GTrade Technology Company Limited ("GTrade Technology", "we", "us") respects your privacy and is committed to processing personal data lawfully, fairly and transparently. This Privacy Policy explains what personal data we collect through this website, how we use it, the legal bases on which we rely, with whom we share it, how long we keep it, and the rights you have. It is designed to comply with the Personal Data Protection Act B.E. 2562 (2019) of the Kingdom of Thailand ("PDPA"), the EU General Data Protection Regulation 2016/679 ("GDPR") where applicable, and comparable international standards.
1. Data Controller
The data controller is GTrade Technology Company Limited, registered at 324/68 Village No. 12, Nong Prue Subdistrict, Bang Lamung District, Chon Buri Province, 20150, Kingdom of Thailand. Contact: office@gtrade-technology.com.
2. Personal data we collect
- Information you submit voluntarily via the supplier engagement form or by email: company name, country, contact person, email address, type of engagement and message contents.
- Technical data automatically collected by the hosting infrastructure: IP address, user agent, referrer, request time and pages visited, used solely for security, abuse prevention and aggregate analytics.
- Cookies and similar technologies strictly necessary for the website to function. We do not use advertising or cross-site tracking cookies.
3. Purposes and legal bases of processing
- Responding to your inquiry and conducting pre-contractual communications — legal basis: performance of a contract or steps taken at your request (GDPR Art. 6(1)(b); PDPA s. 24(3)).
- Compliance with legal obligations, including tax, accounting, anti-money-laundering, sanctions, export-control and aviation regulatory requirements — GDPR Art. 6(1)(c); PDPA s. 24(6).
- Legitimate interests in operating, securing and improving the website, preventing fraud and unauthorised access — GDPR Art. 6(1)(f); PDPA s. 24(5).
- Consent, where required by applicable law, for specific optional processing — GDPR Art. 6(1)(a); PDPA s. 19. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
4. Disclosure of personal data
We do not sell personal data. We may disclose personal data to:
- professional advisers (legal, accounting, audit) bound by confidentiality;
- IT service providers (hosting, email, infrastructure) acting as data processors under written agreements;
- competent public authorities, regulators or courts where disclosure is required by law or necessary to protect our rights.
5. International data transfers
Given the international nature of our coordination activities, personal data may be transferred to, or accessed from, jurisdictions outside Thailand or the European Economic Area. Where such transfers occur, we apply appropriate safeguards, including Standard Contractual Clauses, adequacy decisions, or other lawful mechanisms recognised under PDPA s. 28 and GDPR Chapter V.
6. Retention
We retain personal data only for as long as necessary to fulfil the purposes described above and to comply with legal, accounting and regulatory obligations. Inquiry data is typically retained for up to twenty-four (24) months from the last substantive contact, unless a longer period is required by law or for the establishment, exercise or defence of legal claims.
7. Security
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure or destruction, including transport encryption (TLS), access controls and the principle of least privilege. No Internet transmission can be guaranteed entirely secure.
8. Your rights
Subject to the applicable legal framework, you may have the right to:
- access the personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request erasure or restriction of processing in certain circumstances;
- object to processing based on legitimate interests;
- receive your data in a structured, commonly used format (portability);
- withdraw consent where processing is based on consent;
- lodge a complaint with the Office of the Personal Data Protection Committee (Thailand) or, where applicable, with a supervisory authority in your jurisdiction.
To exercise these rights, please contact office@gtrade-technology.com. We may need to verify your identity before responding.
9. Children
The website is not directed at children under the age of 18 and we do not knowingly collect personal data from minors.
10. Changes
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the latest revision.