PDPA Privacy Notice
Cotactic Media Co., Ltd.
Cotactic Media Co., Ltd. (“Company”, “we”, “us”, or “our”) recognizes the importance of protecting personal data and is committed to processing personal data in compliance with the Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) and other applicable laws.
This PDPA Privacy Notice explains how we collect, use, disclose, store, and protect personal data, as well as the rights of individuals whose personal data we process.
1. Personal Data We Collect
We may collect personal data directly from you through various channels, including:
- phone calls
- our website contact forms
- Line Official Account
- Facebook Messenger
- and other communication channels you use to contact us
Depending on the nature of your relationship with us, we may collect the following categories of personal data:
1.1 Identity and Contact Information
- full name
- company name
- job title
- email address
- phone number
- business address
- city
- country
1.2 Business and Transaction Information
- project requirements
- project budget
- advertising budget
- tax information
- billing details
- bank account details for payment or invoicing purposes
1.3 Materials You Provide to Us
- brand assets
- corporate identity materials
- articles
- photos
- documents
- feedback
- and any other information you voluntarily send to us
2. Purposes of Processing Personal Data
We may collect, use, and disclose your personal data for the following purposes:
- to respond to your inquiries and communicate with you
- to assess your business needs and propose appropriate services
- to provide our products and services
- to manage customer, supplier, partner, or prospect relationships
- to prepare quotations, agreements, invoices, and other administrative documents
- to process payments and maintain accounting and tax records
- to improve our products, services, website, and customer experience
- to send updates, marketing communications, or promotional materials, where permitted by law
- to comply with legal obligations and lawful requests from government authorities or regulators
- to establish, exercise, or defend legal claims
Where consent is required by law, we will obtain your consent before processing your personal data on that basis.
3. Legal Bases for Processing
We may process your personal data on one or more of the following legal bases, as applicable:
- consent
- performance of a contract
- compliance with legal obligations
- legitimate interests
- establishment, exercise, or defense of legal claims
- and other lawful bases permitted under the PDPA
4. Personal Data of Minors
Our services are generally not directed to individuals under 20 years of age. We do not knowingly collect personal data from minors without appropriate consent from a parent, guardian, or legal representative where required by law.
If we become aware that personal data of a minor has been collected without proper authorization, we will take appropriate steps to delete or otherwise handle such data in accordance with applicable law.
5. Disclosure of Personal Data
We do not sell your personal data.
However, we may disclose personal data to the following parties where necessary for the purposes stated in this PDPA Privacy Notice:
- our employees, personnel, or internal teams on a need-to-know basis
- service providers or vendors who assist us in operating our business, such as CRM platforms, cloud storage providers, accounting systems, payment service providers, website and marketing tools, and IT support providers
- professional advisers, such as lawyers, accountants, or auditors
- government authorities, regulators, courts, or law enforcement agencies, where required by law or lawful order
Any third party that processes personal data on our behalf will be required to implement appropriate safeguards and process the data only as permitted by law and for the purposes specified by us.
6. Data Storage and Security
We store personal data in electronic systems and, where necessary, in physical documents.
We implement appropriate technical, administrative, and organizational security measures to protect personal data against unauthorized or unlawful access, loss, destruction, alteration, disclosure, or misuse.
7. Retention Period
We retain personal data only for as long as necessary to fulfill the purposes described in this PDPA Privacy Notice, including for the duration of our relationship with you, and for any additional period required or permitted by law, such as for legal, accounting, tax, dispute resolution, or regulatory purposes.
When personal data is no longer necessary, we will delete, destroy, or anonymize it in accordance with our internal retention practices and applicable law.
8. Your Rights as a Data Subject
Subject to the PDPA and applicable legal limitations, you may have the following rights regarding your personal data:
- the right to withdraw consent
- the right to access your personal data and request a copy
- the right to request disclosure of how we obtained your personal data where you did not provide it directly
- the right to request correction of inaccurate, incomplete, or misleading data
- the right to request data portability where legally applicable
- the right to object to certain processing activities
- the right to request erasure, destruction, or anonymization of personal data in certain cases
- the right to request restriction or suspension of processing in certain cases
- the right to lodge a complaint with the relevant authority
If you wish to exercise any of these rights, you may contact us using the contact details provided below. We will consider and respond to your request within the period required by applicable law.
9. Marketing Communications
We may use your contact information to send you news, updates, marketing materials, or information about our products and services where permitted by law.
If you no longer wish to receive marketing communications from us, you may opt out at any time by clicking the unsubscribe link in our emails or by contacting us directly.
10. Cookies and Similar Technologies
Our website may use cookies and similar technologies to improve website functionality, analyze traffic, remember user preferences, and support marketing activities.
You may configure your browser settings to refuse or delete cookies. However, some website features may not function properly if cookies are disabled.
If our website uses a separate Cookie Policy or Cookie Banner, further details about the cookies we use will be provided there.
11. Cross-Border Transfer of Personal Data
Where necessary, we may transfer personal data to persons or entities located outside Thailand, including service providers that store or process data on servers located overseas.
In such cases, we will ensure that appropriate safeguards are in place and that the transfer is made in compliance with the PDPA.
12. Personal Data Breach Notification
In the event of a personal data breach, we will take appropriate steps to assess, contain, and remedy the incident.
Where required by law, we will notify the relevant authority without undue delay and, where feasible, within 72 hours after becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you without undue delay, as required by law.
13. Contact Us
If you have any questions about this PDPA Privacy Notice or wish to exercise your rights under the PDPA, please contact:
Cotactic Media Co., Ltd. (Head Office)
Address: 54 BB Building, Room 1211, 12th Floor, Soi Sukhumvit 21, Khlong Toei Nuea, Watthana, Bangkok 10110
Tax ID: 0105560043531
Tel: 02-259-2456
Email: hello[at]cotactic.com
Website: www.cotactic.com
14. Changes to this PDPA Privacy Notice
We may update this PDPA Privacy Notice from time to time to reflect changes in our practices, legal requirements, or business operations. The updated version will be posted on our website with the revised effective date.
Last updated: 31 March 2026