Privacy Policy

01What we collect

The inquiry form asks for your name, company, work email, country, industry and your message. Phone, product or model, company URL and target date are optional. Without the required fields we cannot answer your inquiry. Material you send us directly by email is handled the same way. Please do not include sensitive details such as health, religion or ethnicity in your message.

02Why we use it, and on what basis

Answering your inquiry, scoping the work and preparing a contract rest on section 24(3) of Thailand's Personal Data Protection Act: steps taken at your request before entering into a contract. Keeping a record of inquiries and preventing misuse rest on the legitimate interest ground in section 24(5). Analytics cookies are used only where you consent under section 19. Cookieless visit counting, used to run and improve the site, rests on the legitimate interest ground in section 24(5). We do not send marketing email; if that changes we will ask for separate consent first.

03Cookies

Necessary cookies keep your language choice and the site secure. Google Analytics cookies load only after you accept them, and the Google Analytics script is not downloaded before that. Separately, Vercel Web Analytics counts visits per page. It sets no cookies, tells visitors apart only by an anonymous value that changes every day, and keeps nothing that identifies you, so it runs without consent. You can change or withdraw your choice at any time through the cookie settings link at the bottom of the page. We do not use advertising cookies.

04Where it is stored

Inquiries are stored in Airtable, and a notification goes to info@doosigan.com. The website runs on Vercel and our company email is Google Workspace. Access is limited to the consultant handling your inquiry and the account administrator.

05Transfers outside Thailand

Airtable is based in the United States, and Vercel and Google operate servers in several regions including the United States and Singapore. Your data therefore leaves Thailand. We hold a data processing agreement with each provider and rely on standard contractual clauses for the level of protection, which is the appropriate safeguard route under section 29 of the PDPA.

06How long we keep it

Inquiries that do not lead to an engagement are deleted two years after they arrive. For clients, regulatory records and related documents are kept for ten years after the engagement ends, because certificate renewals and variation filings require the earlier history and because the general prescription period under the Thai Civil and Commercial Code is ten years. Cookie consent records are kept for two years. After these periods data is deleted or made non-identifiable.

07Your rights

You may request access to your data and a copy of it, correction, deletion, restriction of processing, objection and portability. Where we rely on your consent you may withdraw it, and processing carried out before the withdrawal remains valid. If you believe your data has been handled improperly you may lodge a complaint with Thailand's Personal Data Protection Committee.

08How to exercise them

Write to us by email or post. We verify your identity and answer within 30 days of receiving a complete request. If we need longer we will tell you why and may extend by up to 30 days. We do not charge for handling a request. Email: info@doosigan.com Post: Doosigan Co., Ltd. 49/53, Nong Rahaeng Rd., Sam Wa Tawan Tok, Khlong Sam Wa, Bangkok 10510, Thailand

09How we protect it

Inquiries are sent over an encrypted connection and storage is limited to named staff accounts. Access rights are reviewed regularly and withdrawn as soon as someone leaves or changes role. If we conclude that personal data has been breached we notify the Personal Data Protection Committee within 72 hours, and we notify affected individuals where the risk to their rights is high.

10We do not train AI on your data

Material you send us and your project information are not used to train AI models. The regulatory research tools we use run on published regulatory sources and our own archive.

11Contact and changes

For anything about how we handle personal data, write to info@doosigan.com. When this policy changes we update the date on this page, and we announce material changes on the site. It is published in English, Korean and Thai.

Last updated 1 October 2026