PDPA Compliance

PDPA Personal Data Protection

How iStock Express governs personal data under Thailand Personal Data Protection Act principles.

Last updated: August 28, 2026

01

1. Roles and Responsibilities

We define whether we act as a data controller or processor based on each service context.

Icon Solutions may act as a data controller for website and business contact data, and may act as a processor when customers use our systems to manage their own operational data.

  • •Define processing purposes clearly
  • •Limit data access by work responsibility
  • •Record and review activities involving personal data
02

2. Lawful Basis for Processing

We process data based on contract, consent, legitimate interest, or legal obligation where applicable.

We process personal data only where there is an appropriate lawful basis for the stated purpose.

  • •Contract: To provide services, trials, support, and account administration
  • •Consent: For marketing, analytics cookies, or activities requiring prior permission
  • •Legitimate interest: To protect security, prevent fraud, and improve services
  • •Legal obligation: To keep legal, tax, or government-required records
03

3. Security Measures

We use technical, organizational, and people-based controls to reduce personal data risk.

We protect data using security measures appropriate to the risk and nature of the information.

  • •Control user permissions and system access
  • •Use secure connections and scheduled backups
  • •Restrict access to necessary staff and service providers
  • •Review incident handling processes regularly
04

4. Data Subject Rights

Individuals can exercise PDPA rights through the personal data request channel.

Individuals may have rights under PDPA, including access, correction, deletion, restriction, objection, portability, and consent withdrawal.

We review requests, verify identity where needed, and respond within the legally required timeframe.

05

5. Cookies and Marketing

Analytics and marketing cookies are handled according to user consent and preferences.

The website may use cookies to operate services, measure usage, and support marketing communication.

You can change cookie preferences through the cookie settings tool and read more details on the Cookie Policy page.

PDPA Contact

For privacy questions or data rights requests, contact our team.

Icon Solutions Co., Ltd.

sales@iconsolutions.co.th065-423-5693

98/27 Premium Place, Pho Kaeo Road, Nuan Chan, Bueng Kum, Bangkok 10240, Thailand

Monday - Saturday 08:30 - 17:30