Privacy Notice

This Notice explains our practices with regard to Personal Data collected by us. Personal data include any data that can be used (directly or indirectly) to identify you from that data alone or in combination with other data we process or can reasonably access.

• Personal Data such as name-surname, age, date of birth, photo, national identification number, passport number, IP address, and data from video recording such as CCTV footage.
• Contact information such as mailing address, email address, telephone number or other addresses that allow us to contact you.
• Financial information such as sources of wealth and your assets, and bank account numbers.
• Transaction Information such as how you interact with us, including purchases, inquiries, customer account information, and information about how you use our websites and applications.
• Other information as may be necessary for us to provide services and to complete client due diligence process and discharge its AML/CFT obligations).



We may also process your sensitive data such as data provided in your identification card (e.g. blood group, race, and religion) (provided we have received your explicit consent or as permitted by law.)

• Personal Data such as name-surname, nationality, age, date of birth, place of birth, photo, national identification number, passport number, marital status, military status, social security card number, number of children, Personal Data of your parent, spouse and children, and data from video recording such as CCTV footage.
• Contact information such as mailing address, email address, telephone number, or other addresses that allow us to contact you.
• Personal Data relating to your past employment such as work history, work experience, work permit, professional qualifications, salary, welfare and benefit, education, training, opinions from third parties about you (such as references) and other Personal Data which may be gathered by you during the recruitment and employment process.
• Financial information such as bank account numbers, tax payment for the employment purpose.

We may also process your sensitive data such as data provided in your identification card or work permit (e.g. blood group, race, and religion), criminal record, health data, disability, and fingerprint (provided we have received your explicit consent or as permitted by law.)

For Customer, Vendor or Website Visitor:

In the majority of cases, we collect Personal Data directly from you when you purchase services or products from us, visit our website, interact or contact with us, register on our websites, or sign up to receive a newsletter.

We may also collect your Personal Data from third parties such as our affiliate companies of Tricor Orisoft, or from your authorised representatives and advisor(s), your employer, our corporate clients where we are providing services to them, our service providers of referees, in the case of prospective employees. We may also collect additional Personal Data from third party search information suppliers who can help us better understand our customers.

If you interact with us online, we use cookies and other technological tools to collect Personal Data about your computer and your use of our website and applications. For more information about cookies and other technologies, please see the section Cookies, Google Analytics and Other Data Collection Technologies below.

For Job Applicant and Employee:

If you are job applicant or our employee, we collect your Personal Data when you fill in a job application and submit to us, when you submit your resume, profile or CV to us via designated recruitment channels, and when you provide your Personal Data to us after your application is successful.

We may collect your Personal Data from other source such as recruitment agencies, public source such as job search websites and other publicly available information on the internet and social media.

We rely on contractual obligation, legitimate interest and legal obligation to process your Personal Data for the following purposes:

We may not always rely on consent as a legal basis for Processing your Personal Data although we will seek your consent before:

We rely on contractual obligation and legal obligation to process your Personal Data for the following purposes:

We rely on your explicit consent to process your sensitive data for the following purposes:

We process your Personal Data for compliance with legal obligations and for institution of, compliance with, or defence against, legal claims. We may disclose your Personal Data to public agencies as required by law, such as the Social Security Office, Revenue Department, Ministry of Commerce, and Immigration Office.

Where we need to collect Personal Data by applicable law or under the terms of an agreement we have with you, and you fail to provide that data when requested, we may not be able to perform the agreement we have or are trying to enter into with you (for example, to provide you with goods, services, or to process employment). In those circumstances, we may have to cancel a product or services you have or cannot process the employment with us. We will seek to notify you if this is the case at the relevant time.

We may share your Personal Data within Tricor Orisoft's international network, third party agents, suppliers or contractors for purpose specified in this Privacy Notice. For example, we may disclose or transfer your Personal Data to third party agents who provide administrative, storage, information technology, security, communication, compliance, payment and other data processing services. Where necessary, we will endeavour to take reasonable steps to ensure that data processing agreements are entered into with such third-party agents, suppliers or contractors to ensure that they process your Personal Data, on our behalf, with the same level of security and confidentiality as applied by us.

We may also provide your Personal Data to other parties to the extent required or provided by law, regulation or court order, for example if we are under a duty to disclose your Personal Data in order to comply with any legal or regulatory obligation such as our AML/CFT obligations or if we have agreed to assist with any tax or other regulatory filing requirements.

We may disclose your Personal Data for the purposes of seeking references and confirmation of the details which you have provided should you apply for a position with us.

We may furthermore disclose or transfer your Personal Data when we received your consent to do so or for one of the other purposes described in this Privacy Notice.

When you visit our website or use our mobile applications, we collect certain Personal Data by automated means, using technologies such as cookies, pixel tags, browser analysis tools, server logs and web beacons.

For example, when you visit our website, we place cookies on your computer. Cookies are small text files that websites send to your computer or other internet-connected device to uniquely identify your browser or to store information or settings in your browser. Cookies allow us to recognize you when you return. They also help us provide a customized experience and enable us to detect certain kinds of fraud. In many cases, you can manage cookie preferences and opt-out of having cookies and other data collection technologies used by adjusting the settings on your browser. All browsers are different, so visit the “help” section of your browser to learn about cookie preferences and other privacy settings that may be available.

We collect many different types of information from cookies and other technologies. For example, we may collect information from the device you use to access our website, your operating system type, browser type, domain, and other system settings, as well as the language your system uses and the country and time zone where your device is located. Our server logs also record the IP address assigned to the device you use to connect to the internet. An IP address is a unique number that devices use to identify and communicate with each other on the internet. We may also collect information about the website you were visiting before you came to us and the website you visit after you leave our site.

In many cases, the information we collect using cookies and other tools is only used in a non-identifiable way, without any reference to Personal Data. For example, we use information we collect about all website users to optimize our websites and to understand website traffic patterns.

In some cases, we do associate the information we collect using cookies and other technology with your Personal Data. This Notice applies to the information when we associate it with your Personal Data.

One of the third-party vendor used by us is Google Analytics. For information on how Google Analytics uses data please visit “How Google uses data when you use our partners’ sites or apps”, located at www.google.com/policies/privacy/partners/

You have the following rights in respect of the Personal Data about you that we process:

To exercise your right, you may contact us via Contacting Us section below. We will process your request and then inform you of the result within 30 days from the date of receiving your request. Where we refuse your request, we will inform you of the reason, accordingly.

You can also limit the communications that we send to you. To opt-out of commercial or marketing emails, simply click the link labelled “unsubscribe” at the bottom of any email we send you.

Please note that even if you opt-out of promotional emails, we may still need to contact you with your Personal Data about the services or products we are providing or will provide to you or the organisation you work for. For example, even if you opt-out of emails, we may still send you activity confirmations and account statements.

We have implemented an information security program that contains administrative, technical, and physical controls that are designed to safeguard your Personal Data. For example, we use industry-standard encryption technology to secure sensitive Personal Data when it is being collected and transmitted over the internet as well as firewalls, site monitoring and intrusion detection software.

Please note that you should also take steps to protect yourself and your Personal Data, especially online. When you register at our websites, choose a strong password, and do not use the same password that you use on other sites. Do not share your password with anyone else. Tricor Orisoft will never ask you for your password in an unsolicited phone call or in an unsolicited e-mail. Also remember to sign out of the website and close your browser window when you have finished your work. This is to ensure that others cannot access your Personal Data and correspondence if others have access to your computer.

This Notice only addresses the Processing of Personal Data by us. Other websites that may be accessible through this website have their own privacy policies and data collection, use and disclosure practices. Our affiliates, suppliers and business partners have their own privacy policies too. We encourage you to familiarize yourself with the privacy statements provided by all third parties prior to providing them with information or taking advantage of an offer or promotion.

Our websites may provide forums and other areas where you can communicate with others and publicly post information. Prior to posting in these areas, please read our Terms of Use carefully. You have no privacy rights in public postings. All the information you post will be accessible to anyone with internet access, and any Personal Data you include in your posting may be read, collected, and used by others. For example, if you post your email address, you may receive unsolicited messages. Please use caution when posting any Personal Data.

If you have applied for employment with us, your Personal Data submitted with your job application may be added to our Talent Community and used for recruitment and other customary human resources purposes. You have the right to withdraw from our Talent Community.

We will only use Personal Data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.

If we need to use any Personal Data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process Personal Data without your knowledge or consent, in compliance with the above, where this is required or permitted by law.

From time to time, we may update this Privacy Notice to reflect new or different privacy practices. We will place a notice online when we make material changes to this Privacy Notice. Additionally, if the changes will materially affect the way we use or disclose previously-collected Personal Data, we will notify you about the change by sending a notice to the primary email address associated with your account.

We will only retain your Personal Data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.

To determine the appropriate retention period for Personal Data, we will consider the amount, nature and sensitivity of the Personal Data, the potential risk of harm from unauthorised use or disclosure of Personal Data, the purposes for which we process Personal Data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

You have the right to exercise your rights regarding your Personal Data that we hold. All requests will be reviewed and processed in accordance with applicable law.

If you would like to exercise your rights or if you have any questions, comments or complaints (e.g. if you believe that we have not handled your Personal Data properly or that it has breached its privacy obligations), please contact follows:

Email address: [email protected]

The Privacy Officer will investigate any complaint and notify the individual within reasonable timeframe of the outcome of the investigation.

Please note this version of our Notice does not substantively change the way we treat Personal Data in comparison to the version of the Notice available historically on our websites.

This Privacy Notice is prepared in Thai and English. In case of discrepancies between the two versions, the Thai version shall prevail.