This policy applies to personal data you provide through the mcs.co.th website, including the contact form, job application form, and the Applicant Portal. Please read it carefully before submitting any information to us.
01 Personal Data We Collect
We collect personal data only to the extent necessary for the stated purposes, including:
a. Information from the Contact Form
- Full name and company/organization name
- Email and phone number for follow-up contact
- Message or details you provide in the form
b. Information from Job Applications (Careers / Apply)
- Personal and educational information such as name, date of birth, address, and education history
- Work history and expected salary
- Attached documents such as CV/Resume, Portfolio, and LinkedIn links
- The email used to apply, for accessing the Applicant Portal via OTP
c. Technical Information
- IP address, browser type, and system access logs
- Cookie data necessary for the website to function
02 Purpose of Data Use
We use your personal data for the following purposes:
- To respond to and follow up on business inquiries
- To assess qualifications and carry out the recruitment process
- To send confirmation emails, OTP codes, and application status notifications
- To arrange interviews and notify candidates of results
- To improve website quality and system security
- To comply with applicable laws and regulations
03 Legal Basis for Processing
We process your personal data under the following legal bases:
- Consent — when you accept this policy and submit a job application or contact form
- Performance of a contract — within the recruitment and employment process
- Legitimate interest — for system security and administration
- Legal compliance — as required by law
04 Disclosure to Third Parties
We will not sell or disclose your personal data to third parties for marketing purposes. Data may be disclosed only in the following cases:
- Service providers essential to our operations, such as Hosting (ZWH) and email (SMTP) providers, under confidentiality agreements
- Companies within MCS Group, for recruitment purposes only
- When required by law or legal order
05 Data Retention Period
| Data Type | Retention Period |
|---|---|
| Contact form data | Up to 1 year from the last contact |
| Job applications (non-selected candidates) | Up to 1 year, for consideration of future positions |
| Job applications (hired candidates) | As required by labor law |
| System log data | Up to 90 days |
Upon expiry of the retention period, data will be deleted or anonymized.
06 Data Protection Measures
We apply technical and administrative measures to protect your data:
- SSL/HTTPS encryption across the entire website
- Protection against SQL Injection and XSS attacks
- OTP authentication that expires within 10 minutes
- Access restricted to relevant authorized staff only
- Logging of every system access
07 Rights of the Data Subject
Under the PDPA, you have the following rights:
Right of Access
Request access to and a copy of your personal data
Right to Rectification
Request correction of data to be accurate and up to date
Right to Erasure
Request deletion or destruction of your personal data
Right to Object
Object to the collection or use of your data
Right to Withdraw Consent
Withdraw your consent at any time
Right to Lodge a Complaint
File a complaint with the Personal Data Protection Committee
Applicants can manage their own data, including requesting deletion, through the Applicant Portal or by contacting us via the channels below.
08 Use of Cookies
Our website uses cookies necessary for system functions, such as maintaining the Applicant Portal login session. We do not use cookies for advertising tracking. You may configure your browser to reject cookies, but this may affect some parts of the website.
09 Changes to This Policy
We may update this policy from time to time. Changes take effect once published on this page along with the latest revision date. We recommend reviewing this policy periodically.
10 Contact Us
If you have questions about this policy or wish to exercise your rights, please contact:
Data Protection Officer (DPO)
MCS Group (Thailand) Co., Ltd.
Last updated: 1 January 2026 · Version 1.0