1. Introduction
QGEN Consultant Co., Ltd. (“the Company”, “we”, “us”, “our”) places great importance on the protection of your personal data. This Privacy Policy explains how we collect, use, disclose, and protect personal data obtained from your use of the website qgen.co (“the Website”), in accordance with Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”).
We rely on the legal bases set out in Section 3 below to process your personal data. Where consent is the basis, we collect it through an explicit affirmative action — for example, by ticking a consent checkbox before submitting a form. Consents for different purposes are collected separately and are not bundled: in particular, consent to receive marketing communications is requested as a separate, optional checkbox and is never a precondition for receiving the services or content you have requested. Browsing the Website alone does not constitute consent under the PDPA.
2. Personal Data We Collect
We collect your personal data through the following channels.
2.1 Contact Form
When you submit our contact form, we collect the following information:
- Full name
- Company name
- Job title
- Email address
- Phone number
- The message you send to us
- Services or courses you are interested in
2.2 QGEN Paper Download Form
When you complete the form to download a QGEN Paper, we collect the following information:
- Full name
- Company name
- Job title
- Email address
- Phone number
2.3 Website Usage Data (Cookies and Analytics)
We may collect website usage data through analytics tools such as Google Analytics and Meta Pixel, which may include:
- IP address
- Browser type and version
- Pages you visit
- Time spent on the Website
- Source of your visit (referrer)
We will collect such data only if you provide consent through our Cookie Consent Banner.
Providing personal data through our forms is voluntary. However, if you do not provide the data we need (e.g., your name and email address), we may be unable to respond to you, answer your questions, or send the QGEN Paper you have requested.
3. Purposes for Collecting and Using Personal Data
We use your personal data for the following purposes:
| Purpose | Legal Basis |
|---|---|
| To respond to your inquiries or provide information about our services | Legitimate interest |
| To deliver QGEN Papers you have requested | Consent |
| To send you marketing communications, news, articles, or new content | Consent |
| To analyze and improve the performance of our Website (analytics cookies) | Consent |
| To operate, secure, and prevent fraud on the Website | Legitimate interest |
| To comply with applicable legal obligations | Legal obligation |
We will not use your personal data for purposes other than those stated above without first obtaining your consent.
4. Disclosure of Personal Data to Third Parties
We do not sell or disclose your personal data to third parties, except in the following cases:
4.1 Service Providers
We may disclose your data to trusted service providers that help operate our Website and services, such as IT infrastructure providers (Google Cloud Platform). These providers are obligated to maintain confidentiality and not use the data for any other purpose.
4.2 Legal Requirements
We may disclose your personal data where required by law, by a court order, or by a competent government authority.
4.3 Cross-Border Data Transfer
Some of our service providers process data on infrastructure located outside Thailand, which may include the United States, Singapore, and other countries. These include:
- Google Cloud Platform (asia-southeast1, Singapore) — hosting and database
- Google Analytics — website usage analytics (subject to your cookie consent)
- Meta Pixel — marketing analytics (subject to your cookie consent)
Where personal data is transferred to a country that has not been determined by Thailand’s Personal Data Protection Committee (PDPC) to have an adequate level of data protection, we rely on appropriate safeguards as permitted under Sections 28 and 29 of the PDPA — in particular, our service providers’ standard contractual clauses and certified data protection programs (e.g. ISO/IEC 27018 for Google Cloud).
5. Data Retention Period
We will retain your personal data for no more than 10 years from the date you submit it to us, for the following purposes:
| Data Category | Retention Period | Legal Basis |
|---|---|---|
| Data from Contact Form and Download Form | No more than 10 years | Necessary for the establishment, exercise, or defence of legal claims (general statute of limitations of 10 years under Thai law) and legitimate interests in maintaining business relationships and tracking business opportunities |
| Website usage data (Analytics, Cookies) | In accordance with Google Analytics and Meta policies | Consent |
If you withdraw your consent or do not wish to be contacted, we will immediately cease using your data for outreach or marketing purposes, even though we may still need to retain the data for the period above for legal purposes. We review the necessity of retaining personal data annually, and upon expiry of the retention period, we will delete, destroy, or anonymize the data.
6. Rights of the Data Subject
As a data subject, you have the following rights under Thailand’s Personal Data Protection Act:
| Right | Description |
|---|---|
| Right of access | You have the right to request access to the personal data we hold about you. |
| Right to rectification | You have the right to request correction of inaccurate or outdated data. |
| Right to erasure | You have the right to request deletion of your personal data. |
| Right to object | You have the right to object to the processing of your personal data in certain cases. |
| Right to restrict processing | You have the right to request that we temporarily restrict the processing of your data. |
| Right to withdraw consent | You have the right to withdraw a previously given consent at any time. |
| Right to data portability | You have the right to receive your data in a machine-readable format. |
| Right to lodge a complaint | If you believe our processing of your personal data does not comply with the PDPA, you have the right to lodge a complaint with Thailand’s Personal Data Protection Committee Office (PDPC). |
If you wish to exercise any of these rights, please contact us at info@qgen.co. We will respond to your request within 30 days from the date of receipt. You may also contact the Personal Data Protection Committee Office (PDPC) directly to lodge a complaint.
7. Data Security
We have implemented appropriate measures to protect your personal data, including:
- Encryption of data in transit using HTTPS for all communications
- Storage of data on secure infrastructure (Google Cloud Platform)
- Restriction of access to personal data to employees on a need-to-know basis
- Regular review and assessment of our security measures
However, no system is 100% secure. If you become aware that your personal data has been compromised, please notify us immediately at info@qgen.co
8. Cookies
Our Website uses cookies for the following purposes:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly necessary cookies | Enable the Website to function properly | Not required |
| Analytics cookies (Google Analytics) | Analyze how visitors use the Website | Required |
| Marketing cookies (Meta Pixel) | Tracking for advertising purposes | Required |
You may decline cookies through the Cookie Consent Banner or by adjusting your browser settings. Declining certain cookies may affect Website functionality.
9. Links to External Websites
Our Website may contain links to external websites. We do not control the privacy practices of those websites. We recommend that you review the privacy policy of any external website before providing personal data to it.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting an updated version on the Website and indicating the latest update date at the top of this page. Where a change requires fresh consent (for example, a new processing purpose), we will ask you to give that consent explicitly before proceeding.
11. Contact Us
If you have any questions, concerns, or wish to exercise your rights under the Personal Data Protection Act, please contact us at:
We will respond to your request within 30 days from the date of receipt.
