Privacy Policy
How we collect, use, and protect your personal data
Last updated: 2 July 2026
1. Who We Are
JST Group ("JST", "we", "us") is committed to protecting your personal data. This policy explains what personal data we collect through this website, why we collect it, who we share it with, and the rights you have over it. This policy applies to www.jst-group.com and is written to meet the requirements of Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA") and, where applicable to visitors from the European Economic Area, the EU General Data Protection Regulation ("GDPR"). Data controller: JST Group, 1176 JST Towers 5th & 6th Floor, Pattanakarn Road, Suan Luang, Bangkok 10250, Thailand.
2. What Personal Data We Collect
We collect personal data you give us directly and limited data collected automatically: • Contact and enquiry forms — your name, company, email address, phone number, service of interest, and the content of your message. • Job applications and CV submissions — your name, contact details, the CV file you upload and the information it contains (such as work history, education, and qualifications), and the position you are interested in. • Hiring brief and recruitment forms — business contact details and your staffing requirements. • Usage data — when analytics cookies are active, we collect information about how you use the site, such as pages visited, time on page, device and browser type, approximate location (city level), and the site that referred you. We do not collect special categories of personal data through this website, and we ask that you do not include sensitive information (such as health or religious data) in CVs or messages unless it is strictly necessary.
3. Why We Use Your Data
We use personal data to: • respond to your enquiries and provide the services you request; • process job applications and contact you about employment opportunities; • fulfil staffing and recruitment requests from business clients; • operate, secure, and improve this website; • comply with legal obligations. Legal bases: we rely on steps taken at your request prior to entering a contract (enquiries, applications), our legitimate interests (website security and improvement, business development), your consent (analytics cookies, keeping your CV on file for future roles), and compliance with legal obligations.
4. Cookies and Analytics
This website uses Google Analytics 4 (GA4) to understand how visitors use the site so we can improve it; the data is used in aggregate and is not used to identify you personally. GA4 loads only after you give consent through our cookie banner — until you accept, no analytics cookies are set. You can accept or reject analytics when you first visit, and change or withdraw your choice at any time using the "Cookie preferences" link in the website footer. You can also control cookies through your browser settings, or opt out of Google Analytics across all websites using Google's browser add-on at https://tools.google.com/dlpage/gaoptout. Strictly necessary storage (such as remembering your language and your cookie choice) does not require consent. The cookies and local storage used on this website:
| Cookie / storage | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics | Distinguishes unique visitors | 2 years |
| _ga_JZ5FHXCFJD | Google Analytics | Maintains analytics session state | 2 years |
| jst_language | JST Group | Remembers your language preference | Local storage (device only) |
| jst_cookie_consent | JST Group | Stores your cookie consent choice | 6 months |
5. Who We Share Data With
We never sell your personal data. We share it only with: • Service providers (processors) that host our infrastructure — Supabase (database and secure file storage for form submissions and CVs), Netlify (website hosting), and Google (analytics); • Our internal recruitment and workforce management systems, used by JST staff to process applications and client requests; • Companies within the JST group where necessary to fulfil a recruitment or service request; • Public authorities where disclosure is required by law. All processors act under agreements that restrict their use of your data to providing services to us.
6. International Transfers
Our service providers may store or process data on servers located outside Thailand (for example, cloud infrastructure in Singapore, the United States, or the European Union). Where personal data is transferred internationally, we ensure the receiving party provides an adequate level of protection through contractual safeguards consistent with the PDPA and, where applicable, GDPR transfer mechanisms.
7. How Long We Keep Your Data
• Enquiries — kept for as long as needed to handle your request, and for up to 2 years afterwards for follow-up and record-keeping. • CVs and job applications — kept for up to 2 years so we can consider you for future opportunities, unless you ask us to delete them sooner. • Analytics data — retained according to Google Analytics retention settings (currently 14 months), after which it is automatically deleted. When data is no longer needed, we delete or anonymise it.
8. Your Rights
Under the PDPA (and the GDPR where it applies), you have the right to: • access a copy of the personal data we hold about you; • correct inaccurate or incomplete data; • request deletion of your data; • restrict or object to certain processing; • receive your data in a portable format; • withdraw consent at any time (this does not affect processing already carried out); • lodge a complaint with the supervisory authority — in Thailand, the Personal Data Protection Committee (PDPC), or your local data protection authority in the EEA. To exercise any of these rights, contact us using the details in Section 12. We will respond within 30 days.
9. Security
We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS) across the entire website, access-controlled storage for form submissions and CV files, and restriction of access to personal data to staff who need it to perform their role.
10. Children
This website is intended for business audiences and job seekers of legal working age. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us and we will delete it.
11. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top shows the latest revision. Material changes will be highlighted on this page.
12. Contact Us
For questions about this policy or to exercise your data protection rights: JST Group 1176 JST Towers 5th & 6th Floor, Pattanakarn Road, Suan Luang, Bangkok 10250, Thailand Email: jst@jst-group.com Phone: +66 2 022 8000