Effective date: 07 March 2026
Last updated: 12 March 2026
This Privacy Notice explains how INSYTE (“we”, “us”, or “our”) collects, uses, discloses, stores, and otherwise processes personal data through
insyte.co.th and related communications, in accordance with the
Personal Data Protection Act B.E. 2562 (2019) of Thailand (“PDPA”).
This Privacy Notice applies to website visitors, prospective partners, customers, suppliers, contractors, exhibition contacts, and other individuals who interact with INSYTE in connection with our business activities relating to Thailand.
1. Data ControllerINSYTE
Website:
insyte.co.thContact person:
Sergei GribanovEmail:
gs@insyte.co.th2. Personal Data We CollectDepending on how you interact with us, we may collect the following categories of personal data:
Identity and business contact data- full name
- company name
- job title
- country
- business email address
- phone number
- LINE ID or other messaging details, if voluntarily provided
Inquiry and project data- your message to us
- requested materials
- project details
- business interests
- product or partnership preferences
- records of meetings, calls, and correspondence
Technical data- IP address
- browser type
- device information
- operating system
- website activity
- cookie and analytics data
Marketing preference data- subscription status
- opt-in and opt-out records
- communication preferences
We do not intentionally collect sensitive personal data unless it is necessary and lawful to do so under applicable law. The PDPA distinguishes ordinary personal data from sensitive personal data and imposes stricter rules for the latter.
3. How We Collect Personal DataWe collect personal data:
- directly from you when you submit a form, request a catalog, ask for a consultation, subscribe to updates, meet us at an exhibition, or contact us by email or other channels;
- automatically when you use our website, through cookies and similar technologies;
- from business partners, distributors, public business sources, or event organizers where permitted by law.
4. Purposes of Processing and Legal BasesWe process personal data only for specific and legitimate purposes. Under the PDPA, personal data may be processed on consent or, in certain cases, on other lawful bases such as pre-contractual steps, contract performance, legitimate interests, or legal compliance.
4.1 To respond to your inquiriesWe use your personal data to reply to your message, arrange a call or meeting, discuss your project, and provide requested information.
Legal basis: pre-contractual steps at your request; legitimate interests.
4.2 To send requested materialsWe use your personal data to send project catalogs, solution brochures, automation scenarios, or other materials you request.
Legal basis: pre-contractual steps at your request; legitimate interests.
4.3 To manage business relationshipsWe use personal data to communicate with partners, customers, suppliers, contractors, and prospective business contacts.
Legal basis: contract performance; pre-contractual steps; legitimate interests.
4.4 To operate and improve our websiteWe use technical and usage data to maintain website functionality, security, performance, and analytics.
Legal basis: legitimate interests; legal compliance; and consent where required for non-essential cookies.
4.5 To send marketing communicationsWe may use your personal data to send product news, invitations, updates, and promotional communications.
Legal basis: consent where required by law.
4.6 To comply with legal obligations and protect legal rightsWe may process personal data to comply with legal requirements, maintain records, and establish, exercise, or defend legal claims.
Legal basis: legal compliance; legitimate interests.
5. Whether You Must Provide Personal DataWhere a form field is marked as required, the requested personal data is necessary for us to process your inquiry, send requested materials, or take steps prior to entering into a business relationship. If you do not provide required data, we may be unable to respond or provide the requested service. Thai PDPA requires notice of whether personal data is mandatory and the consequences if it is not provided.
6. Disclosure of Personal DataWe may disclose personal data to the following categories of recipients where reasonably necessary:
- group companies and affiliated entities;
- distributors, local partners, or representatives;
- website hosting, CRM, email, analytics, cloud, and IT service providers;
- legal, accounting, and other professional advisers;
- event and exhibition partners where relevant;
- competent authorities or regulators where required by law;
- prospective buyers or investors in connection with a merger, acquisition, or restructuring.
Where third parties process personal data on our behalf, we require them to process data only on our instructions and with appropriate security measures.
7. International TransfersYour personal data may be transferred to and processed in countries outside Thailand, including countries where INSYTE or its service providers operate. Where required, we will implement appropriate safeguards in accordance with applicable law.
8. Data RetentionWe retain personal data only for as long as necessary for the purposes described in this Privacy Notice, unless a longer retention period is required or permitted by law. Thai PDPA requires the retention period, or the criteria used to determine it, to be disclosed.
Typical retention periods:
- inquiry and contact form data: up to 24 months after the last meaningful interaction;
- requested material records: up to 24 months;
- marketing consent and suppression records: as long as necessary to demonstrate compliance and honor preferences;
- contractual and transaction-related records: for the duration of the relationship and thereafter as required by applicable law;
- technical logs and analytics: according to our internal retention schedule and cookie settings.
9. Your RightsSubject to the conditions and limitations under applicable law, you may have the right to:
- withdraw consent;
- request access to your personal data;
- request a copy of your personal data;
- request correction of inaccurate or incomplete data;
- object to certain processing;
- request erasure, destruction, or anonymization;
- request restriction of processing;
- request data portability where applicable;
- lodge a complaint with the relevant authority.
Thai PDPA provides data subject rights that must be disclosed in the privacy notice.
To exercise your rights, please contact:
Sergei Gribanovgs@insyte.co.thWe may need to verify your identity before processing your request.
10. Marketing CommunicationsWhere required by law, we will send marketing communications only with your consent. You may unsubscribe or withdraw consent at any time. Under the PDPA, consent requests must be clear, separate, and easy to withdraw.
You can opt out by:
- clicking the unsubscribe link in our email communications; or
- contacting us at gs@insyte.co.th.
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
11. Cookies and Similar TechnologiesOur website may use cookies and similar technologies to:
- ensure website functionality;
- remember preferences;
- analyze traffic and performance;
- improve user experience;
- support analytics and, where applicable, marketing activities.
Where required, we will request consent for non-essential cookies.
12. Security MeasuresWe implement appropriate technical and organizational measures to protect personal data against unauthorized or unlawful access, loss, alteration, disclosure, or destruction. The PDPA requires controllers to maintain appropriate security measures.
13. Personal Data BreachIf a personal data breach occurs, we will handle it in accordance with applicable law. The PDPA requires notification to the regulator without delay and, where feasible, within 72 hours after becoming aware of the breach unless the breach is unlikely to result in a risk to individuals; if the risk is high, affected individuals must also be notified without delay.
14. Children’s DataOur website and business communications are not directed to children. We do not knowingly collect personal data from children in violation of applicable law.
15. Changes to This Privacy NoticeWe may update this Privacy Notice from time to time to reflect legal, technical, or business changes. The updated version will be posted on this page with a revised “Last updated” date.
16. Contact UsIf you have questions about this Privacy Notice or wish to exercise your rights, please contact:
Sergei GribanovEmail: gs@insyte.co.th
Website: insyte.co.th