Privacy Policy

Effective Date: 1 June 2025.

CMS Lab Co Ltd (“Company”, “we”, “us”, or “our”) respects your privacy and is committed to protecting personal data in accordance with the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our services, visit our website (https://cmslab.co), or otherwise interact with us.

1. Data Controller Information

Company Name: CMS Lab Co Ltd
DBD Registration No.: 0105564031228
Address: 55/417, Chaloem Phrakiat R9 Soi 87, Prawet, Bangkok, Thailand
Email: info@cmslab.co
Website: https://cmslab.co

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identifiable Information: Full name, company name, email address, phone number, billing address.
Financial Information: Payment details required for transactions.
Technical Data: IP address, browser type, device ID, operating system, and access logs.
Usage Data: Records of interactions with our services and platform.

We do not collect sensitive personal data unless required by law and with your explicit consent.

3. Purpose of Data Collection and Use

We collect and use your data for the following purposes:

To provide and operate our services (SaaS, PaaS, IaaS).
To process payments and issue tax-compliant invoices.
To respond to inquiries and provide customer support.
To send service updates and marketing (with consent).
To comply with legal, tax, or regulatory obligations.

4. Legal Basis under PDPA

We rely on the following legal bases to process your data:

Performance of a contract: e.g., to deliver services you requested.
Legal obligation: e.g., tax reporting.
Legitimate interests: e.g., improving our services.
Consent: e.g., for marketing communications.

5. Data Retention

Your personal data will be retained only for as long as necessary for the purposes outlined above or as required by law. When no longer needed, data will be securely deleted or anonymized.

6. Data Disclosure

We may disclose personal data to:

Service providers and business partners (e.g., payment processors, hosting providers).
Government agencies or regulators (where required).
In the event of a business transfer or restructuring, to relevant stakeholders.
All third parties are contractually bound to maintain the confidentiality and security of your data.

7. International Data Transfers

If personal data is transferred outside of Thailand, we ensure appropriate safeguards are in place as required by PDPA (e.g., standard contractual clauses, binding corporate rules).

8. Data Subject Rights (Under PDPA)

You have the following rights under the PDPA:

Right to Access – Request to access your personal data.
Right to Rectify – Request correction of inaccurate or incomplete data.
Right to Erasure – Request deletion of your data (unless required for legal reasons).
Right to Restrict – Request restriction of processing.
Right to Object – Object to certain processing (e.g., direct marketing).
Right to Data Portability – Request a copy of your data in a readable format.
Right to Withdraw Consent – Withdraw previously given consent at any time.

To exercise your rights, contact us at: info@cmslab.co

9. Data Security

We use administrative, technical, and physical security measures to protect your data against loss, unauthorized access, or misuse.

10. Use of Cookies

We use cookies and similar tracking technologies for analytics, performance improvement, and session management. You may configure your browser to block cookies.

11. Updates to This Privacy Policy

We may update this policy to reflect legal or operational changes. Any updates will be posted on this page with a revised “Effective Date.”

Contact Us

CMS Lab Co Ltd
55/417, Chaloem Phrakiat R9 Soi 87,
Prawet, Bangkok, Thailand
📧 Email: info@cmslab.co
🌐 Website: https://cmslab.co