01What we collect
The enquiry form asks for your name, company, work email, country, industry and your message. Phone, product or model, company URL and target date are optional. Without the required fields we cannot answer your enquiry. Material you send us directly by email is handled the same way. Please do not include sensitive details such as health, religion or ethnicity in your message.
02Why we use it, and on what basis
Answering your enquiry, scoping the work and preparing a contract rest on section 24(3) of Thailand's Personal Data Protection Act: steps taken at your request before entering into a contract. Keeping a record of enquiries and preventing misuse rest on the legitimate interest ground in section 24(5). Analytics cookies are used only where you consent under section 19. We do not send marketing email; if that changes we will ask for separate consent first.
03Cookies
Necessary cookies keep your language choice and the site secure. Analytics cookies load only after you accept them, and no analytics script is downloaded before that. You can change or withdraw your choice at any time through the cookie settings link at the bottom of the page. We do not use advertising cookies.
04Where it is stored
Enquiries are stored in Airtable, and a notification goes to info@doosigan.com. The website runs on Vercel and our company email is Google Workspace. Access is limited to the consultant handling your enquiry and the account administrator.
05Transfers outside Thailand
Airtable is based in the United States, and Vercel and Google operate servers in several regions including the United States and Singapore. Your data therefore leaves Thailand. We hold a data processing agreement with each provider and rely on standard contractual clauses for the level of protection, which is the appropriate safeguard route under section 29 of the PDPA.
06How long we keep it
Enquiries that do not lead to an engagement are deleted two years after they arrive. For clients, regulatory records and related documents are kept for ten years after the engagement ends, because certificate renewals and variation filings require the earlier history and because the general prescription period under the Thai Civil and Commercial Code is ten years. Cookie consent records are kept for two years. After these periods data is deleted or made non-identifiable.
07Your rights
You may request access to your data and a copy of it, correction, deletion, restriction of processing, objection and portability. Where we rely on your consent you may withdraw it, and processing carried out before the withdrawal remains valid. If you believe your data has been handled improperly you may lodge a complaint with Thailand's Personal Data Protection Committee.
08How to exercise them
Write to us by email or post. We verify your identity and answer within 30 days of receiving a complete request. If we need longer we will tell you why and may extend by up to 30 days. We do not charge for handling a request. Email: info@doosigan.com Post: Doosigan Co., Ltd. 49/53, Nong Rahaeng Rd., Sam Wa Tawan Tok, Khlong Sam Wa, Bangkok 10510, Thailand
09How we protect it
Enquiries are sent over an encrypted connection and storage is limited to named staff accounts. Access rights are reviewed regularly and withdrawn as soon as someone leaves or changes role. If we conclude that personal data has been breached we notify the Personal Data Protection Committee within 72 hours, and we notify affected individuals where the risk to their rights is high.
10We do not train AI on your data
Material you send us and your project information are not used to train AI models. The regulatory research tools we use run on published regulatory sources and our own archive.
11Contact and changes
For anything about how we handle personal data, write to info@doosigan.com. When this policy changes we update the date on this page, and we announce material changes on the site. It is published in English, Korean and Thai.
Last updated 15 September 2026