PDPA Notice & Data Subject Rights

1. ผู้ควบคุมข้อมูลส่วนบุคคล / Data Controller

Data controller: SendWaveHub Co., Ltd. / address: [FILL IN: registered address]

Data Protection Officer (DPO): [email protected]

2. ฐานในการประมวลผล / Lawful Bases for Processing

• Contract: to deliver the Service you signed up for (jobs, certificates, payments).
• Legal obligation: tax records, ISO/IEC 17025 traceability.
• Legitimate interest: fraud prevention, service improvement, security.
• Consent: marketing emails, optional features. Withdrawable at any time.

3. สิทธิของเจ้าของข้อมูล / Your Rights as Data Subject

You have the right to:

• Access: request a copy of your personal data.
• Rectification: correct inaccurate data.
• Erasure: delete your data, subject to legal retention requirements.
• Restriction: restrict processing in specific circumstances.
• Portability: receive your data in a machine-readable format.
• Object: object to processing based on legitimate interest or marketing.
• Withdraw consent: where processing is based on consent.
• Complaint: lodge a complaint with the PDPC (Personal Data Protection Committee).

4. วิธีใช้สิทธิ / How to Exercise Your Rights

Email your request to [email protected]. We will verify your identity and respond within 30 days as required by PDPA. There is no fee for the first request in any 12-month period.

5. การโอนข้อมูลข้ามพรมแดน / International Transfers

[FILL IN: list countries where data is processed. If using AWS/Azure regions outside Thailand, name them. Confirm adequacy decision or standard contractual clauses are in place per PDPA Section 28.]

6. การละเมิดข้อมูล / Data Breach Notification

If a breach poses a high risk to your rights, we will notify you and the PDPC within 72 hours of becoming aware, per PDPA Section 37(4).

7. ติดต่อ DPO / Contact the DPO

[email protected]
Phone: [FILL IN]