Effective Date: January 27, 2025
1. Introduction
Welcome to ThaiCyber Services Co. Ltd. (“we,” “our,” “us”). We are committed to protecting your privacy and ensuring that your personal data is handled in a safe and responsible manner. This Privacy Policy outlines how we collect, use, disclose, and protect your personal information in compliance with Thailand’s Personal Data Protection Act (PDPA).
2. Information We Collect
We may collect and process the following types of personal data:
- Personal Identification Information: Name, email address, phone number, and other contact details.
- Professional Information: Job title, company name, and industry.
- Technical Information: IP address, browser type, operating system, and other technical details.
- Usage Data: Information about how you use our website and services.
- Sensitive Data: Information related to cybersecurity incidents, which may include sensitive personal data as defined by the PDPA.
3. How We Use Your Information
We use your personal data for the following purposes:
- Service Delivery: To provide our cybersecurity consulting services, including vCISO services, OSINT, Dark Web Intelligence, Incident Response, and Digital Forensics.
- Communication: To communicate with you regarding our services, updates, and promotional offers.
- Improvement: To improve our website, services, and user experience.
- Compliance: To comply with legal obligations and protect our legal rights.
4. Legal Bases for Processing
We process your personal data based on the following legal grounds:
- Consent: Where you have given explicit consent for specific purposes.
- Contractual Necessity: Where processing is necessary for the performance of a contract with you.
- Legal Obligation: Where processing is required to comply with legal obligations.
- Legitimate Interests: Where processing is necessary for our legitimate interests, provided these are not overridden by your rights.
5. Data Sharing and Disclosure
We may share your personal data with:
- Service Providers: Third-party vendors who assist us in providing our services.
- Legal Authorities: When required by law or to protect our legal rights.
- Business Transfers: In the event of a merger, acquisition, or sale of assets.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations. Specific retention periods are determined based on the nature of the data and the purposes of processing.
8. Your Rights
Under the PDPA, you have the following rights regarding your personal data:
- Access: The right to request access to your personal data.
- Correction: The right to request correction of inaccurate or incomplete data.
- Deletion: The right to request deletion of your personal data under certain conditions.
- Objection: The right to object to the processing of your personal data.
- Data Portability: The right to request the transfer of your data to another organization.
9. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
ThaiCyber Services Co. Ltd.
Teo Hong Silom Building
723 Si Lom, Khwaeng Silom
Bangkok 10500
Email: [email protected]
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.