Privacy & Cookie Policy
Last updated: 30 September 2026 — in compliance with the Thai Personal Data Protection Act B.E. 2562 (PDPA)
1. Data Controller
Trade Siam International Co., Ltd. (“the Company”, “we”) is the data controller under the PDPA. For any questions or to exercise your data rights, please contact our Data Protection Officer (DPO) at support@tradesiam.com or call +66 2-350-3200.
2. Personal Data We Collect
We collect only the minimum necessary data, in two categories:
- Contact form data: name, email, phone number, and your message — used solely to respond to your enquiry.
- Anonymous visit statistics (with your consent): pages visited, visit date, and a daily-changing SHA-256 hash used only to count unique visitors per day. We do not store raw IP addresses, raw User-Agent strings, names, emails, or any directly identifiable data, and the hash cannot be linked back to any individual.
We do not use Google Analytics, Facebook Pixel, or any third-party tracking tool. There are no third-party cookies on this website.
3. Cookies and Similar Technologies
| Type | Name / Purpose | Duration | Basis |
|---|---|---|---|
| Necessary | PHPSESSID — admin login session | Session | Legitimate interest |
| Necessary | nsp_theme (localStorage) — remembers light/dark theme | Persistent | Legitimate interest |
| Necessary | pdpa_cookie_consent (localStorage) — remembers your cookie choice | Persistent | Legitimate interest |
| Necessary | Language (?lang=) — remembers Thai/English choice | Per page | Legitimate interest |
| Analytics | visitor_daily (server-side) — anonymous visit statistics to improve the site | 12 months | Consent |
“Necessary” cookies operate automatically so the website can function and cannot be disabled. “Analytics” cookies/statistics operate only after you accept. If you decline, no statistics are collected and website functionality is unaffected. See our separate Cookie Policy for details.
4. Purposes and Legal Bases
- Responding to enquiries via the contact form — performance of a contract / consent.
- Analysing and improving website performance — consent (withdrawable at any time).
- Security and fraud prevention — legitimate interest.
5. Disclosure to Third Parties
We do not sell, rent, or exchange your personal data with third parties. Data may be disclosed only when required by law or court order. Hosting providers may access data to the extent necessary to provide their services under a confidentiality agreement.
6. Retention Period
- Contact form data: retained until your enquiry is resolved, and no longer than 1 year, after which it is deleted or anonymised.
- Visit statistics: retained no longer than 12 months, then deleted or aggregated into non-identifiable summary data.
7. Your Rights Under the PDPA
You have the right to: access your data; correct inaccurate data; request deletion/destruction; request suspension of processing; object to processing; request data portability; and withdraw consent. Contact our DPO using the details above — we will respond within 30 days. If your request is denied, we will explain why in writing, and you may lodge a complaint with the PDPA supervisory authority (Personal Data Protection Committee).
8. Withdrawing Consent / Cookie Settings
You may change your cookie preferences at any time by clicking the “Cookie settings” link in the footer of every page — the consent banner will reappear immediately. Alternatively, clear your browser site data. When you withdraw consent, we stop collecting analytics immediately.
9. Security
We apply technical and organisational safeguards including HTTPS transmission, access control, and periodic review. No internet transmission is 100% secure; if a security incident affecting your personal data occurs, we will notify you and the supervisory authority as required by law.
10. Changes to This Policy
Any updates will be posted on this page with the revision date. Material changes will be announced via a banner on the website.