Privacy Policy
How we collect, use, and protect your personal data
Last updated: 2 October 2026
1. Who We Are
JST Group ("JST", "we", "us") is committed to protecting your personal data. This policy explains what personal data we collect through this website, why we collect it, who we share it with, and the rights you have over it. This policy applies to www.jst-group.com and is written to meet the requirements of Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA") and, where applicable to visitors from the European Economic Area, the EU General Data Protection Regulation ("GDPR"). Data controller: JST Group, 1176 JST Towers 5th & 6th Floor, Pattanakarn Road, Suan Luang, Bangkok 10250, Thailand.
2. What Personal Data We Collect
We collect personal data you give us directly and limited data collected automatically: • Contact and enquiry forms — your name, company, email address, phone number, service of interest, and the content of your message. • Job applications and CV submissions — your name, contact details, the CV file you upload and the information it contains (such as work history, education, and qualifications), and the position you are interested in. • Hiring brief and recruitment forms — business contact details and your staffing requirements. • Usage data — only if you accept analytics cookies, we collect information about how you use the site through Google Analytics and Microsoft Clarity, such as pages visited, time on page, clicks and scrolling, device and browser type, approximate location (city level), and the site that referred you. • Server logs — our hosting provider, Netlify, automatically records standard technical data (IP address, the page requested, and browser type) whenever a page is loaded, as needed to deliver the website, and a small cookie-free script measures page-load speed (page address, timings, browser and device type). We do not collect special categories of personal data through this website, and we ask that you do not include sensitive information (such as health or religious data) in CVs or messages unless it is strictly necessary.
3. Why We Use Your Data
We use personal data to: • respond to your enquiries and provide the services you request; • process job applications and contact you about employment opportunities; • fulfil staffing and recruitment requests from business clients; • operate, secure, and improve this website; • comply with legal obligations. Legal bases: we rely on steps taken at your request prior to entering a contract (enquiries, applications), our legitimate interests (delivering, securing, and improving the website, including server logs and cookie-free traffic and performance statistics; business development), your consent (analytics with Google Analytics and Microsoft Clarity, keeping your CV on file for future roles), and compliance with legal obligations.
4. Cookies and Analytics
This website uses Google Analytics 4 (GA4) and Microsoft Clarity to understand how visitors use the site so we can improve it. Neither loads until you accept analytics cookies in our cookie banner — before you accept, or if you reject, neither Google Analytics nor Microsoft Clarity runs, no analytics data is sent to Google or Microsoft, and no analytics cookies are set. • Google Analytics 4 measures visits, pages viewed, and actions such as form submissions and button clicks. The data is used in aggregate and is not used to identify you personally. Google Signals and Google's advertising features are not used, and analytics data is kept for 14 months. • Microsoft Clarity, a Microsoft service, shows us how visitors interact with our pages through heatmaps and session replays (linked to a random identifier, not to your name) — for example, where people click and how far they scroll. Form fields are masked, so what you type is not recorded, and our confidential Speak Up page is masked in full. Clarity sets its own cookies (_clck and _clsk) and may also set cookies on Microsoft's own domains; how Microsoft handles this data is described in the Microsoft Privacy Statement. Our hosting provider, Netlify, processes standard server logs (IP address, the page requested, and browser type) to deliver the website and to produce aggregate traffic statistics. Netlify also adds a small script to each page that measures how fast the page loads in your browser and sends Netlify the page address, page-speed timings, and your browser and device type. Neither uses cookies or sets any cookies on your device. You can accept or reject analytics when you first visit, and change or withdraw your choice at any time using the "Cookie preferences" link in the website footer. You can also control cookies through your browser settings, or opt out of Google Analytics across all websites using Google's browser add-on at https://tools.google.com/dlpage/gaoptout. Strictly necessary storage (such as remembering your language and your cookie choice) does not require consent. The cookies and local storage used on this website:
| Cookie / storage | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics | Distinguishes unique visitors | 2 years |
| _ga_JZ5FHXCFJD | Google Analytics | Maintains analytics session state | 2 years |
| _clck | Microsoft Clarity | Keeps a random Clarity ID so repeat visits are recognised | 1 year |
| _clsk | Microsoft Clarity | Links page views into a single Clarity session | 1 day |
| jst_language | JST Group | Remembers your language preference | Local storage (device only) |
| jst_cookie_consent | JST Group | Stores your cookie consent choice | 6 months |
5. Who We Share Data With
We never sell your personal data. We share it only with: • Service providers (processors) that host our infrastructure — Supabase (database and secure file storage for form submissions and CVs), Netlify (website hosting, server logs, and cookie-free traffic and performance statistics), Google (Google Analytics, only with your consent), and Microsoft (Microsoft Clarity, only with your consent); • Our internal recruitment and workforce management systems, used by JST staff to process applications and client requests; • Companies within the JST group where necessary to fulfil a recruitment or service request; • Public authorities where disclosure is required by law. All processors act under agreements that restrict their use of your data to providing services to us.
6. International Transfers
Our service providers may store or process data on servers located outside Thailand (for example, cloud infrastructure in Singapore, the United States, or the European Union). Where personal data is transferred internationally, we ensure the receiving party provides an adequate level of protection through contractual safeguards consistent with the PDPA and, where applicable, GDPR transfer mechanisms.
7. How Long We Keep Your Data
• Enquiries — kept for as long as needed to handle your request, and for up to 2 years afterwards for follow-up and record-keeping. • CVs and job applications — kept for up to 2 years so we can consider you for future opportunities, unless you ask us to delete them sooner. • Analytics data — Google Analytics data is kept for 14 months, after which it is automatically deleted. Microsoft Clarity data is retained by Microsoft in line with Clarity's standard retention periods. • Server logs — kept by Netlify for a limited period under its standard terms. When data is no longer needed, we delete or anonymise it.
8. Your Rights
Under the PDPA (and the GDPR where it applies), you have the right to: • access a copy of the personal data we hold about you; • correct inaccurate or incomplete data; • request deletion of your data; • restrict or object to certain processing; • receive your data in a portable format; • withdraw consent at any time (this does not affect processing already carried out); • lodge a complaint with the supervisory authority — in Thailand, the Personal Data Protection Committee (PDPC), or your local data protection authority in the EEA. To exercise any of these rights, contact us using the details in Section 12. We will respond within 30 days.
9. Security
We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS) across the entire website, access-controlled storage for form submissions and CV files, and restriction of access to personal data to staff who need it to perform their role.
10. Children
This website is intended for business audiences and job seekers of legal working age. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us and we will delete it.
11. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top shows the latest revision. Material changes will be highlighted on this page.
12. Contact Us
For questions about this policy or to exercise your data protection rights: JST Group 1176 JST Towers 5th & 6th Floor, Pattanakarn Road, Suan Luang, Bangkok 10250, Thailand Email: jst@jst-group.com Phone: +66 2 022 8000