Privacy Policy

1. INTRODUCTION

Jirapat and Partners (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website and use our services.

This Privacy Policy complies with Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) and other applicable laws.

2. PERSONAL DATA WE COLLECT

 2.1 Website Visitors (General Data Collection)

This applies to all visitors to our website, including job applicants:

• Technical Data: IP address, browser type, device information, operating system
• Usage Data: Pages visited, time spent on site, click patterns, referral sources
• Location Data: General location based on IP address
• Cookies and Tracking Data: As described in our Cookie Policy
• Contact Information: Name, email address, phone number, postal address
• Account Information: Username, password, profile information
• Communication Data: Messages, enquiries, feedback you send to us
• Transaction Data: Payment information, billing address, purchase history
• Marketing Preferences: Communication preferences, interests
• Any other information you provide to us through any communication channels we have.

2.2 Job Applicants (Additional Specific Data Collection)

In addition to the general website visitor data in Section 2.1 above, we collect the following specific data from job applicants:

• Personal Information: Full name, date of birth, nationality, identification number
• Professional Information: CV/resume, work experience, education history, qualifications, certifications, professional licenses
• Application Data: Cover letter, portfolio, references, salary expectations, availability
• Assessment Information: Interview notes, test results, evaluation scores, assessment outcomes
• Background Check Data: Employment verification, criminal background checks (where legally permitted and with consent)
• Sensitive Personal Data:
• Health information (only for reasonable workplace adjustments, with explicit consent)
• Diversity monitoring data (with separate explicit consent and for statistical purposes only)
• Reference Information: Contact details and feedback from professional references
• Right to Work: Documentation proving eligibility to work in Thailand

2.3 Information from Third Parties 

• Social Media: Information from social media platforms when you connect accounts
• Business Partners: Information from our authorised partners and service providers
• Public Sources: Publicly available information relevant to our business relationship
• Recruitment Agencies: Information provided by external recruitment consultants
• Background Check Providers: Verification results from third-party screening services

Important Note for Job Applicants: When you apply for a position with us, you are subject to both the general data collection practices outlined in Section 3.1 (as a website visitor) and the specific job applicant data collection outlined in Section 3.2. If you do not consent for the data collection and processing, we may be unable to process your application.

3. LEGAL BASIS FOR PROCESSING

We process your personal data based on the following legal grounds under the PDPA:

• Consent: Where you have given clear consent for specific processing purposes
• Contract Performance: To fulfil our contractual obligations to you
• Legal Compliance: To comply with legal obligations and regulatory requirements
• Vital Interests: To protect your vital interests or those of others
• Public Task: To perform tasks in the public interest
• Legitimate Interests: For our legitimate business interests, balanced against your rights

4. HOW WE USE YOUR PERSONAL DATA

We use your personal data for the following purposes:

4.1 Service Provision

• Providing and maintaining our website and services
• Customer support and communication
• Personalising user experience

4.2 Recruitment and Employment

• Application Processing: Reviewing and evaluating job applications
• Candidate Assessment: Conducting interviews, tests, and background checks
• Communication: Contacting candidates about application status and next steps
• Compliance: Meeting legal requirements for equal opportunity and fair recruitment
• Record Keeping: Maintaining recruitment records for legal and audit purposes
• Future Opportunities: Keeping suitable candidate details for future vacancies (with consent)
• Onboarding: Processing successful candidates for employment setup

4.3 Marketing and Communications

• Sending promotional materials and newsletters (with consent)
• Market research and customer feedback
• Targeted advertising and content personalisation
• Event invitations and updates

4.4 Business Operations

• Internal administration and record-keeping
• Financial management and accounting
• Quality assurance and service improvement
• Security monitoring and fraud prevention

4.5 Legal and Compliance

• Complying with legal obligations
• Establishing, exercising, or defending legal claims
• Regulatory reporting and audits

5. DATA SHARING AND DISCLOSURE

We may share your personal data with:

5.1 Service Providers

• IT service providers and hosting companies
• Payment processors and financial institutions
• Marketing and advertising partners
• Professional advisors (lawyers, accountants, consultants)
• Recruitment Agencies: External recruitment consultants and headhunters
• Background Check Providers: Third-party verification and screening services
• Assessment Platforms: Online testing and evaluation service providers

5.2 Legal Requirements

• Government authorities and regulatory bodies
• Law enforcement agencies
• Courts and legal proceedings

5.3 Third-Party Integrations

• Google Analytics (website analytics)
• Email service providers
• Hosting providers
• [Other specific services you use]

We ensure all third parties are bound by appropriate data protection obligations.

6. INTERNATIONAL DATA TRANSFERS

Some of your personal data may be transferred to and processed in countries outside Thailand. When we transfer data internationally, we ensure adequate protection through:

• Adequacy Decisions: Transfers to countries with adequate data protection laws
• Standard Contractual Clauses: Approved contractual safeguards
• Explicit Consent: Your specific consent for the transfer
• Other Approved Mechanisms: As recognised under the PDPA

Current international transfers include:

• [Specify actual countries/regions and safeguards used]

7. DATA RETENTION

We retain your personal data only as long as necessary for the purposes outlined in this policy: 

• Marketing Data: Until consent withdrawal or 3 years of inactivity
• Job Applicant Data:
• Successful Candidates: Transferred to employee records upon hiring
• Unsuccessful Candidates: 2 years from application date for potential future opportunities
• Interview Records: 1 year from interview date
• Background Check Results: As required by law, typically 3-7 years

8. YOUR RIGHTS UNDER THE PDPA

You have the rights regarding your personal data as provided under the PDPA including the followings:

8.1 Right of Access

Request copies of your personal data and information about how we process it. 

8.2 Right to Rectification

Request correction of inaccurate or incomplete personal data.

8.3 Right to Erasure

Request deletion of your personal data in certain circumstances.

8.4 Right to Restrict Processing

Request limitation of processing in specific situations.

8.5 Right to Data Portability

Request transfer of your data to another organisation in a structured format.

8.6 Right to Object

Object to processing based on legitimate interests or for direct marketing.

8.7 Right to Withdraw Consent

Withdraw consent at any time where processing is based on consent.

8.8 Right to Lodge a Complaint 

File a complaint with the Personal Data Protection Committee.

9. DATA SECURITY

We implement appropriate technical and organisational measures to protect your personal data:

• Encryption: Data encryption in transit and at rest
• Access Controls: Restricted access on a need-to-know basis
• Security Monitoring: Regular security assessments and monitoring
• Staff Training: Regular data protection training for employees
• Incident Response: Procedures for detecting and responding to data breaches

10. COOKIES AND TRACKING TECHNOLOGIES

Our website uses cookies and similar technologies. For detailed information, please see our Cookie Policy.

Cookie Consent: We obtain your consent before placing non-essential cookies on your device.

11. CHILDREN’S PRIVACY

Our services are not intended for individuals under 20 years of age. We do not knowingly collect personal data from children under 20 without parental consent. If you believe we have collected such data, please contact us immediately.

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically.