Privacy Policy
Last updated: [DD Month YYYY]
Attwork ("we," "us," "our," "Attwork") operates the website and platform at www.attwork.com (the "Platform"), connecting customers with tradespeople across Thailand. This Privacy Policy explains how we collect, use, share, and protect your personal data when you use the Platform, in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA").
By using the Platform, you agree to the collection and use of your data as described in this policy.
1. Who We Are
Attwork is operated by Attelier Studio Co., Ltd., registered in Thailand under company registration number 0815568001173, with a registered branch address at 90/2 Oceantown Moo 3, Tambon Ratsada, Amphur Mueang Phuket, 83000.
Data Protection Contact: Email: hello@attwork.com · Address: 90/2 Oceantown Moo 3, Tambon Ratsada, Amphur Mueang Phuket, 83000
If you have any questions, concerns, or requests regarding your personal data, please contact us using the details above.
2. What Personal Data We Collect
Depending on how you use Attwork (as a customer, a tradesperson, or a visitor), we may collect:
Contact & identity data
- Full name, phone number, email address
- National ID / passport number and copies, where required for tradesperson verification
- Trade licenses, certifications, or business registration documents (for tradespeople)
Location data
- Home or business address
- General location details (to match jobs with nearby tradespeople)
Form submission data
- Details you provide when submitting an enquiry, job request, or registration form on the Platform
- Job requirements, preferences, and history of enquiries
- Reviews, ratings, or feedback you provide
Technical data
- IP address, device type, browser type, operating system
- Cookies and similar tracking technologies (see Section 7)
- Website usage data and log files
We collect this data directly from you (when you fill out a form on the Platform) and, occasionally, from third parties (e.g. identity or license verification checks). We do not currently operate user log-in accounts — data is collected through submission forms.
3. Why We Collect Your Data (Legal Basis)
Under the PDPA, we only process personal data where we have a valid legal basis. We rely on the following:
| Purpose | Legal Basis |
|---|---|
| Processing your enquiry or job submission | Contractual necessity |
| Matching customers with tradespeople | Contractual necessity |
| Verifying tradesperson identity, licenses, and background | Legal obligation / legitimate interest (platform trust & safety) |
| Customer support | Contractual necessity |
| Sending updates related to your enquiry or submission | Contractual necessity |
| Marketing communications | Consent (you may opt out at any time) |
| Fraud prevention and platform security | Legitimate interest |
| Improving the Platform (analytics) | Legitimate interest / consent (for non-essential cookies) |
| Complying with Thai law (e.g. tax, regulatory requests) | Legal obligation |
Where we rely on your consent (e.g. marketing), you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
4. How We Use Your Data
We use the personal data described above to:
- Process and respond to your form submissions and enquiries
- Match customers with suitable tradespeople based on trade, location, and availability
- Verify tradesperson credentials and reduce fraud
- Respond to customer support requests
- Send updates related to your enquiry, job request, or submission
- Send marketing communications, only if you have opted in
- Analyze and improve Platform performance and user experience
- Comply with legal and regulatory obligations in Thailand
We do not sell your personal data to third parties for their own marketing purposes.
5. Who We Share Your Data With
We may share your personal data with:
- Other users of the Platform — e.g. a tradesperson may see a customer's job details and contact information necessary to complete a job; a customer may see a tradesperson's details and verification status.
- Identity verification providers — to verify tradesperson identity and credentials, where applicable.
- Data storage and productivity tools — such as Google Sheets/Google Workspace, which we use to record and manage form submissions.
- Website hosting and IT service providers — to host and secure the Platform.
- Analytics and communication providers — should we introduce tools such as website analytics or email/SMS delivery services in the future.
- Government or regulatory authorities — where required by Thai law, court order, or to protect the rights, safety, or property of Attwork, our users, or the public.
- Professional advisors — such as lawyers or auditors, where necessary.
All third parties who process data on our behalf are required to protect it in line with this Privacy Policy and applicable law.
Cross-Border Data Transfers
Some of the tools we use to manage submitted data — for example, Google Sheets/Google Workspace — may store or process data on servers located outside Thailand. Where this occurs, we ensure the receiving country provides an adequate level of data protection, or we put appropriate safeguards in place, as required under the PDPA.
6. How Long We Keep Your Data
We retain personal data only for as long as necessary to:
- Fulfil the purposes described in this policy,
- Meet legal, accounting, or regulatory requirements, and
- Resolve disputes and enforce our agreements.
Retention periods:
- General submission/contact data: for as long as you are an active customer or contractor engaging with Attwork, plus 3 years after that relationship ends
- Identity verification documents: for as long as the contractor or customer is actively working with us
After these periods, data is securely deleted or anonymized.
7. Cookies and Tracking Technologies
We do not currently use tracking or analytics cookies on the Platform. We may introduce cookies and similar technologies in the future — for example, to keep the Platform functioning correctly, understand how the Platform is used (analytics), or, where you consent, deliver relevant marketing.
If we introduce such tools, you will be able to manage or disable non-essential cookies through your browser settings or a cookie consent banner on the site. Disabling some cookies may affect Platform functionality. This section will be updated accordingly if and when cookies are introduced.
8. Data Security
We implement reasonable technical and organizational measures to protect your personal data, including:
- Restricting access to personal data to those who need it
- Secure storage of submitted data
- Regular review of our data handling practices
However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
9. Your Rights Under the PDPA
As a data subject under Thai law, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete or anonymize your data, in certain circumstances
- Withdraw consent at any time (where processing is based on consent)
- Object to certain processing, including for direct marketing
- Restrict processing in certain circumstances
- Data portability — request your data in a structured, commonly used format
- Lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) of Thailand if you believe your rights have been violated
To exercise any of these rights, contact us at hello@attwork.com. We will respond within the timeframe required by the PDPA.
10. Children's Data
The Platform is not intended for individuals under the age of 20, in line with the definition of a minor under Thailand's PDPA. We do not knowingly collect personal data from minors without appropriate parental or guardian consent. If we become aware that we have collected data from a minor without proper consent, we will take steps to delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes via the Platform or email, and update the "Last updated" date at the top of this page.
12. Contact Us
If you have questions about this Privacy Policy or how we handle your personal data, please contact:
Attelier Studio Co., Ltd.
Email: hello@attwork.com
Address: 90/2 Oceantown Moo 3, Tambon Ratsada, Amphur Mueang Phuket, 83000
You may also contact the Office of the Personal Data Protection Committee (PDPC), Thailand for independent guidance or to file a complaint.