Privacy Policy

Tharathong Metal Co., Ltd. (the “Company”) recognises the importance of protecting the personal data of our website visitors, customers and contacts. This policy is prepared in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA) and explains how we collect, use and disclose your personal data, as well as your rights as a data subject.

By using this website or submitting information through any form on the website, you acknowledge that you have read and understood this Privacy Policy.

We collect only the personal data necessary to provide our services, including:

• Data you provide directly via our contact, registration or quotation forms — such as your full name, company name, phone number, email address, topic of interest and message details.
• Technical data collected automatically — such as IP address, browser type, device and pages visited — used for anonymised analytics and website improvement.

We do not collect sensitive personal data through this website.

We process your personal data for the following purposes:

• To respond to your enquiries and provide the product/service information you request (based on consent and pre-contractual steps).
• To prepare quotations, coordinate orders and provide after-sales service (contractual basis).
• To improve our website and services through anonymised usage statistics (legitimate interest).
• To prevent spam and maintain system security (legitimate interest).

This website uses cookies and similar technologies in two categories:

• Strictly necessary cookies — required for core website functions such as language preference and security verification (hCaptcha). These cannot be disabled.
• Analytics cookies — help us understand aggregated, anonymised website usage in order to improve the experience.

You can manage your consent via the cookie banner shown on your first visit, and you may delete or block cookies at any time through your browser settings.

We do not sell, rent or trade your personal data to third parties for commercial purposes. Your data may be processed by service providers we use to operate this website — hosting and analytics providers, database providers and email service providers — all of which maintain internationally recognised data-protection standards and process data solely on our instructions.

We may disclose data where required by law or by order of a competent government authority.

We retain your personal data only as long as necessary for the purposes for which it was collected. Data from contact and registration forms is kept for no longer than 2 years from your last interaction, unless an ongoing business relationship exists or a longer period is required by law. After that, data is deleted, destroyed or anonymised.

We apply appropriate technical and organisational security measures — including encryption in transit (HTTPS/TLS), access controls limiting data access to authorised personnel only, and regular system reviews — to prevent unauthorised access, use, alteration or disclosure of your data.

Under the PDPA, you have the following rights, which you may exercise by contacting us via the channels in section 09. We will review and act on your request within 30 days of receipt.

If you have questions about this policy or wish to exercise your rights, please contact our data controller:

We may update this policy from time to time to reflect changes in law and practice. The latest version will always be published on this page together with its effective date. We encourage you to review it periodically.