Last updated
Privacy notice
This notice explains what personal data we collect through this website, what we use it for, and what you can ask us to do with it.
- Version
- 1.0
- Effective from
- [to confirm: launch date]
- Language
- English · ไทย
Who we are
CON31 Prosper Group runs this website and decides how the personal data collected through it is used. Under Thailand’s Personal Data Protection Act B.E. 2562 (2019), the PDPA, that makes us the data controller.
- Registered name
- [to confirm: registered company name]
- Registered address
- [to confirm: registered address]
- Phone
- 064 252 8962
- Data protection officer
- [to confirm: not appointed, or their name and contact details]
What we collect
We only collect what you choose to send us, plus the technical data every website needs to run.
- Contact form
- Your name, phone number or LINE ID, the type of project, where it is, your budget range and your message.
- Join Us registration
- Your name or company name, a contact person, phone number and LINE ID, and details of your work: trades or products, the provinces you cover, crew size, years of experience, brands, delivery area, credit terms, a portfolio link and any files you upload (work photos, a catalogue or a portfolio). Each registration asks only for the fields that apply to it.
- Careers
- Your name, the role you’re interested in, your province, years of experience, phone number and LINE ID. We don’t ask for a CV on this website.
- Phone, LINE, email, Facebook and Instagram
- Whatever you send us when you contact us directly.
- Technical data
- When you open a page, our hosting provider’s servers record technical data such as your IP address, browser type and the pages requested. These server logs keep the site working and secure.
Please don’t put health information, ID card numbers or bank details in a message or an upload. We don’t need them to reply.
You don’t have to give us any of this. Without a way to reach you, though, we can’t reply to an enquiry or consider a registration.
Why we use it, and on what legal basis
The PDPA requires a legal basis for each use of personal data. These are ours.
- Replying to your enquiry and preparing a quote
- Contract: steps you asked us to take before we agree a contract.
- Reviewing a registration, and contacting you when a project needs your trade, products or skills
- Contract, for the steps you asked us to take, and legitimate interest, for keeping a list of reliable trades and suppliers on file.
- Considering you for a job
- Contract: steps you asked us to take before an employment contract.
- Keeping the website secure and working
- Legitimate interest: we need server logs to find and stop faults and attacks.
- Keeping the records the law requires, if we work together
- Legal obligation, under Thai accounting and tax law.
We don’t use your details for marketing, we don’t send newsletters, and we never sell personal data. If we ever want to send you news, we’ll ask for your consent first, separately, and you can withdraw it at any time.
Who we share it with
Only the people at CON31 who handle enquiries, registrations and projects can see your details. We also use a few service providers that process data for us under their own data processing terms.
- Vercel
- Hosts this website and processes what you send through its forms. Vercel Inc. is based in the United States.
- Resend
- Delivers form submissions to our inbox by email. Resend is based in the United States.
- Google (Gmail)
- Our email inbox, where form submissions arrive. Google stores data in several countries.
- Record keeping
- [to confirm: where enquiries and registrations are stored]
We give personal data to government authorities only when the law requires it.
LINE, Facebook and Instagram are separate services. When you message us there, their own privacy policies cover what they collect.
Transfers outside Thailand
The providers above store or process data outside Thailand, including in the United States. We rely on their data processing terms, which include standard contractual clauses, to protect these transfers. [to confirm: terms accepted in CON31’s own accounts]
When we use your details only to reply to you, sending them abroad is also part of taking the steps you asked us to take.
How long we keep it
- Enquiries that don’t lead to a project
- [to confirm: retention period]
- Registrations from trades, suppliers and partners
- [to confirm: retention period], or until you ask us to remove you.
- Careers
- [to confirm: retention period]
- Project and accounting records, if we work together
- As long as Thai accounting and tax law requires.
- Server logs
- [to confirm: hosting log retention]
After that we delete the data or make it anonymous.
How we protect it
Forms travel over an encrypted connection (HTTPS) and are checked on the server. We don’t write your details into the website’s logs, and uploaded files are checked for type and size before we accept them. Inside CON31, only the people who need your details can open them.
Your rights
Under the PDPA you can ask us to:
- show you the personal data we hold about you and give you a copy
- send it to you or to another organisation in a common format
- correct it if it’s wrong or incomplete
- delete or destroy it, or make it anonymous
- restrict how we use it
- stop using it (the right to object)
Wherever we rely on your consent, you can withdraw it at any time.
To make a request, email [to confirm: email for privacy requests] or call 064 252 8962. We reply within 30 days. Before we share or delete anything we may ask you to confirm the phone number or LINE ID you contacted us with, so we know we’re dealing with you.
If you think we’ve handled your data wrongly, you can complain to the Office of the Personal Data Protection Committee (PDPC) at pdpc.or.th. We’d like the chance to put it right first.
Changes to this notice
We update this notice whenever we add a new tool or start using personal data for a new purpose. The version and date at the top tell you which one you’re reading. Earlier versions are available on request.