{"id":3,"date":"2025-11-10T08:18:13","date_gmt":"2025-11-10T08:18:13","guid":{"rendered":"http:\/\/www.tbsp.co.th\/?page_id=3"},"modified":"2026-07-30T15:09:35","modified_gmt":"2026-07-30T08:09:35","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.tbsp.co.th\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n<style>\n    #one-column-block_03c523005c82486f20f8b855bd9e3149 {\n        \n                    padding-top: 100px;\n        \n                    padding-bottom: 50px;\n            }\n\n    @media (max-width: 767.98px) {\n        #one-column-block_03c523005c82486f20f8b855bd9e3149 {\n                            padding-top: 40px;\n            \n                            padding-bottom: 40px;\n                    }\n    }\n<\/style>\n\n<section id=\"one-column-block_03c523005c82486f20f8b855bd9e3149\"  class=\"one-column-block block one-column white\">\n\n    <!-- Background image ONLY if uploaded -->\n    \n    <div class=\"container\">\n        <div class=\"row justify-content-lg-center\">\n            <div class=\"col-xl-12\">\n\n                                   <h3><span style=\"color: #3c56a4;\">Introduction<\/span><\/h3>\n<p>TBSP Public Company Limited recognizes the importance of privacy rights and the protection of Personal Data of all persons connected with its business operations. This Notice explains how the Company collects, uses, discloses, and protects Personal Data in accordance with the Personal Data Protection Act B.E. 2562 (2019) (\u201cPDPA\u201d) and other applicable laws.<\/p>\n<h3><span style=\"color: #3c56a4;\">1. Definitions<\/span><\/h3>\n<ul>\n<li>\u201cPersonal Data\u201d means any information relating to a natural person that enables the identification of that person, whether directly or indirectly, but does not include information relating specifically to a deceased person, in accordance with Section 6 of the Personal Data Protection Act B.E. 2562 (2019) (\u201cPDPA\u201d). Examples of Personal Data include name, surname, national identification number, passport number, address, telephone number, email address, photograph, signature, financial information, employment information, system usage information, and any other information that may be used to identify an individual.<\/li>\n<li>\u201cSensitive Personal Data\u201d means Personal Data relating to racial or ethnic origin, political opinions, cult, religious or philosophical beliefs, sexual behavior, criminal records, health data, disability, trade union information, genetic data, biometric data, or any other data prescribed by law.<\/li>\n<li>\u201cProcessing of Personal Data\u201d means any operation performed on Personal Data, such as collection, recording, storage, use, disclosure, transmission, transfer, alteration, erasure, destruction, or anonymization.<\/li>\n<li>\u201cData Subject\u201d means a natural person to whom the Personal Data relates or who can be identified from such Personal Data.<\/li>\n<\/ul>\n<h3><span style=\"color: #3c56a4;\">2. Scope of this Notice<\/span><\/h3>\n<p>This Notice applies to the Personal Data of all groups of individuals connected with the Company, including the following:<\/p>\n<ul>\n<li>Customers, clients, service users, and individuals whose Personal Data appears in work undertaken by the Company for its customers or clients<\/li>\n<li>Directors, executives, employees, workers, personnel, job applicants, and interns<\/li>\n<li>Business partners, vendors, contractors, service providers, and business associates<\/li>\n<li>Shareholders, investors, and stakeholders<\/li>\n<li>Visitors, guests, meeting attendees, and event participants<\/li>\n<li>Individuals who contact the Company through its website, email, telephone, social media, or other channels<\/li>\n<\/ul>\n<p>The Company may act as a Data Controller or as a Data Processor processing Personal Data on the instructions of a customer or client, depending on the nature of the activity and the authority to determine the purposes and means of processing.<\/p>\n<h3><span style=\"color: #3c56a4;\">3. Personal Data the Company May Collect<\/span><\/h3>\n<p>The Company will collect Personal Data only to the extent necessary and relevant to the purposes of its operations. Such Personal Data may include:<\/p>\n<ul>\n<li>Identification and contact information, such as name, surname, national identification number, address, telephone number, email address, signature, and photograph<\/li>\n<li>Education and employment information, job title, employment history, and job applicant<\/li>\n<li>informationEmployee information, remuneration, benefits, attendance records, leave records, and performance evaluations<\/li>\n<li>Financial information, bank account information, payment information, tax information, and transaction records<\/li>\n<li>Customer and business partner information, contracts, purchase orders, manufacturing information, and service information<\/li>\n<li>Information contained in work files, documents, cards, products, labels, envelopes, or other media provided by customers for processing by the Company<\/li>\n<li>Premises access information, CCTV footage, and visitor information<\/li>\n<li>Information technology usage data, such as user accounts, IP addresses, log data, and system access history<\/li>\n<li>Communications, complaints, and requests to exercise Data Subject rights<\/li>\n<\/ul>\n<p>Sensitive Personal Data, only where necessary and supported by an appropriate legal basis<\/p>\n<h3><span style=\"color: #3c56a4;\">4. Sources of Personal Data<\/span><\/h3>\n<p>The Company may obtain Personal Data directly from the Data Subject or from other lawful sources, such as customers, clients, business partners, employers, affiliated organizations, service providers, contractors, business associates, government agencies, public sources, websites, information systems, CCTV systems, and the Company\u2019s access control systems.<\/p>\n<p>If you provide the Company with Personal Data relating to another person, you must have the right or an appropriate legal basis to disclose such Personal Data and should inform that person of this Notice.<\/p>\n<h3><span style=\"color: #3c56a4;\">5. Purposes of Processing Personal Data<\/span><\/h3>\n<p>The Company may collect, use, or disclose Personal Data for purposes related to its business operations and compliance with applicable laws, including:<\/p>\n<ul>\n<li>Preparing quotations, receiving orders, entering into contracts, and performing contractual obligations<\/li>\n<li>Manufacturing products, providing services, conducting quality inspections, packing, storing, and delivering products<\/li>\n<li>Processing Personal Data in accordance with the instructions of customers or clients<\/li>\n<li>Verifying identity and managing relationships with relevant persons<\/li>\n<li>Providing after-sales services, receiving complaints, and resolving issues<\/li>\n<li>Conducting financial, accounting, tax, payment, and audit activities<\/li>\n<li>Recruiting personnel and managing human resources<\/li>\n<li>Protecting the security of persons, premises, assets, manufacturing processes, and information<\/li>\n<li>Managing information systems and preventing cyber threats, fraud, and unusual or unauthorized activities<\/li>\n<li>Conducting internal audits, managing risks, ensuring corporate governance, and complying with applicable standards<\/li>\n<li>Complying with laws and with orders of courts, government authorities, or regulatory agencies<\/li>\n<li>Establishing, exercising, defending, or contesting legal claims<\/li>\n<li>Communicating news, activities, products, or services where supported by an appropriate legal basis<\/li>\n<\/ul>\n<p>Analyzing and improving products, services, systems, and work processes<\/p>\n<h3><span style=\"color: #3c56a4;\">6. Legal Bases for Processing Personal Data<\/span><\/h3>\n<p>The Company will process Personal Data only where an appropriate legal basis is available under the PDPA, including:<\/p>\n<ul>\n<li>Taking steps at the request of the Data Subject prior to entering into a contract or performing a contract<\/li>\n<li>Compliance with legal obligations<\/li>\n<li>The legitimate interests of the Company or another person, provided that such interests do not disproportionately affect the rights and freedoms of the Data Subject<\/li>\n<li>Consent of the Data Subject<\/li>\n<li>Preventing or suppressing danger to life, body, or health<\/li>\n<li>Performing a task carried out in the public interest or relying on another legal basis permitted by law<\/li>\n<\/ul>\n<p>Where the Company relies on consent, you may withdraw your consent through the channels specified by the Company. Withdrawal of consent will not affect the lawfulness of any processing carried out before the withdrawal.<\/p>\n<h3><span style=\"color: #3c56a4;\">7. Disclosure of Personal Data<\/span><\/h3>\n<p>The Company may disclose Personal Data, to the extent necessary and supported by an appropriate legal basis, to internal departments, affiliated companies, customers, clients, business partners, contractors, system or cloud service providers, logistics providers, Data Processors, banks, financial institutions, insurance companies, auditors, professional advisers, courts, government agencies, regulatory authorities, or other persons permitted or required by law.<\/p>\n<p>The Company will require recipients to maintain confidentiality, use Personal Data only for the specified purposes, and implement appropriate security measures.<\/p>\n<h3><span style=\"color: #3c56a4;\">8. Cross-Border Transfer of Personal Data<\/span><\/h3>\n<p>Where it is necessary for the Company to send or transfer Personal Data to another country in order to fulfill the purposes of providing services to you, such as transferring Personal Data to a cloud system whose platform or server is located outside Thailand or supporting information technology systems located outside Thailand, depending on the particular Company service or activity that you use or are involved with, the Company will comply with the PDPA by considering the data protection standards of the destination country and implementing appropriate safeguards as required by law. This is to ensure that the Personal Data sent or transferred receives an adequate level of protection in accordance with internationally recognized standards, or that the applicable legal conditions permitting such transfer are satisfied, including the following:<\/p>\n<p>8.1. The transfer is necessary for compliance with a law that requires the Company to send or transfer Personal Data to another country.<\/p>\n<p>8.2. The transfer is necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract.<\/p>\n<p>8.3. The transfer is necessary for the performance of a contract between the Company and another natural or legal person for your benefit.<\/p>\n<p>8.4. The transfer is necessary to prevent or suppress danger to your life, body, or health, or to the life, body, or health of another person, where you are physically or legally incapable of giving consent at that time.<\/p>\n<p>8.5. The transfer is necessary for the performance of a task carried out in the substantial public interest.<\/p>\n<h3><span style=\"color: #3c56a4;\">9. Retention Period<\/span><\/h3>\n<p>The Company will retain Personal Data only for as long as necessary to fulfill the purposes of processing, or for the period required by applicable laws, contracts, standards, or other relevant requirements.<\/p>\n<p>When Personal Data is no longer required, the Company will erase, destroy, or anonymize it using appropriate and secure methods, unless further retention is required by law or is necessary for the establishment, exercise, or defense of legal claims.<\/p>\n<h3><span style=\"color: #3c56a4;\">10. Information Security Measures in Accordance with ISO\/IEC 27001<\/span><\/h3>\n<p>The Company implements information security measures under the ISO\/IEC 27001 Information Security Management System adopted by the Company, together with measures required under the PDPA, to preserve the confidentiality, integrity, and availability of information in a manner appropriate to the nature and level of risk.<\/p>\n<ul>\n<li>Controlling access rights based on job responsibilities and business need, including user authentication and user account management<\/li>\n<li>Classifying information and assigning appropriate confidentiality levels<\/li>\n<li>Encrypting, masking, or anonymizing information as appropriate<\/li>\n<li>Recording and monitoring system usage, protecting against malware, and managing vulnerabilities<\/li>\n<li>Backing up and restoring information and managing business continuity<\/li>\n<li>Controlling premises, equipment, documents, and storage media<\/li>\n<li>Assessing and managing risks relating to business partners and external service providers<\/li>\n<li>Managing information security incidents and Personal Data breaches<\/li>\n<li>Providing training, raising awareness, conducting reviews and audits, and continually improving security measures<\/li>\n<\/ul>\n<h3><span style=\"color: #3c56a4;\">11. Rights of Data Subjects<\/span><\/h3>\n<p>Subject to the conditions and exceptions prescribed by the PDPA, you may have the following rights:<\/p>\n<ol>\n<li>Right to withdraw consent<\/li>\n<li>Right to access and obtain a copy of your Personal Data<\/li>\n<li>Right to request disclosure of the source of Personal Data obtained without your consent<\/li>\n<li>Right to data portability<\/li>\n<li>Right to object to the processing of Personal Data<\/li>\n<li>Right to request erasure, destruction, or anonymization of Personal Data<\/li>\n<li>Right to request restriction of the use of Personal Data<\/li>\n<li>Right to request rectification so that Personal Data is accurate, current, and complete<\/li>\n<li>Right to lodge a complaint with the Office of the Personal Data Protection Committee<\/li>\n<\/ol>\n<p>The Company may request additional information or documents to the extent necessary to verify your identity, confirm your rights, and prevent disclosure of Personal Data to an unauthorized person.<\/p>\n<h3><span style=\"color: #3c56a4;\">12. Use of Cookies<\/span><\/h3>\n<p>The Company\u2019s website may use cookies or similar technologies to ensure proper website operation, maintain security, remember preferences, analyze usage, and improve services. You may review further details and manage your cookie settings through the Company\u2019s Cookie Policy.<\/p>\n<h3><span style=\"color: #3c56a4;\">13. Violations and Penalties<\/span><\/h3>\n<p>Any collection, use, disclosure, transmission, transfer, access, alteration, destruction, or other processing of Personal Data without authorization or in violation of the PDPA may give rise to liability depending on the nature and circumstances of the act, as follows:<\/p>\n<p><strong>13.1 Civil Liability<\/strong><\/p>\n<p>A Data Controller or Data Processor that violates the law and causes damage to a Data Subject may be required to pay compensation, including additional punitive damages as determined by the court, which may not exceed twice the amount of the actual compensation.<\/p>\n<p><strong>13.2 Criminal Penalties<\/strong><\/p>\n<p>The unlawful use or disclosure of Sensitive Personal Data in certain circumstances may be punishable by imprisonment for a term not exceeding one year, a fine not exceeding THB 1,000,000, or both, depending on the applicable offense and circumstances prescribed by law.<\/p>\n<p><strong>13.3 Administrative Penalties<\/strong><\/p>\n<p>Failure to perform a legal duty or a violation of legal requirements may be subject to an administrative fine not exceeding THB 1,000,000, THB 3,000,000, or THB 5,000,000, depending on the applicable offense.<\/p>\n<p><strong>13.4 Internal Disciplinary Measures<\/strong><\/p>\n<p>Any director, executive, employee, worker, contractor, or person performing work for the Company who violates a policy or requirement relating to Personal Data protection may be subject to disciplinary action, ranging from a warning, suspension or revocation of access rights, suspension from work, termination of employment, or termination of contract, depending on the severity of the conduct. The person may also be required to compensate for damage or may be subject to legal proceedings under applicable laws.<\/p>\n<p><span style=\"color: #eb2128;\"><strong>Note on Penalties<\/strong><\/span><\/p>\n<p>The Company may amend this Notice to reflect changes in applicable laws, business operations, technology, or Personal Data processing activities. The updated Notice will be published on the Company\u2019s website or communicated through another appropriate channel, together with its effective date or last updated date.<\/p>\n<h3><span style=\"color: #3c56a4;\">14. Changes to this Privacy Notice<\/span><\/h3>\n<p>The Company may amend this Notice to reflect changes in applicable laws, business operations, technology, or Personal Data processing activities. The updated Notice will be published on the Company\u2019s website or communicated through another appropriate channel, together with its effective date or last updated date<\/p>\n<h3><span style=\"color: #3c56a4;\">15. Contact Details and Exercising Your Rights<\/span><\/h3>\n<p>If you have any questions, wish to exercise your rights, or would like to make a complaint regarding the processing of Personal Data, you may contact the Company using the details below:<\/p>\n                \n            <\/div>\n        <\/div>\n    <\/div>\n<\/section>\n\n\n\n<style>\n\t#box-items-block_0f02572da582015cb8f47e7c7f8a7076 {\n\t\t\t\t\t\t\tpadding-top: 0px;\n\t\t\t\t\t\t\tpadding-bottom: 100px;\n\t\t\t}\n\t@media (max-width: 767.98px) {\n\t\t#box-items-block_0f02572da582015cb8f47e7c7f8a7076 {\n\t\t\t\t\t\t\tpadding-top: 40px;\n\t\t\t\t\t\t\t\t\t\tpadding-bottom: 40px;\n\t\t\t\t\t}\n\t}\n<\/style>\n\n<section id=\"box-items-block_0f02572da582015cb8f47e7c7f8a7076\"  class=\"box-items-block block white\">\n\n\t\n\t<div class=\"container\">\n\t\t<div class=\"row g-5 items-container justify-content-start\">\n\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"col-lg-6 col-xl-6 item  center\" \n\t\t\t\t\tdata-aos=\"fade\" \n\t\t\t\t\tdata-aos-offset=\"20\">\n\n\t\t\t\t\t\t\t\t\t\t<a href=\"tel:027542650\" target=\"_blank\">\n\t\t\t\t\t\n\t\t\t\t\t\t <div class=\"wrap box\" \n                 style=\"background-color:#fafbff; \">\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t <div class=\"icon\">\n\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/www.tbsp.co.th\/wp-content\/uploads\/2025\/12\/viber.svg\" \n\t\t\t\t\t\t\t\t\t\talt=\"\">\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<div class=\"content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"title\">Provide contact details<\/div>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"detail\">Call center<br \/>\r\nTelephone number : 02-754-2650<\/div>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"btn-main outline more\"> Read more<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\n\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t<div class=\"col-lg-6 col-xl-6 item  center\" \n\t\t\t\t\tdata-aos=\"fade\" \n\t\t\t\t\tdata-aos-offset=\"60\">\n\n\t\t\t\t\t\t\t\t\t\t<a href=\"mailto:DPO@tbsp.co.th\" target=\"_blank\">\n\t\t\t\t\t\n\t\t\t\t\t\t <div class=\"wrap box\" \n                 style=\"background-color:#fafbff; \">\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t <div class=\"icon\">\n\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/www.tbsp.co.th\/wp-content\/uploads\/2025\/12\/home.svg\" \n\t\t\t\t\t\t\t\t\t\talt=\"\">\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<div class=\"content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"title\">Personal data protection officer<\/div>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"detail\">41\/1 Moo.10, Poochaosamingprai Road, Samrong Tai Sub-district,<br \/>\r\nPhra Pradaeng District, Samut Prakan, 10130, Thailand<br \/>\r\nEmail: DPO@tbsp.co.th<br \/>\r\n<\/div>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"btn-main outline more\"> Read more<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\n\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\n\t\t<\/div>\n\t<\/div>\n\n<\/section>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.tbsp.co.th\/en\/wp-json\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tbsp.co.th\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.tbsp.co.th\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.tbsp.co.th\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tbsp.co.th\/en\/wp-json\/wp\/v2\/comments?post=3"}],"version-history":[{"count":14,"href":"https:\/\/www.tbsp.co.th\/en\/wp-json\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":4987,"href":"https:\/\/www.tbsp.co.th\/en\/wp-json\/wp\/v2\/pages\/3\/revisions\/4987"}],"wp:attachment":[{"href":"https:\/\/www.tbsp.co.th\/en\/wp-json\/wp\/v2\/media?parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}