PDPA SECTION 23 COMPLIANCE · PERSONAL DATA PROTECTION

Privacy Policy

Personal Data Protection & Regulatory Notice (Under Section 23 of Thailand PDPA B.E. 2562)

Effective Date: August 10, 2026 • PDPA Section 23 Compliant

Summary & Section 23 Compliance Framework

B2K Advisory Co., Ltd. ("B2K", "we", "our", or "us") respects your right to privacy. In compliance with Section 23 of Thailand's Personal Data Protection Act B.E. 2562 (PDPA), this Privacy Notice explicitly details the categories of personal data collected, processing purposes, legal bases, retention periods, third-party disclosure policies, data subject rights, and Data Protection Officer (DPO) contact channels.

1. Data Controller Details

B2K Advisory Co., Ltd. acts as the Data Controller responsible for determining the purposes and methods of processing your personal data collected through this website.

B2K Advisory Co., Ltd.

Address: 55/145 Baan Klang Muang (Ladprao 88), Ladprao Road, Wangthonglang, Bangkok 10310

Email: info@b2k.co.th

Telephone: +66-2-514-1444

2. Categories of Personal Data Collected

We collect personal data directly provided by you through our public website forms or automated system diagnostics:

1

Contact Inquiries

  • Full Name
  • Company Name
  • Email Address & Phone Number
  • Subject & Service Requirements
2

Job & Internship Applications

  • Full Name, Email & Telephone
  • Employment Type (Full-Time Employee / Internship & Co-op)
  • University, Faculty & Preferred Internship Period
  • Target Position & Department
  • Resume / CV File Attachment & Academic Records

* Automatically collected technical metadata: IP address, browser type, operating system, timestamp, and security audit logs processed for system protection.

3. Specified Legal Basis & Purpose of Data Collection

Pursuant to PDPA Section 23, we collect and process your personal data under explicit statutory legal bases:

Processing Purpose Collected Data Category PDPA Statutory Basis
Responding to advisory, audit, tax & tech inquiries Contact Form & Communication Details Consent / Legitimate Interest
Candidate recruitment & Internship selection Career Form & Resume CV Attachments Pre-contractual Steps / Consent
Website security monitoring & legal compliance IP, Access Logs & Diagnostics Legitimate Interest / Legal Duty

4. Data Retention Period

Personal data is retained only for as long as necessary to fulfill the specified collection purposes or to satisfy applicable statutory recordkeeping obligations:

  • Client Records & Contact Inquiries: Retained for [RETENTION_PERIOD_CLIENT] years following the completion of inquiry or advisory engagement.
  • Candidate CVs & Job Applications: Retained for [RETENTION_PERIOD_CV] years for recruitment evaluation and candidate matching, after which files are securely anonymized or destroyed.

5. Third-Party Data Disclosure Policy

B2K Advisory does not sell, rent, or commercialize your personal data to third parties. Disclosure is strictly limited to:

  • Authorized internal staff (HR recruitment officers, audit & tax advisors, IT system admins) bound by strict NDA agreements.
  • Encrypted cloud hosting and IT infrastructure service providers operating under executed Data Processing Agreements (DPA).
  • Relevant government regulators, law enforcement, or tax authorities upon mandatory statutory requests under applicable law.

6. Statutory Data Subject Rights

Under Chapter 3 of Thailand's PDPA, you possess 8 statutory rights regarding your personal data held by B2K Advisory:

1. Right to be Informed

Be informed of data collection details, purposes, and processing terms prior to or at the time of collection.

2. Right of Access

Request access to or obtain copies of your personal data processed by B2K.

3. Right to Data Portability

Obtain personal data in a readable, automated format or request direct transfer to another controller.

4. Right to Object

Object to data collection, usage, or disclosure based on legitimate interest or direct marketing.

5. Right to Erasure / Destruction

Request deletion, destruction, or anonymization of data when no longer necessary.

6. Right to Restriction of Processing

Request temporary restriction of data processing during verification or pending deletion.

7. Right to Rectification

Request correction or updating of inaccurate, outdated, or incomplete records.

8. Right to Withdraw Consent

Withdraw granted consent for data processing at any time without impacting prior lawful processing.

7. Data Protection Officer (DPO) Contact Channel

To exercise any of your 8 statutory rights or submit inquiries regarding our PDPA compliance, please reach out to our Data Protection Officer (DPO):

DPO Contact Details

Email Address:

info@b2k.co.th

Telephone Contact:

+66-2-514-1444

Postal Address:

55/145 Baan Klang Muang (Ladprao 88), Ladprao Road, Wangthonglang, Bangkok 10310

* We will verify your identity and respond to statutory PDPA requests within 30 days of written notification.

B

Ask B2K

AI Business Assistant
Disclaimer: Ask B2K provides general information only and does not constitute formal accounting, tax, or legal advice. Conversations may be logged for service quality and PDPA compliance.
Suggested Quick Topics: