This English text is a courtesy translation. The Thai version is the binding policy under the Personal Data Protection Act B.E. 2562 (2019); if the two differ, the Thai version prevails.
Summary
- We collect your personal data only when you complete our contact form: name, email, subject and message.
- This website uses no analytics or advertising cookies — no Google Analytics and no user-behaviour tracking.
- We never sell or rent your personal data to third parties under any circumstances.
- Contact-form data is received and stored on our own server in Thailand — no third-party form service is involved (see section 5).
- You may request access to, correction of, or erasure of your data, or object to its use, at any time (see section 9).
1. Data Controller
At Thai Solutions and Consultant Co., Ltd. is the Data Controller under the Personal Data Protection Act B.E. 2562 (2019).
| Head office | 3/910 Room 14/42, Popular C7 Building, Chaengwatthana Road, Bang Phut, Pak Kret, Nonthaburi 11120, Thailand |
|---|---|
| Tax ID | 0125553007967 (head office) |
| chalermpol@atthaisolutions.com | |
| Telephone | +66 80 995 9599 |
2. Personal data we collect
2.1 Data you give us directly
When you contact us through the “Connect With Us” form on our website, we collect:
- Name
- Email address
- Subject
- Message — including any other personal data you choose to include in it
If you contact us by email or telephone directly, we keep the information you provide in that contact — for example your name, email, telephone number, organisation and the details of your enquiry.
2.2 Data collected automatically
When you visit the website, our web server automatically records access logs for system security: IP address, browser type and version (User-Agent), date and time of access, and the pages requested.
2.3 Data we do not collect
This website has no member registration, no online payment, and does not collect sensitive personal data under section 26 of the PDPA (such as race, religion, health data or biometric data). Please do not include such data in the message field.
3. Purposes and lawful bases for processing
| Purpose | Data used | Lawful basis |
|---|---|---|
| Replying to your enquiry, preparing quotations and presenting services at your request | Name, email, subject, message | Steps taken at your request prior to entering a contract (section 24(3)) |
| Maintaining website security; detecting and preventing misuse | IP address, User-Agent, access logs | Our legitimate interest (section 24(5)) |
| Complying with applicable law, such as tax law and the Computer Crime Act | Data required by law | Legal obligation (section 24(6)) |
We will not use your data for purposes beyond those stated above unless we have informed you and obtained your consent, or the law permits it.
4. Cookies and tracking technologies
This website sets no cookies of its own and uses no analytics or user-tracking tools such as Google Analytics, Google Tag Manager or Facebook Pixel. Nor does it store anything in your browser’s Local Storage or Session Storage.
However, the third-party providers from which the site loads resources (see section 5) may set their own technical cookies, which are outside our control. You can refuse cookies in your browser settings.
5. Disclosure and cross-border transfer
We do not sell, rent or exchange your personal data with third parties for marketing purposes.
Data you enter in the contact form is sent directly, over an encrypted connection, to our server located in Thailand and stored there. The system then sends a notification to our mailbox. We do not use any third-party form-handling service.
That said, to run the website and our email, we use the following third-party providers whose servers are located outside Thailand:
| Provider | Purpose | Data they may access |
|---|---|---|
| Google Workspace Google LLC |
Our corporate email; receives and stores contact-form notifications | Name, email, subject and the message you submit, as contained in the notification email |
| Google Fonts fonts.googleapis.com, fonts.gstatic.com |
Serves the web fonts used on the site | IP address and browser information |
| Cloudflare (cdnjs) cdnjs.cloudflare.com |
Serves the icon files used on the site | IP address and browser information |
| Tailwind CSS CDN cdn.tailwindcss.com |
Serves the stylesheet used for page layout | IP address and browser information |
| unpkg unpkg.com |
Serves the animation script used on the site | IP address and browser information |
Sending data to the providers above constitutes a cross-border transfer of personal data under sections 28 and 29 of the PDPA, and is necessary to provide the service you requested.
We may also disclose your data to government agencies, regulators or others where required by law or under a lawful order.
6. Data retention
| Data type | Retention period |
|---|---|
| Contact-form data (both stored on the server and received by email) | No more than 2 years from the most recent contact, unless it leads to a contract |
| Data of clients who enter into a contract with us | For the life of the contract and a further 10 years after it ends, to comply with accounting and tax law |
| Website access logs (server log) | 90 days, following Computer Crime Act practice |
After those periods we delete the data or render it non-identifiable.
7. Security measures
- The site is served over encrypted HTTPS/TLS throughout
- Access is restricted to staff who need the data to perform their duties
- Server access is controlled by authentication and recorded in access logs
- Security measures are reviewed periodically and updated as standards change
8. Protection of minors’ data
This website exists for business-to-business contact and is not intended to collect personal data from anyone under 20 years of age. If you believe a minor has submitted personal data to us without the consent of a parent or guardian, please tell us using the channels in section 10 so we can delete it.
9. Your rights as a data subject
Under the Personal Data Protection Act B.E. 2562 (2019) you have the following rights:
- Right to be informed — to know how your data is collected, used and disclosed
- Right of access and to obtain a copy (section 30) — to access and receive a copy of your personal data
- Right to data portability (section 31) — to receive your data in a machine-readable format
- Right to object (section 32) — to object to the collection, use or disclosure of your data
- Right to erasure (section 33) — to have your data deleted, destroyed or anonymised
- Right to restrict processing (section 34) — to have the use of your data suspended
- Right to rectification (section 35) — to have your data corrected, kept current and not misleading
- Right to withdraw consent (section 19) — to withdraw consent at any time, where processing relies on consent
- Right to lodge a complaint — with the Personal Data Protection Committee if you believe we are not complying with the law
To exercise a right, contact us using the channels in section 10. We will act within 30 days of receiving your request, at no charge. We may ask you to verify your identity first, and may refuse a request to the extent the law allows, in which case we will explain why.
10. How to contact us
If you have questions, wish to exercise a right, or want to complain about personal data protection, please contact:
At Thai Solutions and Consultant Co., Ltd.
Bang Phut, Pak Kret, Nonthaburi 11120, Thailand
If you are not satisfied with our response, you have the right to complain to the Office of the Personal Data Protection Committee (PDPC) through the channels it specifies.
11. Changes to this policy
We may update this policy from time to time to reflect changes in the law or in our services, noting the last-updated date at the top of this page. If a change is material we will notify you through an appropriate channel. We recommend reviewing this policy periodically.