Privacy Policy
Effective Date: 20 October 2021Â Â Â Â Â Â Â Â Â Â Â Last Updated: 23 September 2026
1. Who we are and what this policy covers
Hyperwork ("Hyperwork," "we," "us," or "our") is a recruitment and staffing agency based in Bangkok, Thailand, registered with the Department of Business Development. This policy explains how we collect, use, disclose, and protect personal data through hyperworkrecruitment.com and in the course of providing our recruitment, outsourced staffing, and executive search services, in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA"). Where we handle personal data of individuals located in the European Economic Area, we also apply the relevant standards of the General Data Protection Regulation ("GDPR").
2. Information we collect
a. From candidates. We collect the information you provide when you apply for a role, submit your CV, create a profile, or are referred to us, which typically includes your name, contact details, date of birth, nationality, photograph (where included in your CV, as is common practice in Thailand), education and work history, salary expectations, language and other skills, and any information you choose to share during interviews or reference checks. Some CVs submitted to us may include details that Thai and international law treat as sensitive, such as religion or health information; we only process such details where you have provided them voluntarily as part of your application and treat them with additional care as described in Section 5.
b. From clients. We collect the business contact details, hiring requirements, and organizational information you or your representatives provide to us in order for us to source and present suitable candidates, negotiate terms, and deliver our services.
c. From website visitors. We collect standard technical information such as IP address, browser type, and pages visited, along with any information you submit through contact or enquiry forms on our site.
d. From third parties. Where relevant, we may collect candidate information from professional networking platforms such as LinkedIn, from referrals made by existing candidates or clients, or from publicly available professional profiles, in each case only where doing so is consistent with the source platform's terms and with your reasonable expectations as a jobseeker.
3. Why we use your information and our legal basis
a. For candidates, we use your information to assess your suitability for roles, match you with relevant opportunities, share your profile with prospective employers with your knowledge, conduct reference checks where agreed, and maintain your profile on file for future opportunities. Our basis for this processing is primarily your consent, given at the point of application, and, once we begin acting on your behalf for a specific role, the performance of our services to you.
b. For clients, we use your information to deliver recruitment and staffing services under our engagement with you, which we do on the basis of contractual necessity and our legitimate interest in operating and growing our business.
c. For website visitors, we use technical and form data to operate the site, respond to enquiries, and, where cookies are used for analytics, to understand and improve how the site performs.
4. How we share your information
a. With prospective employers. A candidate's profile and CV are shared with client companies considering them for a role. We do not share candidate information with employers beyond the purpose of that specific application or opportunity without further consent.
b. Cross-border transfers. Because Hyperwork places candidates with clients located outside Thailand, including in Singapore, Malaysia, and the other countries, your information may be transferred to and processed in those jurisdictions. Under the PDPA, we only make such transfers where the receiving country or organization maintains adequate data protection standards, where you have given explicit consent to the transfer, or where the transfer is necessary for the performance of a contract to which you are a party, such as your job application to a role based in that country.
c. With service providers. We may share information with third parties who support our operations, such as website hosting, document storage, or communications tools, under obligations that limit their use of your data to the purposes we specify.
d. Other disclosures. We may disclose information where required by law, to establish or defend legal claims, or in connection with a business transfer such as a merger or acquisition.
5. Sensitive data
Where a CV or application you submit includes information that PDPA or GDPR classifies as sensitive, such as religion, health status, or similar details, we treat this as voluntarily disclosed by you and process it only for the purpose of your application, with your explicit consent implied by its submission. We do not request such information and recommend omitting it from your CV if you would prefer it not be processed.
6. How long we keep your information
We retain candidate profiles and CVs for as long as you remain an active or potential candidate for placement, which in practice means we may keep your details on file to consider you for future opportunities unless you ask us to remove them. Client information is retained for the duration of our engagement and for a reasonable period afterward to meet our legal, accounting, and contractual obligations. You may request deletion at any time as described in Section 7, subject to any retention we are legally required to maintain.
7. Your rights
Under the PDPA, you have the right to access the personal data we hold about you, request correction of inaccurate data, withdraw consent where our processing relies on it, request deletion or restriction of your data, object to certain processing, and request that we transfer your data to another party where technically feasible. If you are located in the EEA, GDPR provides equivalent rights.Â
8. Security
We apply reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or misuse, including access controls on our systems and confidentiality obligations on our staff. No system is completely secure, and we encourage you to contact us promptly if you believe your data has been compromised.
9. Cookies
Our website uses cookies and similar technologies to operate core functionality and, where enabled, to understand site usage through analytics tools. You can control cookies through your browser settings; disabling them may affect parts of the site's functionality.
10. Contact Us
If you have questions about this policy or wish to exercise your rights over your personal data, contact us at contact@hyperworkth.com