01Who we are
TMD SPACE Co., Ltd. (“we”, “us”) operates Thailand Company Docs from Thailand. We are the data controller for personal data collected through thailandcompanydocs.com and through order fulfillment. Contact TMD SPACE Co., Ltd. at ops@thailandcompanydocs.com or through the About page on thailandcompanydocs.com.
02Scope
This policy covers personal data of customers, site visitors, and people whose names or other identifiers appear in official Thai company records that we retrieve for an order. It does not cover DBD’s own processing on government websites, which is governed by DBD.
03Personal data we collect
- Identity and contact: name, email, optional organization, billing country, and optional billing address.
- Order data: package, objectives flag, intended use if you provide it, juristic person number, Thai and English names, status, and registered address shown on the confirmed record.
- Transaction data: payment status, amount, currency, and payment-provider references. Not full card numbers.
- Fulfillment data: order status, staff notes needed to complete the request, download-link events, and copies of transactional emails.
- Technical data: IP address, browser type, and basic security logs required to operate the site.
04Personal data inside official documents
Official DBD files can contain names of directors and shareholders, addresses, signatures, capital figures, and financial statements. We retrieve those files because you ordered them. We process that third-party personal data to perform the contract with you and because the records are official registry documents you asked us to obtain.
You are responsible for using those files lawfully. Do not publish a shareholder list or financial statement as an open web page. Our delivery is a controlled download, not a public directory of the file.
05Purposes and legal bases
Under the PDPA we process personal data to perform the contract (taking and fulfilling the order, sending status and download mail, issuing a reissued link), to comply with accounting and legal duties, to protect the security of the service, and, where required, on the basis of legitimate interests that do not override your rights — for example, preventing fraud or defending a payment dispute.
We do not use official document contents for advertising, lookalike audiences, or sale to data brokers.
06Processors and sharing
We share personal data only as needed to operate the service:
- Payment provider (currently Stripe) to collect and settle the service price.
- Transactional email provider to send order and download messages.
- Hosting, database, and file-storage providers (including Cloudflare infrastructure) to run the website and store files privately.
- Assigned staff and administrators of TMD SPACE Co., Ltd. who fulfill the order.
- Professional advisers, banks, or authorities where Thai law requires disclosure or where we must defend a claim.
07International transfers
Customers outside Thailand can order remotely. Payment, email, and hosting providers may process data on servers outside Thailand. Where we transfer personal data from Thailand, we do so to perform the contract with you and with appropriate contractual and security measures required by the PDPA.
08Retention
- Download links: default fourteen (14) days, then they expire. A new link can be issued after we confirm the requester.
- Official files in customer download storage: retained as needed to complete the order and any lawful reissue, then removed from customer access.
- Order, payment, and fulfillment records: retained for accounting, tax, dispute, and legal-retention periods applicable in Thailand.
- Support correspondence: retained as needed to resolve the request and for the same legal periods.
09Security
Files sit in private object storage or an equivalent locked store. Download URLs are not guessable public paths. We record who opened a delivery link. Card data stays with the payment provider. No security measure is perfect; you should treat official PDFs as confidential.
10Your rights
Subject to the PDPA and other applicable law, you may request access, correction, deletion, restriction, or a copy of your personal data, and you may object to certain processing or withdraw consent where processing was based on consent. We may refuse a request where Thai law requires us to keep the record, where another person’s rights would be harmed, or where the request is unfounded.
Send requests to ops@thailandcompanydocs.com from the checkout email and include the order number. We may need to verify your identity. You may also lodge a complaint with Thailand’s Personal Data Protection Committee or another competent authority.
11Cookies and analytics
The site uses cookies or similar storage required to run checkout, remember operational settings, and protect the service. Google Analytics measures how the public site is used. Google may set analytics cookies and receive page, device, and approximate location data. We do not send document contents or order files to Google Analytics or to advertising pixels.
12Children
The service is intended for business and professional use. We do not knowingly take orders from children. If you believe we have collected a child’s personal data, contact us and we will delete it where the law allows.
13Changes
We may update this policy. The date on this page is the effective date of the current version (2026-09-17). Material changes will be posted here before they apply to new processing.