Our privacy
notice, in full.

This notice explains how personal data is used across our websites, enquiries, user accounts, sales and after-sales services, supplier relationships, projects and events, recruitment and internships, employment and internal work systems. It also covers education, assessment and travel activities provided by the responsible company.

Read this notice together with the activity notice that applies to you. The relevant notice identifies the responsible company, required data, purposes, recipients and retention arrangements. Relevant details are provided before or when data is collected. Publishing a notice or continuing to use a website does not constitute consent to every activity.

TECH Infinity International Solution Co., Ltd. (TIIS) and TECH Infinity Education Co., Ltd. are responsible for the activities whose processing they determine. TIIS operates this corporate website and its enquiry form. For other services, the application, quotation, contract or activity notice identifies the responsible legal company.

Domestic and online assessments are the responsibility of TECH Infinity Education through the Teched Assessment Testing Office (TATO). Overseas travel and assessments held overseas are the responsibility of TIIS through the Educational Innovation & Competency Development Office (EICD). These offices are units of their respective companies, not separate legal entities.

TIMS and privacy contact channels may be shared. Access is allocated by company, activity and role. A disclosure to the other company requires a defined purpose and applicable legal basis, with the information required by law provided to you.

We use information you provide, such as your name, contact details, organisation, role, service requirements, application history, transaction details and relevant documents. Account and system-use information is used where needed for the service and its security. Required fields and the consequences of not supplying them are identified in the relevant process.

Relevant data may come from schools, guardians, employers, coordinators, business partners or business information made publicly available. We assess necessity, the applicable legal basis and the duty to inform you about the source. Public availability does not permit unrestricted reuse.

Health, biometric and other sensitive data is used only for a necessary activity that meets the applicable legal conditions. General enquiry forms do not request this information. We provide specific information and seek explicit consent where the activity relies on consent.

Responding to requests, preparing proposals, purchasing, supplying products and providing activities or services uses the basis that fits the relationship. This may be steps requested before a contract, performance of a contract, or assessed legitimate interests, particularly when a contact represents a corporate customer.

Accounting, tax, employment and other statutory duties rely on the obligation applicable to the particular record. Security, internal work coordination and review use the basis appropriate to the activity, with your rights considered. We do not apply every legal basis indiscriminately to all data.

Marketing, promotional use, retention for future recruitment opportunities and other consent-based activities have separate choices identifying the company and purpose. Choices are not preselected. Declining an optional activity does not affect a core service that can proceed on another applicable basis.

Depending on your service, recipients may include authorised staff, IT, hosting, email and storage providers, payment, delivery, installation or repair providers, event organisers, trainers, advisers or authorities acting under law. Only recipients relevant to the actual activity receive the data needed for their role.

A provider acting on instructions has a different role from a recipient that determines its own processing. Agreements reflect the actual role, and recipient categories or activity-specific details are disclosed as required. An affiliation or commercial relationship does not by itself permit access to all data.

Publication of names, images, schools, work or directory profiles has a defined dataset, channel, purpose and duration. This notice does not make detailed individual scores, personnel records or internal business documents public.

Some systems or providers may store, back up or access data outside Thailand. The responsible company assesses the actual recipients, countries, onward transfers and safeguards, using a condition or mechanism recognised by Thai law. Foreign cloud use does not justify blanket consent covering every service.

For overseas programmes, the relevant notice identifies the destination and recipients before the transfer. You can request details of safeguards through the privacy contact. A signature collected on the travel date does not replace consent that was required before an earlier collection or disclosure.

Retention is set by record type and a relevant starting event, such as case closure, recruitment closure, result publication, contract completion or warranty expiry. The examination retention period does not apply to every system. Activity notices below give the relevant period or criteria.

Data that is no longer needed is deleted, destroyed or made non-identifiable. Records retained for a legal obligation or dispute are limited to what is needed, with restricted access and review. Backups follow their defined rotation and recovery purpose; deletion records must be reapplied after restoration.

Some services are available to minors. We assess age, legal capacity and a representative’s authority for the activity. Consent-based activities follow section 20, including a guardian’s consent where required. A person who has reached 20 is not treated as a minor merely under an age threshold.

Being a teacher, coordinator, telephone contact or OTP recipient does not itself establish guardianship or access to detailed records. We distinguish a coordination contact from an authorised representative.

Risk-based measures include role-based access, protection of accounts and data transmission, records of significant access and incident handling. Shared systems must enforce authorisation in the service itself, rather than relying only on hidden interface controls.

AI or automated tools used in assessment, personnel or project work require a defined purpose, identified recipients and appropriate human oversight. Providing data for a service does not authorise model training. Biometric processing and decisions with significant effects require further assessment before activation.

Subject to the applicable legal conditions, you may request access or a copy, source information, correction, erasure, restriction, objection or portability, and withdraw consent. Withdrawal affects consent-based activities without invalidating lawful processing before withdrawal. If a request is refused, we explain the reason and complaint route. You may complain to Thailand’s Office of the Personal Data Protection Committee.

Contact our privacy coordinator at privacy@th-tiis.com or 02-681-9799, or write to 25 Alma Link Building, 17th Floor, Room 10, Soi Chit Lom, Phloen Chit Road, Lumphini, Pathum Wan, Bangkok 10330, Thailand. This contact channel coordinates requests for both companies, with responsibility assigned to the relevant company.

You do not need a new account or marketing consent to make a request. Verification is proportionate to the request. Do not attach an identity-card copy or health information at first contact; restricted channels can be arranged if supporting evidence is necessary.

The published notice identifies its version, update date and effective date. Changes in purpose or consent-based activities are assessed for additional information and fresh consent where required. Visits to the website or publication of revised text are not recorded as retrospective consent.

Read the details relevant to your service. Each activity notice applies together with the general sections above.

Reference document

Personal Data Protection Act, B.E. 2562 (2019) ↗
Royal Thai Government Gazette · PDF in Thai