Privacy Policy

1. Collection of Personal Data

The Company collects personal data directly from the data subject or from other sources through lawful methods, collecting only what is necessary for the Company's purposes, as follows:

  • Identification and contact information (name, address, phone number, email)
  • Employee and partner data (natural persons)
  • Sensitive Personal Data (e.g., race, religion, health data, biometric data, etc.) — the Company will obtain explicit consent before collection, unless an exception under the law applies
  • In cases necessary for contract performance or legal compliance, failure to provide data may prevent the Company from fulfilling its purposes

2. Purposes of Data Use

The Company uses data for the benefit of its business operations, as follows:

  • Procurement and contracting
  • Financial transactions and coordination
  • Improving work quality, database management, analysis and development of operational processes
  • Marketing communications (with consent)
  • Compliance with applicable laws and regulations

3. Use of Analytics and Tag Management Tools

The Company uses the following third-party tools on its websites and digital platforms to collect anonymised usage data for the purpose of improving service quality, understanding user behaviour, and managing the deployment of tracking technologies:

  • Microsoft Clarity — a behavioural analytics service provided by Microsoft Corporation that collects anonymised session data including mouse movements, clicks, scroll patterns, session recordings, and heatmaps. Microsoft Clarity does not collect directly identifiable personal data such as names, email addresses, or financial information.
  • Google Analytics 4 (GA4) — an analytics service provided by Google LLC that collects anonymised data on user interactions, traffic sources, device types, and general usage patterns across the Company's websites and platforms. GA4 does not collect directly identifiable personal data unless explicitly configured to do so.
  • Google Tag Manager (GTM) — a tag management service provided by Google LLC used to deploy and manage tracking scripts and tags on the Company's websites. Google Tag Manager itself does not collect personal data but may facilitate the deployment of tools that do, including those listed above.

Data processed through these tools may be stored on servers located outside Thailand, subject to the respective data protection standards of Microsoft Corporation and Google LLC. For more information, please refer to Microsoft's Privacy Statement at privacy.microsoft.com and Google's Privacy Policy at policies.google.com/privacy.

4. Storage and Retention Period

  • The Company stores data in both physical (Hard Copy) and electronic formats
  • Data is retained for the duration necessary for the stated purposes, or as required by law, or as permitted by the applicable statute of limitations

5. Disclosure to Third Parties

The Company may disclose personal data to:

  • Affiliates or external service providers (domestic and international) involved in personal data processing, including analytics and tag management service providers such as Microsoft Corporation and Google LLC
  • Government agencies, public authorities, or regulatory bodies as required by law
  • External parties involved in legal proceedings, such as litigation or legal action

6. International Data Transfer

The Company may transfer personal data abroad, such as storing data on Cloud services, sharing with affiliates, or through the use of third-party analytics and tag management tools (including Microsoft Clarity, Google Analytics 4, and Google Tag Manager). The Company will implement measures to ensure the destination country has adequate and appropriate data protection standards as required by law.

7. Rights of the Data Subject

Data subjects have the following rights under the PDPA:

  • Right to access and obtain a copy of data, Right to data portability
  • Right to object to processing, Right to erasure or destruction of data
  • Right to restriction of processing, Right to rectification
  • Right to withdraw consent, Right to lodge a complaint with the Personal Data Protection Committee The Company will consider and respond to requests within 30 days from the date of receipt.

8. Contact Information

If you have any questions or wish to exercise your rights regarding personal data, please contact:

Personal Data Protection Department, Jenosize Co., Ltd.
Address: 72/65 Moo 3, Bang Talat, Pak Kret, Nonthaburi 11120
Email: [email protected]
Phone: 02-962-6655