1. Introduction and Data Controller
This Privacy Policy explains how CHC Chemical Co., Ltd. (“CHC Chemical”, “we”, “us”) collects, uses and protects personal data when you visit our website or submit a quotation request.
CHC Chemical Co., Ltd. is the data controller for personal data collected through this website.
- Address: 17/99 Soi Lang Wat Road, Map Ta Phut, Mueang Rayong, Rayong, Thailand
- Email: info@chcchemical.com
- Telephone: 033-650-878
- Tax ID: 0215560002737
2. Personal Data We Collect
We collect only the personal data needed to respond to your enquiry and to keep the website secure.
Quotation request form. Your name, company, position, email address, telephone number, country, the service of interest, equipment or system, site location, preferred schedule and project details. Name, company, email, service and consent are required. All other fields are optional.
Attachments. Up to three files (PDF, image, Word or Excel, maximum 10 MB each) that you choose to upload. Please do not include personal data of other individuals in attachments unless it is necessary for your request.
Consent record. Confirmation that you gave consent, the date and time of consent, the language used and the page from which the form was submitted.
Technical data. Your browser’s user agent string, and a one-way salted hash of your IP address. We do not store your IP address in plain form. Cloudflare Turnstile processes technical signals from your browser to distinguish people from automated traffic.
We do not knowingly collect personal data from persons under 20 years of age, and we do not request sensitive personal data such as health, religious, biometric or criminal record information. Please do not submit such data through the website.
3. Purposes and Legal Bases
We process personal data in accordance with the Personal Data Protection Act B.E. 2562 (2019) (“PDPA”).
| Purpose | Legal basis |
|---|---|
| Reviewing and responding to your quotation request, contacting you about it | Consent; steps taken at your request before entering into a contract |
| Preparing a quotation, proposal or contract for your organization | Steps taken at your request before entering into a contract |
| Preventing spam, abuse and automated submissions, including rate limiting | Legitimate interest in keeping our website and systems secure |
| Complying with legal obligations and establishing or defending legal claims | Legal obligation; legitimate interest |
Before submitting the form, you are asked to tick the following statement:
“I consent to CHC Chemical Co., Ltd. collecting and using the personal data provided in this form to respond to my enquiry, in accordance with the Personal Data Protection Act B.E. 2562 (2019) and the Company’s Privacy Policy.”
We cannot process a quotation request without this consent. We do not use your data for marketing without separate consent.
4. Sharing and Service Providers
We share personal data only with service providers that help us operate the website, under contractual terms that require them to protect it:
- Cloudflare, Inc. for website hosting, secure storage of form records (Cloudflare D1) and attachments (Cloudflare R2), and spam protection (Cloudflare Turnstile).
- Resend for delivering the notification email that forwards your request to our sales team.
- Google for web fonts. When a page loads, your browser requests fonts from Google servers, which receive your IP address and browser information.
Where your project is located in Vietnam or the Philippines, we may share your request with CHC Chemical (Vietnam) or our partner in the Philippines, Petroman, only to the extent needed to respond to you.
We may disclose data where required by law or by a competent authority. We do not sell or rent personal data.
5. International Transfers
Our website and data storage run on Cloudflare’s global network, and our email and font providers may process data outside Thailand. Data may therefore be transferred to or accessed from other countries, including Vietnam and the Philippines where a request is handled by our group company or partner.
When we transfer data abroad, we rely on safeguards permitted under the PDPA, such as contractual data protection commitments from our providers, or transfers necessary to take steps at your request before entering into a contract.
6. Retention
We keep quotation requests and attachments for [X] years from the date of submission (to be set by CHC Chemical), or longer if needed for an ongoing contract or legal claim. After that period, the records and files are deleted or anonymized.
The salted IP hash is used to limit submissions within a one-hour window and is kept only for a short period, no longer than 1 day.
7. Security
We apply appropriate technical and organizational measures, including:
- Encryption of data in transit (HTTPS).
- Private storage of form records and attachments, with no public access or public download links.
- Access limited to authorized CHC Chemical staff through the company’s Cloudflare account.
- Checks on file type and size, and automated spam protection.
No system is completely secure, but we review these measures regularly.
8. Your Rights
Subject to the conditions of the PDPA, you have the right to:
- access and obtain a copy of your personal data;
- request correction of inaccurate or incomplete data;
- request deletion or anonymization of your data;
- request restriction of processing;
- receive your data in a commonly used electronic format and request its transfer (data portability);
- object to processing based on legitimate interest;
- withdraw your consent at any time, without affecting processing carried out before withdrawal;
- lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.
To exercise these rights, please email info@chcchemical.com with the subject “Personal Data Request”. We may ask you to verify your identity and will respond within the period required by law.
Data Protection contact: Content pending.
9. Cookies and Similar Technologies
We use only technologies that are essential for the website to work:
- Language preference. Your selected language is saved in your browser’s local storage so that the site opens in that language on your next visit. It contains no personal data and stays on your device.
- Cloudflare Turnstile. Used on the quotation form to protect against spam. It may process technical information from your browser.
We do not currently use analytics, advertising or marketing cookies. If we introduce them, we will update this policy and ask for your consent where required.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be published on this page with its effective date.
Effective date: [date]
11. Language
This policy is available in English, Thai and Vietnamese. For users in Thailand, the Thai version prevails in the event of any inconsistency.
For users in Vietnam, Decree No. 13/2023/ND-CP on personal data protection may also apply, to the extent relevant.