Privacy notice.

Last updated: 2026

1. Data controller

Massive System & Technology Co.,Ltd.
98/264 Ratchaphreuk-Changwattana, Bangplub, Pakkret, Nonthaburi 11120, Thailand
Contact: info@masstech.co.th · +66-2-227-0571

2. Categories of personal data we collect

• Contact information — name, organisation, email address, telephone number, role — provided when you contact us by email, phone or via our enquiry channels.
• Project information — briefs, drawings, RFPs, site information and any documents you send us, which may contain personal data.
• Web technical data — server log entries (IP address, user agent, requested URL, timestamp) collected by our hosting infrastructure for security and operations.

3. Purposes for processing

• Responding to your enquiry and providing the information or proposal you requested.
• Performing pre-contractual steps (scoping, surveys, quotations) and, where you become a client, performing the contract.
• Operational record-keeping and project documentation.
• Securing our website and detecting abuse.
• Complying with applicable Thai legal obligations (tax, accounting, regulatory).

4. Legal bases (PDPA)

• Contract / pre-contract for enquiry handling and quotation.
• Legitimate interest for operational record-keeping and website security.
• Legal obligation for retention required by Thai law.
• Consent where you explicitly opt-in (e.g. submitting a form that asks for consent).

5. Recipients

Personal data is accessed by Massive employees and engineering staff who need it to respond to your enquiry or deliver the project. We do not sell personal data. Where a project requires sharing data with a manufacturer, partner or subcontractor, we do so under a written agreement and only to the extent necessary.

6. Retention

Enquiry records are retained for the period required to evaluate, quote and close the enquiry, plus a reasonable archival period. Project documentation is retained for the contract term and any period required by Thai law thereafter. Web server logs are retained for the operational period needed for security and troubleshooting.

7. International transfers

Where data is processed using cloud services or services located outside Thailand, we use providers that offer adequate technical and organisational safeguards and execute the contractual terms required by the PDPA.

8. Your rights

Subject to the PDPA, you may request access to your personal data, correction, deletion, restriction of processing, objection to processing, portability, and withdrawal of consent. Requests can be sent to info@masstech.co.th. We will respond within the timeframes the law requires.

9. Security

We apply technical and organisational measures appropriate to the risk — including access controls, encryption in transit for our web properties, role-based access to project documentation and standard endpoint protection. No transmission over the internet is fully secure; we recommend you do not send highly sensitive information via unencrypted email.

10. Cookies

This website does not set analytics or advertising cookies. Embedded third-party content (such as map embeds) may set their own cookies under their own privacy policies.

11. Updates to this notice

We may update this notice as our practices or applicable law change. Material changes will be reflected in the "last updated" date above.

12. Contact

Questions about this notice or about how we handle your personal data: info@masstech.co.th.