Privacy Policy
Last updated: 17 August 2026
Smart Search Recruitment (“we”, “us”, “our”) is a recruitment consultancy based in Bangkok, Thailand. This policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over it under Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”).
Who we are
Smart Search Recruitment
Major Tower Thonglor – 12th Floor, Thonglor Soi 10 (Sukhumvit 55/10), Klongtan Nua, Wattana, Bangkok, 10110, Thailand
Telephone: +66 (0) 2-714-8088
Email: [email protected]
For the purposes of the PDPA, Smart Search Recruitment is the Data Controller of the personal data described in this policy.
The personal data we collect
If you are a candidate
- Identity and contact details — name, email address, telephone number
- Your CV or résumé and everything contained in it, including employment history, education and qualifications
- Information you provide during interviews, screening calls or correspondence with our consultants
- Details of roles you have applied for or expressed interest in, and the outcome of those applications
- References, where you have provided referee details and we have contacted them
If you are a client or prospective client
- Name, job title, employer, email address and telephone number
- Details of hiring requirements you discuss with us
- Records of our correspondence and contractual dealings
If you use the website
- Information you submit through our contact and CV upload forms
- Standard technical data collected by our analytics tools, including IP address, browser type and pages visited
Why we use it, and our lawful basis
- Matching candidates to roles and presenting them to clients — consent, and steps taken at your request prior to a contract
- Contacting you about roles that may suit you — consent
- Sending your details to a prospective employer — consent. We ask before sharing your details with any client
- Keeping records of placements and correspondence — legal obligation and legitimate interest
- Improving our website and services — legitimate interest
- Sending marketing or newsletters — consent, which you may withdraw at any time
Sensitive personal data. We do not seek sensitive personal data (such as health information, religion or criminal records) as part of the recruitment process. If a specific role genuinely requires it, we will ask for your explicit separate consent first and explain why. Please do not include sensitive personal data in your CV unless it is necessary.
Who we share it with
- Client employers, where you have consented to us presenting you for a specific role
- Our IT and infrastructure providers. This website is hosted by Hostinger and delivered through Cloudflare. We also use Google Analytics and Google Tag Manager to measure website usage, and Google reCAPTCHA to protect our forms from automated abuse. Our email and internal record-keeping systems are operated by our IT providers under confidentiality obligations.
- Professional advisers and authorities, where we are legally required to disclose
We do not sell your personal data.
Some of our service providers operate cloud infrastructure that may store or process data outside Thailand. Where that is the case we take reasonable steps to ensure your data receives a comparable standard of protection.
How long we keep it
We retain candidate records for two years from your last meaningful contact with us, after which they are deleted or anonymised. Where we have a legal obligation to keep records — for example placement and invoicing records for tax purposes — we keep those for the period the law requires. You can ask us to delete your data sooner at any time.
Your rights under the PDPA
You have the right to:
- Access the personal data we hold about you, and request a copy
- Correct anything inaccurate or incomplete
- Erase your data, or ask us to anonymise it
- Withdraw consent at any time, without affecting anything done before you withdrew it
- Object to certain processing, including direct marketing
- Restrict how we use your data while a concern is being resolved
- Data portability — receive your data in a machine-readable format
- Complain to the Personal Data Protection Committee if you believe we have handled your data unlawfully
To exercise any of these rights, email [email protected]. We will respond within 30 days, as the PDPA requires.
Security
We hold your data on access-controlled systems and limit access to consultants who need it to do their job. No transmission over the internet is completely secure, but we take reasonable technical and organisational measures to protect your information against loss, misuse and unauthorised access.
Cookies and analytics
Our website uses cookies and Google Analytics to understand how visitors use the site. You can block or delete cookies through your browser settings; doing so may affect how parts of the site work.
Changes to this policy
We may update this policy from time to time. The “last updated” date at the top will always tell you when it last changed.
Contact
Questions about this policy or about how we handle your data:
[email protected] · +66 (0) 2-714-8088
