Privacy & security policy

AURUM OUTDOOR Co., Ltd. (“AURUM”, “we”, “us”) is an out-of-home media buying agency registered in Thailand with an operating office in Vietnam. This policy explains how we collect, use, store and protect personal data across aurumoutdoor.com, our communication channels and our client relationships.

Because we serve the iGaming industry, confidentiality is a commercial obligation, not a checkbox: campaign data, rates and launch timing are treated as trade secrets and are handled under NDA by default.

We collect only what a B2B media business actually needs:

• Contact details you give us — name, work email, phone or messenger handle, company and role.
• Project information — briefs, budgets, markets, creative assets and launch schedules you share with us.
• Technical data — anonymized device, browser and usage data collected via privacy-friendly analytics.
• Correspondence — emails and messages exchanged with our planners, retained for project history.

We use your data to prepare media plans and quotes, execute and report on campaigns, fulfil contracts, and respond to enquiries. With your consent we may send occasional market updates — every such email includes a one-click opt-out.

We never sell, rent or trade personal data. We never use client data to prospect competitors, and we do not disclose which brands occupy which placements.

This site uses a minimal set of functional cookies and anonymized, cookieless analytics. We do not run advertising trackers, cross-site pixels or fingerprinting.

You can block cookies in your browser settings without losing any core functionality of the site.

Client data is stored on encrypted infrastructure with strict access scoping. Our baseline controls:

• TLS 1.3 in transit, AES-256 encryption at rest
• Role-based access with mandatory 2FA for all staff
• Isolated per-client workspaces — no shared folders
• NDA signed before any brief or rate discussion
• Background-checked print and installation crews

Active client records are kept for the duration of the engagement plus the period required by Thai and Vietnamese commercial law (typically five years). Enquiry data that does not lead to a project is deleted after 12 months.

You may request earlier deletion at any time — see “Your rights” below.

Under the GDPR, Thailand’s PDPA and Vietnam’s PDPD you may request access to your data, a copy of it, correction, deletion, restriction of processing, or portability. You may also withdraw consent at any time without affecting prior lawful processing.

To exercise any right, email privacy@aurumoutdoor.com — we respond within 30 days, usually much faster.

Data may be processed in Thailand, Vietnam and — for encrypted backups — within the EU. Cross-border transfers are covered by standard contractual clauses and the safeguards described in “Data security”.

We share data only with processors strictly necessary to run the business: contract software, encrypted email and storage providers — each bound by data-processing agreements. Media owners (e.g., billboard operators or transit authorities) receive only the information required to execute your booking, under confidentiality terms.

We do not work with data brokers and never will.

Questions or complaints about privacy go to privacy@aurumoutdoor.com or AURUM OUTDOOR Co., Ltd., Level 21, Sathorn Square, 98 North Sathorn Rd, Bangkok 10500, Thailand.

If this policy changes materially we will post the new version here and update the date below. Material changes affecting active clients are announced by email before taking effect.