Privacy Policy
Last Updated: January 06, 2025
Nexology Company Limited (“the Company”, “We”, “Us”, or “Our”) is committed to protecting the privacy and security of Your personal data. This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information and tells You about Your privacy rights under the Personal Data Protection Act B.E. 2562 (2019) of the Kingdom of Thailand (“PDPA”).
Interpretation and Definitions
- Interpretation: The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
- Company: Refers to Nexology Company Limited, located at 98/9 Rom Klao Rd, Soi 38/1, Khlong Samprawet, Lat Krabang, Bangkok, Thailand.
- Data Controller: Refers to the Company, which determines the purposes and means of the processing of Personal Data.
- Data Subject: Refers to You, the natural person who is the subject of the Personal Data.
- Personal Data: Refers to any information relating to a natural person, which enables the identification of such person, whether directly or indirectly, as defined under the PDPA.
- Service: Refers to the engineering, inspection, testing, and regulatory certification services provided by the Company.
Categories of Personal Data We Collect
- Identity and Contact Data: We collect personally identifiable information such as Your name, email address, phone number, job title, company affiliation, and professional license details (including COET license information) to facilitate our professional services.
- Technical Inspection Data: During the course of our testing and certification services, we may collect site addresses, facility photographs, equipment specifications, and safety records.
- Technical and Usage Data: We collect data automatically when You interact with our digital platforms, including IP addresses, browser types, device identifiers, and diagnostic data.
Legal Bases for Processing
In accordance with the PDPA, the Company processes Your Personal Data based on the following legal grounds:
- Contractual Necessity: To perform our obligations under a service agreement, work order, or engineering contract.
- Legal Obligation: To comply with mandatory reporting and filing requirements set by Thai regulatory bodies, including the Council of Engineers Thailand (COET), the Department of Labour Protection and Welfare (DLPW), and the Department of Energy Business (DOEB).
- Legitimate Interests: For the purpose of maintaining accurate site safety records, improving our engineering processes, and ensuring the security of our business operations.
- Consent: Where required by law, We will obtain Your explicit consent before processing specific categories of data or for marketing purposes.
Use of Your Personal Data
- Service Execution: To conduct technical inspections, testing, and audits as requested by the Client.
- Certification and Reporting: To issue formal reports and submit necessary technical data to Thai regulatory authorities to validate compliance with national safety standards.
- Communication: To manage Your account and provide critical updates regarding safety alerts, inspection results, or changes to Thai engineering regulations.
- Compliance: To maintain a Record of Processing Activities (RoPA) as mandated by the PDPA to ensure accountability and data integrity.
Disclosure of Your Personal Data
- Regulatory Authorities: We disclose data to COET, DLPW, or DOEB where such disclosure is required by law to maintain Your operational licenses or safety certifications.
- Professional Service Providers: We may share data with specialized laboratories or technical consultants who assist in specific testing phases under strict confidentiality and data processing agreements.
- Legal Requirements: The Company may disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities, such as a court or government agency.
Data Security and Retention
- Security Measures: We implement rigorous technical and organizational security measures to protect Your Personal Data from unauthorized access, loss, or disclosure.
- Retention Period: We retain Personal Data only for as long as is necessary for the purposes set out in this policy. Professional engineering and safety records are typically retained for a period of 10 years to comply with professional liability periods and Thai engineering statutes.
Your Rights under the PDPA
As a Data Subject in Thailand, You have the following rights which You may exercise by contacting us:
- Right to Access: To request a copy of the Personal Data we hold about You.
- Right to Rectification: To request the correction of any inaccurate or incomplete information.
- Right to Erasure: To request the deletion of Your data when it is no longer necessary for the original purpose, subject to our legal retention duties.
- Right to Object: To object to the processing of Your data for specific purposes, such as direct marketing.
- Right to Data Portability: To request the transfer of Your data to another party in a structured, machine-readable format.
- Right to Withdraw Consent: Where we rely on Your consent, You have the right to withdraw it at any time.
Contact Information
If You have any questions about this Privacy Policy or wish to exercise Your rights, please contact us:
- By Mail: Nexology Company Limited, 98/9 Rom Klao Rd, Soi 38/1, Khlong Samprawet, Lat Krabang, Bangkok, Thailand
- By Email: info@nexology.co.th
- By Phone: +66 (0) 989 606 448
