Thai Prasit Textile Co., Ltd. (the “Company”, “we” or “us”) respects the privacy of users of the website www.thaiprasit.co.th. This policy explains what data the Company collects, how it is used, how long it is kept and what rights you have. This policy applies only to data received through this website. When you follow a link to an external service such as LINE, your use of that service is governed by that provider’s policy.
1. Data controller
Thai Prasit Textile Co., Ltd., 93/4-5 Moo 7, Setthakit 1 Rd., Tha Sai, Mueang Samut Sakhon, Samut Sakhon 74000, Thailand. Telephone +66 34 423 062, email info@thaiprasit.com.
2. Data we collect and why
The Company collects the data that you enter or send to us directly, as listed below, and certain website usage data, as described in section 3, and uses it only for the purposes stated. The Company does not sell or rent personal data to anyone.
Quote request form
- Data collected
- Full name, company, email, phone number or LINE ID, country, products of interest, quantity, details and attachments
- Purpose
- To contact you, prepare a quotation and provide product information
- Lawful basis
- Steps taken at your request before entering into a contract, and the Company’s legitimate interests in business communications
- Retention period
- 2 years from your most recent contact with us about the request
Custom order specification form
- Data collected
- The same contact details as above, product category, quantity, specification details, and drawings or sample photos
- Purpose
- To assess our production capability, provide a quotation and contact you
- Lawful basis
- Steps taken at your request before entering into a contract, and the Company’s legitimate interests in business communications
- Retention period
- 2 years from your most recent contact with us about the request
Online job application
- Data collected
- Full name, phone number, email, position applied for, CV and message to our HR department
- Purpose
- To assess and select applicants and to contact you to arrange an interview
- Lawful basis
- Steps taken at your request before entering into a contract of employment, and our legitimate interests in considering you for other suitable positions
- Retention period
- 1 year from the date we receive your application if you are not selected; if you do not wish us to keep it for other positions, you may ask us to delete it earlier. For successful applicants, the necessary data becomes part of the employee record and is kept for the duration of employment and for the periods required by labour, tax and social security laws
Fields marked * on our forms are required in order for us to reply to you or to consider your application. If you do not provide them, the Company may be unable to act on your request; all other fields are optional. If your enquiry leads to a sale, the related documents will be kept for the periods required by accounting and tax law.
Please do not include sensitive personal data, such as your religion, blood group, health information or a copy of your national identity card, in the CV attached to your job application. If the Company needs such data during the recruitment process, we will ask for your explicit consent separately.
3. Cookies and website analytics
Cookies are small files that a website stores in your browser. This website always uses the essential cookies it needs in order to work; analytics cookies are used only if you accept them. You can change your settings at any time using the “Cookie settings” link at the bottom of every page. Rejecting analytics cookies does not affect your use of the website.
In addition, the website’s server automatically logs access data, namely your IP address, browser and device type, the pages you visit and the date and time, so that the website can operate and unusual activity can be detected, on the basis of the Company’s legitimate interests. These logs are kept for no more than 1 year, unless they are needed to investigate an incident or the law requires a longer period. Statistics in Google Analytics are kept for no more than 14 months.
The contact page has a map from Google Maps, which loads only when you click “Show map”. When the map loads, Google receives visit data such as your IP address and may set its own cookies, in accordance with Google’s privacy policy.
| Type | Cookie name | Function | Duration |
|---|---|---|---|
| Essential | tp_consent | Remembers whether you accepted or rejected cookies | 6 months |
| Essential | pll_language | Remembers the language you choose (Thai or English) | 1 year |
| Analytics | _ga, _ga_* | Google Analytics counts visitors and popular pages; used only with your consent | 2 years |
4. Disclosure of data
The Company may disclose data, only to the extent necessary, to service providers that work on its behalf, namely website hosting and data storage providers, email service providers and Google (Google Analytics and Google Maps). These service providers may use the data only as instructed by the Company. The Company may also disclose data to its auditors and professional advisers, who are bound by duties of confidentiality, and to government authorities or courts where required by law.
5. International data transfers
Some service providers, such as Google, may store or process data on servers outside Thailand. The Company transfers personal data outside Thailand only where the personal data protection law permits, for example where the destination country has adequate data protection standards, where the recipient has appropriate safeguards in place under the notifications of the Personal Data Protection Committee, such as standard contractual clauses, or where the transfer is necessary to take steps at your request before entering into a contract.
6. Security
This website encrypts data in transit using HTTPS. Data sent through the forms is kept in the website’s back office, which requires a login, and access is restricted to the employees concerned. At the end of the retention period, the system deletes the entries and their attachments automatically, and the Company will delete or destroy any other copies, or anonymise the data so that individuals can no longer be identified. Copies held in system backups are used only to restore the system and expire with the backup cycle. In the event of a personal data breach, the Company will notify the Office of the Personal Data Protection Committee without delay and, where feasible, within 72 hours of becoming aware of it, unless the breach is unlikely to result in a risk to the rights and freedoms of individuals. Where the breach is likely to result in a high risk to your rights and freedoms, the Company will also notify you without delay together with the remedial measures.
7. Rights of data subjects
Subject to the conditions prescribed by law, you have the following rights.
- The right to withdraw any consent you have given, at any time, without affecting processing lawfully carried out before the withdrawal
- The right to request access to and a copy of your personal data, and to ask how we obtained data that you did not consent to our collecting
- The right to request that your data be corrected so that it is accurate and up to date
- The right to request that your data be deleted or destroyed
- The right to request that the use of your data be restricted
- The right to receive your data or to request that it be transferred
- The right to object to the collection, use or disclosure of your data
- The right to lodge a complaint with the Office of the Personal Data Protection Committee
You may submit a request through the channels in section 8, stating your name, how we can reply to you and the right you wish to exercise. The Company will ask only for the information needed to verify your identity. If we can verify it through the email address or channel you have used to contact us, we will not ask for a copy of any document. If a document is needed, such as a copy of your national identity card or passport, please cover your religion and blood group (if shown); the Company will delete it once it is no longer needed. There is no charge for exercising your rights. The Company will notify you of the outcome within 30 days of receiving your complete request; if necessary, this may be extended by up to 30 days, in which case we will tell you why. If the Company must refuse a request on grounds prescribed by law, for example because the law or a court order prohibits disclosure or because disclosure would affect the rights of others, it will inform you of the reasons.
8. How to contact us
For matters relating to personal data, please email info@thaiprasit.com with the subject line “Personal data”, call +66 34 423 062 during business hours (Monday–Saturday, 8:00–17:00), or write to or visit the Company’s office at the address given in section 1 during business hours. If you believe that the Company has not complied with the law, you may lodge a complaint with the Office of the Personal Data Protection Committee through the channels published on its website, www.pdpc.or.th.
9. Changes to this policy
The Company may update this policy to keep it in line with the law and with its services. The latest version, together with the date of the update, will be published on this page. If the Company intends to use your data for a new purpose not described in this policy, it will inform you and, where required by law, ask for your consent first.