First Draft Thailand Data Protection Policy

1. Introduction
First Draft Recruitment Co., Ltd. ("we," "us," or "our") is committed to protecting the privacy and security of personal data provided by our candidates, suppliers, and website visitors. This Privacy Policy outlines how we collect, process, disclose, and protect personal data in compliance with the Thailand Personal Data Protection Act B.E. 2562 (2019) ("PDPA"). Our commitment extends to transparency in our data handling practices and ensuring compliance with regulatory obligations. We recognize the importance of maintaining the confidentiality of personal data and implement appropriate safeguards to protect it.
2. Scope of This Policy
This policy applies to all personal data collected, processed, and stored by us during our business operations. It includes personal data provided by job applicants, clients, business partners, and visitors to our website. The policy governs the collection and usage of personal data through online and offline channels. We ensure that all data processing activities comply with the principles of legality, fairness, and transparency. Additionally, this policy covers data collected through automated technologies such as cookies and analytics tools.
3. Personal Data We Collect
We collect and process various types of personal data to facilitate our recruitment services effectively. This includes personal details such as name, date of birth, and contact information, which are essential for candidate identification and communication. Additionally, employment-related data such as work experience, qualifications, and references help us assess suitability for job opportunities. Sensitive data, including health information and criminal records, is collected only with explicit consent and for lawful purposes. We ensure that the data collected is relevant, limited, and necessary for the intended purposes.
4. How We Collect Personal Data
Personal data is collected through multiple channels to support our recruitment and business operations. Direct collection occurs when candidates submit job applications, resumes, or interact with our recruitment consultants. Third-party sources, such as recruitment agencies and references, provide supplementary data to verify candidate qualifications and experience. Automated data collection methods, such as website cookies and analytics tools, help us understand user preferences and improve service delivery. We strive to ensure that the data collection process is transparent, and individuals are informed of how their data will be used.
5. Purposes of Data Processing
We process personal data to fulfill recruitment-related functions and business operations. This includes evaluating candidates for job placements, managing contracts with clients and suppliers, and complying with regulatory requirements. Data processing also supports marketing efforts, such as informing candidates about job opportunities and industry insights. Additionally, we use personal data to enhance website performance and improve user experience. Processing activities are conducted in accordance with legal requirements and organizational policies to ensure accountability.
6. Legal Basis for Processing Personal Data
Our processing activities are based on several legal grounds to ensure compliance with the PDPA. Contractual necessity allows us to collect and process personal data to fulfill obligations related to job placements and service agreements. Legal obligations require us to maintain accurate records and comply with labor laws. Legitimate interests enable us to improve our recruitment services, while explicit consent is obtained for specific processing activities such as marketing and sensitive data handling. We ensure that all processing is lawful, fair, and necessary for achieving our operational goals.
7. Disclosure of Personal Data
We may share personal data with authorized third parties to facilitate our recruitment and business operations. Clients, such as potential employers, receive candidate information to assess suitability for job openings. Service providers, including IT and background check services, support our operations by offering technical and verification assistance. We may also disclose data to regulatory authorities when legally required to fulfill compliance obligations. All data transfers are conducted under strict confidentiality agreements and within the limits of applicable laws.
8. International Data Transfers
In some cases, we may transfer personal data outside Thailand to provide recruitment services efficiently. We implement appropriate safeguards to protect data, such as standard contractual clauses and encryption techniques. Our international partners are required to comply with data protection regulations to ensure the privacy and security of transferred data. We continuously monitor and review international data transfers to mitigate any potential risks. When necessary, we seek additional guarantees to ensure data protection equivalence with Thai legal standards.
9. Data Retention
Personal data is retained for a specified period based on the nature of our business relationships and legal requirements. Candidate data is typically stored for up to 2 years to allow for future job opportunities unless a deletion request is received. Client and supplier data is retained for the duration of contractual obligations and legal compliance. After the retention period expires, data is securely deleted, anonymized, or archived in accordance with our data protection policies. We periodically review our retention practices to ensure compliance with legal and operational requirements.
10. Data Security Measures
We have implemented stringent security measures to protect personal data against unauthorized access, alteration, or destruction. Our data security protocols include encryption, firewalls, and secure access controls to ensure data confidentiality. Regular security audits and staff training programs help maintain a high level of data protection awareness. In the event of a security breach, we have an incident response plan to mitigate risks and notify affected parties promptly. We adopt industry best practices to ensure the highest level of data security at all times.
11. Your Rights Under PDPA
Under the PDPA, individuals have the right to access and control their personal data. You can request access to your data, verify its accuracy, and request corrections where necessary. The right to erasure allows you to request the deletion of your data when it is no longer needed for its original purpose. Additionally, you have the right to object to processing for marketing purposes and withdraw consent at any time. We are committed to responding to data subject requests in a timely and transparent manner.
12. Use of Cookies
We use cookies and similar tracking technologies to improve website functionality and user experience. Cookies help us analyze traffic patterns, customize content, and remember user preferences. Users have the option to manage their cookie settings through browser preferences to control data collection. Detailed information on our cookie usage is provided in our Cookie Policy available on our website. We use cookies responsibly and ensure that users are informed about their choices and rights.

13. Data Controller and Data Protection Officer’s Information
We provide recruitment services to candidates and businesses and act as a data controller under the PDPA. 

Company Name: First Draft Recruitment Co., Ltd.

Registered Address: 7/34 Ramkamhaeng 152 Ramkamhaeng Rd., Rat Pattana, Sapansoong, Bangkok 10240

Telephone: 080-950-5995

Email: rv@firstdraft.co.th

 

Our team is responsible for ensuring compliance with data protection obligations and addressing inquiries related to data privacy. We also take proactive steps to regularly review and update our data handling procedures to align with evolving legal requirements and industry standards. Compliance with PDPA principles is integral to our operations, and we ensure adherence to industry best practices for data privacy.

If you wish to exercise your Personal Data rights or if you have questions concerning the Personal Data protection policy, you can contact the Company by using the information provided above.