Privacy Policy

Smart Alliance Co., Ltd. (“Smart Alliance”, “we”, “us”) is the data controller for personal data collected through www.smartalliance.co.th (the “Website”). This policy explains what we collect, why, how long we keep it and the rights you have under the Personal Data Protection Act B.E. 2562 (2019) (the “PDPA”).

We collect only what you give us, or what is needed to run the Website securely:

• Contact form: your name and email address and, if you choose to provide them, your company or organization, phone number, subject and message.
• Consent record: that you agreed to this policy and to the Terms and Conditions, and when.
• Technical data: your IP address and basic request details such as browser type and the time of the request, used to protect the contact form against abuse and kept in server logs.
• Language preference: a cookie that remembers whether you chose the English or the Thai version of the Website.
• Cookie notice: a cookie that remembers that you accepted the cookie notice, so it is not shown again on every page. It expires after one day.

We use your personal data to:

• reply to your enquiry and provide the information, quotation or service you asked about (steps taken at your request before entering into a contract, or performance of a contract);
• keep a record of our correspondence with you (legitimate interest);
• protect the Website and the contact form against spam, fraud and abuse (legitimate interest);
• comply with legal obligations that apply to us.

We do not sell your personal data, and we do not use it for marketing without asking you first.

The contact form is protected by Google reCAPTCHA. To tell people from automated programs, reCAPTCHA collects hardware and software information, such as device and application data, and sends it to Google for analysis. That information is governed by Google's Privacy Policy and Terms of Service, published at policies.google.com.

Your personal data is handled by the members of our team who need it to respond to you. We also rely on service providers that process data on our behalf:

• Microsoft (Microsoft 365), which hosts the mailbox that receives contact form submissions;
• Google, which provides reCAPTCHA;
• our hosting provider, which runs the servers the Website is served from.

We may also disclose personal data where the law requires it, for example to a government authority or a court.

Some of these providers store or process data outside Thailand. Where they do, we rely on their contractual safeguards and data protection standards, as the PDPA permits.

We keep contact form submissions and our correspondence for as long as we need them to respond to you and to manage any business relationship that follows, and for no longer than 2 years after our last contact with you unless the law requires us to keep them longer. Server logs are kept for no longer than 90 days.

Under the PDPA you have the right to:

• withdraw your consent at any time, without affecting processing that took place before you withdrew it;
• request access to, and a copy of, your personal data;
• ask us to correct personal data that is inaccurate, out of date or incomplete;
• ask us to delete, destroy or anonymize your personal data;
• ask us to restrict, or object to, the processing of your personal data;
• receive your personal data in a commonly used electronic format, or have it sent to another data controller;
• lodge a complaint with the Personal Data Protection Committee.

To exercise any of these rights, contact us using the details below. We will respond within 30 days.

We use appropriate technical and organizational measures to protect personal data, including encrypted connections (HTTPS) and restricted access to the mailbox that receives enquiries.

We may update this policy from time to time. The effective date at the top of this page shows when it last changed.