Privacy Policy for Job Seekers
Privacy Policy for Job Applicants
Last Updated: November 17, 2025
Effective Date: November 17, 2025
LOPIA Thailand Co., Ltd. (hereinafter collectively referred to as "the Company") hereby establishes this Privacy Policy for job applicants (hereinafter referred to as "this Policy") in accordance with the Personal Data Protection Act, B.E. 2562 (hereinafter referred to as "PDPA"). This Policy is intended to inform job applicants and any individuals related to them (collectively referred to as "Related Individuals") about the handling of personal data collected, used, disclosed, or otherwise processed (hereinafter referred to as "Processing") by the Company, as well as about the rights of data subjects.
1. Definition
| Term | Definition |
|---|---|
| Personal Data | Data relating to an individual that can identify the person directly or indirectly.<br><br>It includes identification cards, passports, taxpayer numbers, telephone numbers, addresses, email addresses, photographs, voice recordings, and other data that can identify an individual. However, data about deceased persons is not included. |
| Sensitive Personal Data | This includes personal data such as race, ethnicity, political opinions, religious or philosophical beliefs, sexual behavior, criminal history, health data, disabilities, labor union data, genetic data, biometric data, as well as any other personal data that may affect the data subject as prescribed by the Personal Data Protection Committee. |
| Data Subject | Depending on the situation, the applicant and/or Related Individuals. |
| Policy | This Policy explains how the Company collects, uses, discloses, and manages the personal data of applicants and Related Individuals, and informs them of their rights as data subjects under the PDPA. This Policy may be revised or updated from time to time. |
| LOPIA Thailand Co., Ltd. Group Companies | Our group companies and partner corporations, both within and outside Thailand. |
| Related Individuals | Example: Referrer, Legal Guardian, Emergency Contact, etc. |
| Candidate | Individuals who have applied for any position at the Company (including direct applications, applications through recruitment channels, interns, and contractors), or individuals who have been approached by the Company. |
| Service Providers | Suppliers, business partners, cloud server providers, system maintenance providers, recruitment agencies, and legal or professional advisors, etc. |
| Personal Data Protection Act（PDPA） | "Personal Data Protection Act (PDPA) B.E.2562." This includes any regulations, orders, notifications, and guidelines issued under this Act, all of which may be amended from time to time. |
| Competent Authorities | Competent governmental authorities and agencies, including courts and arbitral tribunals. |
2. Application of this Policy
This Policy applies to applicants and Related Individuals.
If the applicant is a minor who has not reached the legal age, the applicant must inform their legal guardian (hereinafter referred to as the "Guardian") of the contents of this Policy and, if necessary, obtain the Guardian's consent to the Processing of personal data by the Company in accordance with this Policy.
The Company may verify the Guardian's consent when necessary.
3. Types of Personal Data Handled by the Company
Generally, during the recruitment and hiring process, the Company collects personal data directly from applicants through various channels, including email, telephone, the Company's platform, and job fairs. However, in certain cases, personal data may also be collected from recruitment agencies, third-party job platforms, and other publicly available sources. In connection with the recruitment and selection process, the Company may, when necessary, collect personal data about Related Individuals from applicants. The types of data collected are as follows:
| Types of Personal Data | Examples of personal data |
|---|---|
| Identification Data | Full name, age, date of birth, identification card number, passport number, gender, nationality, marital status, military service status, signature, photograph, audio recordings, video recordings, other personal data contained in copies of identification documents, biometric data such as fingerprints (if applicable), and identification data submitted through application documents or the Company's systems. |
| Contact Data | Current address, registered address, permanent address, telephone number, place of employment, and email address |
| Qualifications and Work Experience Data | Including educational background, internship history, work experience, current workplace/employer, current salary, reason for resignation, language proficiency, and personal data stated in the job application form or attached documents |
| Health Data | Medical check-up results, chronic diseases |
| Criminal Record Data | Criminal record check results |
| Usage Data | IP address, MAC address, system access logs, and other technical data related to communications |
| Related Individuals Data | Name, address, email address, telephone number, other contact information, and the relationship between the applicant and the Related Individuals |
| Other Data | Personal data such as hobbies, personality traits, and other details that applicants may provide to the Company during interviews, tests, or other parts of the recruitment process. |
Regarding a Copy of the ID Card of an Applicant with Thai Nationality
Copies of ID cards may contain sensitive personal data such as religion or blood type. The Company does not collect or process such data. Please mask (redact) the relevant fields before submission. However, this requirement does not apply when submission to a government agency or similar authority is mandatory and modifications are not permitted. If submitted without masking, the Company may perform masking on its own (in accordance with the PDPA's data minimization principle). This action will not affect the rights or interests of the data subject.
In Cases Where Additional Data Collection Is Required
In the event that it becomes necessary to collect or process personal data not specified in this Policy, the Company will provide prior notice in accordance with the requirements of the PDPA.
When Providing a Third Party's Personal Data
When an applicant provides personal data of a third party to the Company, the applicant must inform the third party of this Policy and represent and warrant that they have obtained the third party's consent or have another legitimate basis for doing so. The applicant is also requested to cooperate as necessary in fulfilling the Company's obligations regarding notification and the obtaining of consent. The Company shall not be held liable for any damages arising from an applicant's provision of a third party's personal data without the individual's consent or without a legitimate legal basis.
4. Processing of Personal Data
In general, the Company processes applicants' personal data for the following purposes:
| Purpose | Details | Legal Basis |
|---|---|---|
| To carry out various activities related to recruitment and the hiring process | We carry out various tasks related to recruitment and hiring processes, including job postings, receipt and screening of application documents, verification and evaluation of applicants' qualifications, knowledge, skills, and job suitability, conducting interviews and tests, and preparing offers for selected candidates.<br><br>Types of personal data to be processed<br><br>Identification data<br><br>Contact data<br><br>Qualifications and work experience data<br><br>Related individuals data<br><br>Other data<br><br>Types of individuals or organizations to which personal data may be disclosed<br><br>{Company Name} Each company in the Group<br><br>Service providers | To accommodate the applicant's requests prior to entering into a contract<br><br>Explicit consent (when the applicant provides personal data to the Company during the recruitment and hiring process)<br><br>Legitimate interests (for conducting recruitment-related activities not covered under pre-contractual procedures) |
| Pre-employment criminal background check and medical examination | If an applicant passes the interview or test, the Company will additionally process the applicant's health data and criminal record data for the purpose of assessing the applicant's qualifications and suitability for the position.<br><br>Types of personal data to be processed<br><br>Identification data<br><br>Contact data<br><br>Health data<br><br>Criminal record data<br><br>Types of individuals or organizations to which personal data may be disclosed<br><br>{Company Name} Each company in the Group<br><br>Service providers | Explicit consent |
| Communication | The Company handles applicants' personal data for the purposes of providing job information, coordinating interview and examination schedules, responding to inquiries, and other activities related to job applications and recruitment.<br><br>In case of an emergency, the Company may contact the applicant's related individuals.<br><br>Types of personal data to be processed<br><br>Identification data<br><br>Contact data<br><br>Related individuals data<br><br>Other data<br><br>Types of individuals or organizations to which personal data may be disclosed<br><br>{Company Name} Each company in the Group | Based on legitimate interests. |
| To comply with applicable laws and regulations | The Company may process applicants' personal data in order to comply with laws, regulations, rules, notifications, practices, or orders from courts, public authorities, or other competent authorities.<br><br>In addition, the Company may process personal data for the purpose of responding to requests from applicants to exercise their rights under the PDPA.<br><br>Types of personal data to be processed<br><br>Identification data<br><br>Contact data<br><br>Qualifications and work experience data<br><br>Health data<br><br>Criminal record data<br><br>Usage data<br><br>Related individuals data<br><br>Other data<br><br>Types of individuals or organizations to which personal data may be disclosed<br><br>{Company Name} Each company in the Group<br><br>Competent authorities | Legal obligations<br><br>Explicit consent (for the processing of sensitive personal data that cannot be based on a legal obligation) |
| For the establishment, exercise, enforcement, or defense of legal claims | Applicants' personal data may be processed for the purpose of establishing, exercising, enforcing, complying with, or defending legal claims.<br><br>Types of personal data to be processed<br><br>Identification data<br><br>Contact data<br><br>Qualifications and work experience data<br><br>Health data<br><br>Criminal record data<br><br>Usage data<br><br>Related individuals data<br><br>Other data<br><br>Types of individuals or organizations to which personal data may be disclosed<br><br>{Company Name} Each company in the Group<br><br>Competent authorities | Legal obligations (e.g., complying with court orders or orders from competent authorities regarding legal claims)<br><br>For the establishment of legal claims (involving the Processing of sensitive personal data)<br><br>Legitimate interests (such as preparing information and documents for the establishment, exercise, enforcement, or defense of legal claims, and other related activities that cannot rely on a legal obligation) |
Note
- (A) If you do not provide the personal data required for the conclusion of an employment contract, the Company may be unable to consider your application or proceed with the recruitment process.
- (B) If you do not provide the personal data necessary for compliance with laws or orders applicable to the Company, it may be deemed that either the Company or the applicant is not complying with, or is in violation of, such laws or orders. In addition, the Company may suspend certain operations to prevent non-compliance or violations of such laws or orders. This may affect the benefits and rights that applicants are entitled to, and furthermore, it may also affect rights granted after employment.
- (C) The Company installs and operates security cameras for the purposes of ensuring safety inside and outside its facilities, preventing crime, and protecting assets. Footage obtained from these cameras is processed based on legitimate interests in accordance with Section 24 of the Personal Data Protection Act (PDPA). Video data is used for the purposes of investigating accidents, crimes, or legal proceedings and is normally deleted within 30 days of the recording date. Access to the footage is restricted to authorized personnel and will not be provided to third parties except as required by law.
Applicants have the right to access and request deletion of any video recordings in which they appear. The Company reserves the right to retain such data or postpone its deletion or disposal if necessary for the execution of legal procedures or the protection of its rights. To exercise your rights or make inquiries, please contact the Company's Data Protection Officer (DPO).
- (D) In addition to the types of individuals or entities specified above as recipients of personal data, the Company may also disclose applicants' personal data to the following parties:
We may disclose such data to recipients other than those listed above in cases involving business transfers, mergers, or other transactions, or when required by applicable laws or based on the applicant's request or consent.
5. Transmission or Transfer of Personal Data Outside Thailand
The Company may disclose personal data to third parties located outside Thailand. Such third parties may include the Company's parent company, affiliates, or group companies, as well as overseas contractors or business partners involved in recruitment or human resource management.
These third parties may be located in countries that do not have personal data protection standards equivalent to those required under the PDPA. The Company will ensure that any third party receiving applicants' personal data applies appropriate personal data protection standards as required under the PDPA, and it will take necessary measures to ensure that such data is properly protected.
When transferring data to countries that have not received an adequacy decision, the Company will obtain explicit consent or implement supplementary protective measures in accordance with the guidelines of the Personal Data Protection Committee (PDPC).
6. Use of Cookies
What are cookies?
Cookies are text files that store details of internet usage history and website browsing behavior on a computer.
How are cookies used?
When recruitment is conducted online, the Company collects information about applicants' use of our platform or system through cookies or other tracking technologies, and uses cookies for various purposes as described below.
| Types of Cookies | Explanation |
|---|---|
| Essential Cookies | These cookies are essential for the proper functioning of the website. They ensure that the website operates normally and securely, allowing access to features such as logging in, signing up, and identity verification. If you do not consent to the use of these cookies, you may not be able to access or use certain functions of the platform properly. |
| Analytics Cookies | These cookies collect data about applicants' use of our website, enabling the Company to measure, evaluate, improve, and develop its platform and systems, and to enhance the user experience. If you do not consent to the use of these cookies, the Company may be unable to measure, evaluate, improve, and develop its platform and systems. |
| Functional Cookies | These cookies help remember data about the computer or electronic device used to access the platform, registration or login information, settings, and options previously selected on the platform (such as the language displayed). This eliminates the need to provide information or adjust settings each time you access the platform, making the website more convenient to use. If you do not consent to the use of these cookies, you may not be able to use the platform conveniently and efficiently. |
| Recruitment-related Cookies | These cookies are used to improve the convenience of the application process, analyze usage of the Company's platform, and maintain security. These cookies do not directly contain any personal data of applicants. |
| Cookie Policy of Third-Party Websites | Our platform may contain links to third-party platforms that may use cookies. Please review the relevant policies of those platforms before using them. Third-party cookies cannot be set on our platform. |
7. Applicants' Rights
As the owner of personal data, applicants have the following rights.
- (A) Applicant: In the event that an applicant is not selected as an employee of the Company, we may retain the applicant's personal data for up to six months after the conclusion of the recruitment process in order to consider the possibility of other suitable positions.
- (B) Right of Access and Copy Acquisition: Applicants have the right to access their personal data and obtain a copy thereof, including the right to request disclosure of the source of personal data obtained without the applicant's consent.
- (C) Right to Rectification: Applicants may request the correction, update, or supplementation of their personal data to ensure its accuracy and to prevent any misunderstanding.
- (D) Right to Erasure or Destruction: Applicants may request the deletion, destruction, or anonymization of their personal data when it is no longer necessary in light of the purposes for which it was collected.
- (E) Right to Object: Applicants have the right to object to the processing of their personal data. For example, this applies when the Company uses personal data for purposes other than those originally intended.
- (F) Right to Data Portability: Applicants may request to receive their personal data from the Company in a commonly readable or usable format through automated means. You may also request us, where technically feasible, to directly transfer your personal data in the same format to another data controller.
- (G) Right to Restrict Use: Applicants may request the Company to restrict the use of their personal data. However, such requests may be denied if the Company needs to use the personal data for compliance with laws and regulations, employment-related purposes, performance of contracts, or the protection of the Company's legal rights.
- (H) Right to Lodge a Complaint: If you believe that our handling of applicants' personal data does not comply with the PDPA (Personal Data Protection Act) or other relevant laws and regulations, you have the right to lodge a complaint with the Expert Committee, the Office of the Personal Data Protection Commission, or other relevant authorities. However, before filing a complaint, we kindly ask that you first contact us if you have any concerns, so that we can address the applicant's issue effectively and promptly.
We may decline to respond to an applicant's request if we are exempt from doing so to the extent permitted and justified under applicable laws.
To the extent permitted by applicable laws and regulations, we may charge the applicant for any reasonable costs incurred in processing the above request.
8. Inquiries
If you have any questions regarding applicants' personal data or wish to exercise your rights as a data subject, please contact us.
LOPIA Thailand Co., Ltd.
18 Phaya Thai Rd, Thung Phaya Thai, Ratchathewi, Bangkok 10400
Email: support@lopia.co.th
9. Review and Revision of This Policy
We will revise this Policy as necessary in accordance with actual processing practices and legal requirements. Any revisions will be announced on our website (https://lopia.co.th) or through other appropriate channels, with the effective date clearly indicated. For significant changes, we will provide appropriate notice and obtain prior consent when necessary.