Privacy Policy

1. Introduction

Sukjai Tech Co., Ltd. ("Sukjai Tech", "we", "us", "our") is committed to protecting the personal data of individuals who interact with our services. This Privacy Policy describes how we collect, use, store, and protect your personal information in compliance with the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand and applicable international standards.

This policy applies to all visitors to our website, enquirers, and clients who engage our services. For questions about this policy, contact us at privacy@sukjaitechaes.

2. Personal Data We Collect

We may collect the following categories of personal data:

• Contact information: Name, email address, phone number, and business affiliation provided through our contact form or direct correspondence.
• Engagement data: Information shared during consulting engagements, including business data, organisational details, and project-related materials.
• Technical data: IP address, browser type, operating system, referring URLs, and pages visited, collected automatically via cookies and server logs.
• Communication records: Records of email or telephone correspondence with our team.

We do not intentionally collect sensitive personal data (special categories) through our website. Engagement-specific sensitive data may be governed by separate contractual agreements.

3. Legal Basis for Processing

Under the PDPA and applicable frameworks, we process your personal data on the following legal bases:

• Consent: Where you have explicitly provided consent, such as through our contact form submission.
• Contractual necessity: To fulfil obligations under service agreements with clients.
• Legitimate interest: For responding to enquiries, improving our website, and communicating about our services to existing contacts.
• Legal obligation: Where we are required by Thai law to retain or disclose data.

4. How We Use Your Personal Data

We use personal data for the following purposes:

• Responding to enquiries and scheduling consultations
• Delivering contracted services and managing client engagements
• Sending service-related communications (invoices, project updates, handover documents)
• Improving the quality and content of our website
• Analytics and understanding how our site is used
• Complying with legal and regulatory obligations

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

5. Data Retention

We retain personal data only as long as necessary for the stated purposes:

• Enquiry data: 12 months from the date of the enquiry if no engagement follows
• Client engagement data: 5 years from the close of the engagement for contractual and legal compliance purposes
• Technical/analytics data: Up to 26 months as aggregated, anonymised data
• Cookie consent records: 12 months from the date of consent

6. Data Security

We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include:

• TLS encryption for data in transit on our website
• Access controls limiting data access to authorised personnel only
• Hosting on servers located in Thailand where operationally feasible
• Mutual NDA in place before any client data is shared during engagements

In the event of a personal data breach, we will notify affected individuals and the relevant supervisory authority as required under the PDPA.

7. Cookies

Our website uses cookies to improve functionality and understand usage. We use essential cookies (required for basic operation) and optional analytics cookies (used with your consent). You can manage your cookie preferences at any time on our Cookie Policy page.

8. Third-Party Services

We may share data with trusted third-party service providers who process data on our behalf, including:

• Website hosting and infrastructure providers
• Analytics service providers (aggregated, anonymised data only)
• Email communication service providers

All third-party processors are required to maintain appropriate data protection standards. We do not authorise any third party to use your data for their own marketing purposes.

9. Your Rights Under the PDPA

As a data subject, you have the following rights under the Personal Data Protection Act B.E. 2562:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data in certain circumstances
• Right to data portability: Receive your data in a structured, commonly used format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time without affecting prior lawful processing

To exercise any of these rights, contact us at privacy@sukjaitechaes. We will respond within 30 days. You also have the right to lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) in Thailand.

10. Children's Privacy

Our services are intended for business professionals and organisations. We do not knowingly collect personal data from individuals under 18 years of age. If you believe we have inadvertently collected such data, please contact us immediately at privacy@sukjaitechaes.

11. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies independently. The presence of a link does not constitute an endorsement of the linked site's privacy practices.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. We will post the updated version on this page with a revised "Last Updated" date. Continued use of our website after any changes constitutes acceptance of the updated policy. For significant changes, we will provide a more prominent notice.

13. Contact Information

For any questions, requests, or concerns related to this Privacy Policy: