Privacy Policy

3.1 Contact Enquiry Form

When you submit an enquiry through the contact form on our website, we collect:

• Company name
• Your full name
• Email address
• Telephone number
• Subject and message content

Purpose: To respond to your enquiry and, where relevant, provide you with a service quotation or further information about our freight and logistics services.

Legal basis: Performance of a contract or pre-contractual steps at your request (PDPA Section 24(3)). Where you contact us for general information without any service in mind, we process your data on the basis of our legitimate interest in responding to business enquiries (PDPA Section 24(5)).

Retention: We keep enquiry data for 3 years from the date of submission, which corresponds to the limitation period for contractual claims under the Thai Civil and Commercial Code. After this period, the data is permanently deleted.

3.2 Job Application Form

When you apply for a position through our Careers page, we collect the information you choose to provide, which typically includes:

• Full name
• Email address and telephone number
• Curriculum vitae (CV) or resume, which may contain your address, date of birth, photograph, educational history, employment history, and references
• Any additional information you voluntarily include in your application

Purpose: To assess your suitability for the role you have applied for and, if unsuccessful, to consider you for future vacancies if you have given your consent for us to do so.

Legal basis: Pre-contractual steps at your request (PDPA Section 24(3)). Where we retain your data beyond the recruitment process for future vacancies, we rely on your explicit consent (PDPA Section 19).

Retention: If your application is unsuccessful, we will retain your data for 1 year from the date of your application, unless you have consented to retention for a longer period for future vacancies. If your application is successful, your data is transferred to your personnel record and retained in accordance with employment law requirements. You may withdraw your consent and request deletion of your application data at any time by contacting gm@vlinkexpress.com.

Sensitive data: A CV may sometimes contain sensitive personal data such as health information, religious affiliation, or disability status. We ask that you only include information that is directly relevant to your application. Where you voluntarily include sensitive personal data, your submission constitutes explicit consent to our processing of that data for recruitment purposes only.

3.3 Website Analytics (Cookies)

When you visit our website, we use Google Analytics 4 (GA4) to collect anonymised data about how visitors use the site. This is collected automatically through cookies placed on your device. The data includes:

• Pages visited and time spent on each page
• Traffic source (e.g. how you found our website)
• Browser type, operating system, and approximate geographic location (country or city level, derived from a partially masked IP address)
• Actions taken on the website, such as clicking links or submitting forms

Purpose: To understand how visitors use our website so that we can improve its content, structure, and performance. We do not use this data to identify individual visitors.

Legal basis: Your consent (PDPA Section 19). Analytics cookies are only placed on your device after you click "Accept all" or enable analytics in the cookie preference panel on our website. You may withdraw your consent at any time through the cookie settings link.

Retention: Analytics data is retained in Google Analytics for 26 months, which is the default retention period set by Google. Raw cookie data on your device persists according to each cookie's individual expiry.

4.1 Google LLC (Analytics)

Website analytics data is processed by Google LLC under a Data Processing Agreement in its capacity as a data processor. Google operates Google Analytics 4 in accordance with its Privacy Policy (policies.google.com/privacy). IP addresses are anonymised before transmission to Google's servers. Data may be processed on servers outside Thailand, including in the United States; Google provides appropriate safeguards under its Standard Contractual Clauses.

4.2 Website and IT Service Providers

Our website hosting provider and any technical platforms used to manage form submissions may process personal data as part of their service. We ensure these providers are contractually bound to process data only on our instructions and to maintain appropriate security.

4.3 Regulatory and Legal Requirements

We may disclose personal data to Thai government authorities, courts, or law enforcement if required by law or in response to a lawful request.

4.4 No Other Sharing

We do not share enquiry or job application data with any third parties for marketing, advertising, or any other purpose not stated in this Policy.