This notice explains what personal data the Thai Herbs Investment & Promotion Authority (THIPA) collects through this website, why we collect it, who sees it, how long we keep it, and the rights you have under Thailand's Personal Data Protection Act (PDPA).
The data controller is the Thai Herbs Investment & Promotion Authority (สมาคมส่งเสริมการลงทุนสมุนไพรไทย), Thailand. For any question about this notice, or to exercise any of the rights described below, contact us at info@thipa.co.
When you submit the membership application form we collect the organisation name, company registration number, contact name, country, email address, telephone number, membership type, sector, organisation size, and any message you write. We also record the language you used and the IP address the application came from.
We use Google Analytics. Analytics cookies are OFF until you accept them. If you decline, Google Analytics still receives a basic, cookieless record of the page view, which lets us count visits without identifying or tracking you across pages. If you accept, it also sets cookies that recognise a returning visitor.
Our hosting provider records standard server information such as IP address, browser type and time of request, which is used to keep the site available and to protect it from abuse.
Application data is used solely to assess your application and to contact you about membership. You give consent for this on the form itself. Analytics data is used to understand which parts of the site are useful and whether visitors read English or Thai, and is collected on the basis of the consent you give in the cookie banner. Technical records are kept for the security and availability of the site.
Membership applications are reviewed by the THIPA committee as part of our membership process. Beyond that, your data is handled only by the service providers that run this site on our behalf: Cloudflare, which provides the hosting, database and email routing, and Google, which provides Analytics. We do not sell your data and we do not share it for advertising.
We may disclose data where we are required to by Thai law, or to establish or defend a legal claim.
Because Cloudflare and Google operate globally, your data may be processed on servers outside Thailand.
If your application is not successful, we keep it for 12 months. That covers one full annual intake cycle, so you can be reconsidered at the next review without applying again. After that it is deleted. If you become a member, we keep your details for as long as your membership is active and for as long afterwards as we need them for THIPA's records.
Essential cookies keep the site working and are never used to track you. Analytics cookies are only set if you accept them. You can change your decision at any time using the "Cookie settings" link in the footer of any page, including withdrawing consent you previously gave.
You have the right to ask what personal data we hold about you and to receive a copy; to have inaccurate data corrected; to have your data deleted; to object to or ask us to restrict how we use it; to withdraw consent at any time; and to receive your data in a portable form. To exercise any of these, email info@thipa.co. Withdrawing consent does not affect anything we did lawfully before you withdrew it.
If you believe we have not handled your data properly, you may lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).
The site is served over HTTPS. Applications are stored in an access-controlled database, the administration area requires a login, and administrator passwords are stored only as cryptographic hashes, never in readable form.
If we change how we handle personal data we will update this page and change the date at the top.