Data protection
Privacy Policy
How APJC collects, uses and protects your personal data under Thailand’s Personal Data Protection Act B.E. 2562 (2019).
Effective date: 10 November 2026 · Version: 1.0
1. About this policy
APJC Co., Ltd. ("APJC", "we", "us" or "our") respects your privacy and is committed to protecting your personal data in accordance with the Personal Data Protection Act B.E. 2562 (2019) ("PDPA") and related laws. This policy explains how we collect, use, disclose and protect your personal data when you visit our website, contact us, chat with our AI assistant or apply for a job with us.
APJC is the data controller for the personal data described in this policy. Our office is located at THE RICE building, Phahon Yothin Road, Bangkok, Thailand.
2. Personal data we collect
2.1 Information you give us
- Contact and enquiry forms: name, email address, phone number, company, job title, subject, message and area of interest.
- Job applications: name, email address, phone number, LinkedIn profile, expected salary, cover letter, résumé and any other information you choose to include.
- AI chat assistant: the messages you send and, if you ask us to follow up, your name, email address, phone number and company.
Please do not include sensitive personal data — such as religion, health information, criminal records, biometric data or a copy of your national ID card — in forms, chats or application documents unless we specifically request it. If we ever need sensitive data (for example, at a later recruitment stage), we will ask for your explicit consent first.
2.2 Information collected automatically
- Technical data such as your IP address, browser type, device information, language preference, and the pages you visit and when.
- Cookies and similar technologies, as described in section 8.
3. How we use your data and our legal bases
| Purpose | Legal basis |
|---|---|
| Responding to enquiries, preparing proposals and quotations, and providing the services you request | Steps taken at your request before entering into a contract; legitimate interests |
| Assessing job applications and managing recruitment | Steps taken at your request before entering into an employment contract; explicit consent for any sensitive data |
| Operating the AI chat assistant, answering your questions and improving answer quality | Legitimate interests |
| Keeping our website secure and preventing spam, abuse and fraud (for example, rate limiting and security logs) | Legitimate interests |
| Measuring website usage with analytics | Consent |
| Sending news, event invitations and marketing communications | Consent, which you may withdraw at any time |
| Complying with laws, regulations and orders from competent authorities | Legal obligation |
If you do not provide personal data that we need for a purpose based on a contract or a legal obligation, we may be unable to fulfil your request or consider your application.
4. AI chat assistant
Our chat assistant uses artificial intelligence to answer questions about APJC. Conversations are processed by our AI service providers, Cloudflare Workers AI (and Anthropic when enabled), solely to generate responses, and are stored so that our team can follow up on requests and improve the service. Answers are generated automatically and may occasionally be inaccurate, so please contact our team to confirm anything important. Do not share confidential or sensitive information in the chat.
5. Disclosure of personal data
We do not sell your personal data. We share it only where necessary with:
- service providers that host and operate our website, databases, email and AI services on our behalf, under contracts that require them to protect your data;
- technology partners, only when needed to fulfil your request (for example, to arrange vendor support or pricing) and with your consent where the law requires it;
- professional advisers such as auditors and legal counsel;
- government agencies, regulators or courts where required by law.
6. International transfers
Some of our service providers process data on servers located outside Thailand. Where personal data is sent or transferred abroad, we make sure the destination has adequate data protection standards or that appropriate safeguards are in place, as required by sections 28 and 29 of the PDPA.
7. How long we keep your data
- Enquiries: 2 years from our last interaction with you.
- Job applications: 1 year after the recruitment process closes, unless you are hired or consent to us keeping your application for future opportunities.
- AI chat conversations: 1 year.
- Security and access logs: 90 days.
When a retention period ends, we delete, destroy or anonymise the data, unless the law requires us to keep it for longer.
8. Cookies
Cookies are small text files stored on your device. We use them as follows:
| Type | Purpose | Consent required |
|---|---|---|
| Strictly necessary | Remembering your language and cookie preferences, protecting forms and keeping the website secure | No |
| Analytics | Understanding how visitors use the website so we can improve it (Cloudflare Web Analytics) | Yes |
Analytics tools load only after you accept them in our cookie banner. You can change your choice at any time with the “Cookie settings” link at the bottom of every page.
9. How we protect your data
We apply appropriate technical and organisational measures, including encryption in transit (HTTPS/TLS), role-based access control, multi-factor authentication for administrators, private storage for application documents, activity logging and regular security reviews. Access to personal data is limited to authorised personnel who need it to do their work.
10. Your rights
Under the PDPA, you have the right to:
- withdraw your consent at any time, without affecting processing carried out before the withdrawal;
- access and obtain a copy of your personal data, or ask us to disclose how we obtained it;
- receive your personal data in a commonly used electronic format, or have it sent or transferred to another data controller;
- object to the collection, use or disclosure of your personal data;
- request the deletion, destruction or anonymisation of your personal data;
- request restriction of the use of your personal data;
- request correction of your personal data so that it is accurate, up to date and complete;
- lodge a complaint with the Office of the Personal Data Protection Committee (PDPC).
To exercise your rights, contact us using the details in section 14. We will act on your request within 30 days of receiving it and may need to verify your identity first. In some cases we may be unable to fulfil a request where the law permits or requires us to retain the data.
11. Minors
Our website and services are intended for organisations and professionals. We do not knowingly collect personal data from minors under 20 years of age without the consent of a parent or guardian as required by law.
12. Links to other websites
Our website may link to websites operated by technology partners and other third parties. Those websites are governed by their own privacy policies, which we encourage you to read before sharing any information.
13. Changes to this policy
We may update this policy from time to time. The latest version will always be published on this page with its effective date, and we will notify you through appropriate channels of any significant changes.
14. Contact us
Data Protection Officer (DPO)
APJC Co., Ltd.
THE RICE building, Phahon Yothin Road, Bangkok, Thailand
Email: contact@dt-apjc.com