Privacy notice

Last updated on May 20, 2025

Cloud HM Company Limited (Company) places great importance on privacy and is committed to protecting your personal data (Personal Data) in accordance with the Personal Data Protection Act B.E. 2562 (PDPA). The Company has therefore prepared this Privacy Notice to inform you of the details regarding the collection, use and/or disclosure of your personal data.

Purposes of Personal Data Processing
The Company collects, uses and discloses your personal data only when there are reasonable grounds for doing so and/or as required by law, including disclosure of personal data to third parties, for the following purposes:
1. 1.1
  To process your personal data in compliance with legal obligations under the law.
2. 1.2
  For the Company's legitimate interests under the law to process your personal data, while still considering your fundamental rights not to override the Company's interests.
3. 1.3
  For any specific purpose based on your consent given to the Company for processing your personal data.

Legal Basis for Personal Data Processing

To achieve the objectives, the Company may process your personal data under relevant laws and legal bases. The Company processes such personal data using the following legal bases:

Purpose of Collection and Processing	Legal Basis	Personal Data Collected	Data Retention Period
To implement according to Sovereign Cloud customer requirements	Contract	Name - Surname Email Phone number Company name Company address	Within 1 month after service contract termination
To manage incidents/requests according to Sovereign Cloud customer requirements	Contract	Name - Surname Email Phone number Company name Company address	Within 5 years after service contract termination
To notify system updates or emergencies of Sovereign Cloud system	Contract	Name - Surname Email Phone number Company name	90 days - 2 years retention period
To manage Sovereign Cloud customer complaints	Contract	Name - Surname Email Phone number Company name	Within 5 years after service contract termination
To coordinate procurement activities	Contract	Name - Surname Email Phone number Company name Position	Within 5 years after service contract termination
For contact coordination to allow Vendor/employees to enter Datacenter premises	Contract	Name - Surname Phone number National ID number Vehicle registration (if any)	Within 1 month after service contract termination
For inspection and troubleshooting from Vendor	Contract	Name - Surname Email Phone number Company name Company address	Within 1 month after service contract termination
For training/seminars	Consent	Name - Surname Email Phone number Company name Position	Within 1 month after termination of employment
For overseas business trips	Consent	Name - Surname Email Phone number Company name Position Passport ID Passport copy National ID copy	Within 1 month after termination of employment

Collection of Personal Data
The Company collects and uses various types of personal data. The types of personal data that the Company collects, uses and discloses are detailed as follows:
1. 3.1
  Types of Personal Data Collected, Used or Disclosed
  The types of 'Personal Data' that the Company collects, uses or discloses (collectively referred to as 'processes') under this PDPA, including related laws, are as specified in the Legal Basis for Personal Data Processing table above.
2. 3.2
  Refusal to Provide Personal Data to the Company
  In cases where the Company needs to collect your personal data and you do not provide your personal data to the Company; the Company may refuse to perform other related operations.
Disclosure of Personal Data
The Company may disclose or transfer your personal data to third parties for these parties to process your personal data as follows:
1. 4.1
  Disclosure of Personal Data to others including:
  1. Help Desk Service Company (UIH)
  2. The Data Center service provider used by the company
  3. The company organizing training/seminars
2. 4.2
  Transfer of Personal Data to Foreign Countries
  The Company may need to send or transfer your personal data to foreign countries for storage and/or processing in compliance with contracts made between you and the Company. The Company will not allow unrelated parties to access such personal data and will establish appropriate security measures.
Personal Data Retention
The Company will collect your personal data only as long as necessary to achieve the purposes of collection and processing of such data. The Company will retain your personal data for the periods specified above. The Company will delete, destroy, or anonymize personal data, or in cases of legal necessity or technical reasons, the Company may retain your personal data for longer periods.
Rights of Personal Data Subjects
You have rights regarding your personal data under personal data protection laws. The Company will respect your rights and will act in accordance with laws, rules or regulations related to processing your data under certain circumstances promptly.
You have the right to take the following actions regarding your personal data:
1. 6.1
  Right to Withdraw Consent in cases where the Company processes data
  You have the right to withdraw consent given to the Company to process your personal data at any time. However, the Company may continue to process your personal data if the Company can use other legal bases for processing your personal data.
2. 6.2
  Right to Access Personal Data
  You have the right to request copies of your personal data from the Company.
3. 6.3
  Right to Rectify Personal Data
  You have the right to request correction of your personal data to be accurate, current, and complete.
4. 6.4
  Right to Erase Personal Data
  You have the right to request the Company to delete, destroy, or anonymize your personal data when there is no reasonable cause for the Company to continue processing your personal data. You may exercise this right to request data deletion in conjunction with the right to object mentioned below. However, exercising this right must not be used to request deletion of all personal data. The Company will consider each request carefully according to the provisions of laws related to processing your personal data.
5. 6.5
  Right to Restrict Processing
  You have the right to request the Company to temporarily suspend processing of your personal data, such as when you want the Company to correct your personal data to be accurate, or when you request the Company to prove reasons or legal basis for processing your personal data.
6. 6.6
  Right to Data Portability
  In some cases, you may request the Company to send or transfer your personal data that can be commonly used in electronic format to other data controllers. This right applies only to personal data that you have provided to the Company and the processing of such personal data is based on your consent, or when such personal data is necessary for processing to fulfill contractual obligations.
7. 6.7
  Right to Lodge Complaints
  You have the right to file complaints with relevant government agencies, including the Personal Data Protection Committee, in cases where you believe that the Company, its employees, or service providers violate or fail to comply with the PDPA or other announcements issued under the authority of the PDPA.
You may exercise your above rights at any time by contacting the Company through the contact channels specified in Section 7 below.
The Company may need to request certain information from you to verify your identity and confirm your rights to access personal data (or to exercise other rights) to comply with security measures that will assure you that your personal data will not be disclosed to unauthorized persons.
The Company will make efforts to respond to all legally valid requests within 30 days. In some cases, the Company may take more than 30 days if your request is complex or you have submitted multiple requests. In such cases, the Company will notify you and will always inform you of the status of your request.
Security of Your Personal Data
The Company places utmost importance on the security of your personal data. The Company will always review and implement appropriate organizational, physical, and technical security measures in storing and processing your personal data to ensure that your personal data will not be lost, accidentally destroyed, disclosed, misused, or accessed by persons other than employees or personal data processors performing duties for the Company.
Handling Complaints or Inquiries
You may contact the Company to complain about how the Company stores, uses, processes and discloses your personal data, or to inquire about concerns through the following channels:
Data Protection Officer
Address: Cloud HM Company Limited Benchachinda Building
499 Kamphaeng Phet 6 Road, Ladyao Subdistrict, Chatuchak District, Bangkok 10900
Phone: 02-016-5500
Email: DPO@benchachinda.co.th

What are Cookies?
Cookies are small files which are downloaded to your web browsers, computer devices, internet-enabled devices, e.g. smart phone, tablet, etc. They record data and settings, e.g. your present visiting status, language setting, data related to browsing history of your preferred websites and/or applications to enable you to continuously use services that applied cookies or other similar technologies. Cookies will not harm your computer equipment and/or communication tools. Your personal data may be collected in order to enhance your online experience of our services. They will remember unique language and customize the usage information according to your requirements. The purposes of such data collection are to verify your identity, safety information including products and services of your interests. In addition, cookies are also used to measure the traffic of online services, personalization of the contents according to your previous and current usage, or for advertising and public relations purposes.
Why do we use Cookies?
We use cookies to improve your experience and satisfaction. They will allow us to quickly understand your browsing behaviors, and allow you to access our websites easier and more conveniently. In some cases, we may require a third party to make the proceeding and adopt Internet Protocol Address (IP Address) and cookies for statistical analysis as well as linking information and processing according to marketing objectives.
Types of Cookies
1. 3.1
  Strictly Necessary cookies
  This type of cookies allows you to securely and safely access and use our websites and/or applications. These cookies are stored and removed after you leave the websites and/or applications.
  Examples
2. 3.2
  Analytic/Performance cookies
  This type of cookies allows the Company to analyze or evaluate performances to enhance the Company's understanding in interests of users, e.g. process number of visitors of websites and/or applications. visiting behavior of websites and/or applications, the number of webpages you have accessed. The Company will use this data to improve the operation of the websites and/or applications to better meet your needs and enhance your visits.
  Examples
3. 3.3
  Advertising cookies
  This type of cookies would be stored in your devices to collect web browsing data and links that you have followed or visited to understand your needs as well as to improve and develop the website and promotional campaigns to suit your interests.
  Examples
4. 3.4
  Functional cookies
  This type of cookies will enable the Company to "recognize" you during your visits and set up websites and/or applications in accordance with browsing behaviors to meet your preferences to facilitate you on next visit to the websites and/or applications e.g. recognition of your username, font size adjustment, languages and other parts on webpages of the websites and/or applications. However, the processed data shall be anonymous or cannot identify users’ identities. Moreover, personal information such as name, email, etc. will not be collected.
  Examples
Cookies settings and refusals
You may choose to refuse all or some types of cookies depending on your preferences by setting your browsers and/or your privacy setting to suspend data collection by cookies in the future. However, if you set your browser or privacy setting to refuse all cookies, you may not be able to use some or all functions of the website and/or application efficiently. You may learn more details fromwww.allaboutcookies.org
Change of the Policy
This Cookies Policy may be amended or changed as deemed appropriate to comply with regulations. The Company recommends you to review the amended policy in order to understand such changes. Please find more information on collection, use and disclosure of your personal data, rights including details on data controller from the privacy notice on the Company's websites.
You can manage cookies in your browser by conduct settings according to following steps: