logs or usage metadata) for product-improvement analytics without identifying individual users.
Such aggregated insights are not considered “personal data” under PDPA when they cannot identify a person. We do not use cookie-based data for automated decision-making or user profiling.

6. User Controls and Opt-Out

You can manage or delete cookies via your browser settings at any time.
If you block necessary cookies, parts of the Services may not function properly.

We also honor Global Privacy Control (GPC) and legally valid “Do Not Sell/Share” signals where applicable.

7. International Compliance

We comply with global privacy frameworks while preserving operational flexibility:

- Thailand (PDPA): Legitimate interests cover strictly necessary cookies; consent will be obtained for any optional ones.
- EU/UK (GDPR & ePrivacy): Necessary cookies may run without consent; others will require opt-in.
- United States (CPRA/CCPA): We do not “sell” or “share” cookie data for cross-context advertising.
- Other jurisdictions: Equivalent legal safeguards are applied.

Cross-border cookie data (e.g., server logs or CDN caching) may be processed internationally under Standard Contractual Clauses (SCCs) or adequacy frameworks.

8. Data Security and Retention

All cookie and storage data are handled with strict security measures:

Session cookies expire automatically at logout or when the browser closes.
Persistent preference cookies typically last no more than 12 months, unless you clear them earlier.

We never store financial, biometric, or sensitive personal data in cookies.
Payments are processed only through PCI-DSS-compliant providers.

9. Future Changes to Cookie Use

If we later introduce analytics, feature measurement, or privacy-safe advertising, we will:

- Display a cookie banner offering “Accept All,” “Reject All,” or “Manage Preferences.”
- Provide a live list of cookie types and vendors within Cookie Settings.
- Allow you to withdraw consent anytime.
- Log and store consent records for audit compliance.

Until such update, our site will continue to run only essential cookies.

10. Updates to This Policy

We may amend this Cookie Policy to reflect operational or legal updates.
Material changes (e.g., adding analytics cookies) will trigger a new consent banner.
The “Last updated” date above will always indicate the latest version in force.

11. Contact Information

Data Protection Officer (DPO)
📧 tech@orbit-people.com
📍 OrbitInnotive Co., Ltd.
496–502 Gaysorn Amarin Building, 5th Floor, Room 5057, Phloen Chit Road, Lumpini, Pathumwan, Bangkok 10330, Thailand

Tel. (66) 094-669-2391

Checku is a brand operated by OrbitInnotive Co., Ltd.