Confidentiality Obligations

The Company and its consultants shall maintain strict confidentiality of all proprietary, operational, financial, and personnel-related information disclosed by the Client. Such obligations shall remain in force throughout the term of the Agreement and shall survive its termination for a period of five (5) years. Disclosure of such information to any third party is strictly prohibited unless expressly authorized in writing by the Client or required by law.

Compliance with PDPA

The Company shall comply with the Personal Data Protection Act B.E. 2562 (2019) and all subordinate regulations, notifications, and guidelines issued by the PDPC. In particular, the Company agrees to:

1. Collect only personal data necessary for service delivery.
2. Process personal data solely for the purposes expressly stated herein.
3. Implement appropriate technical, organizational, and administrative safeguards.
4. Respond to data subject requests within statutory timeframes.
5. Notify the Client and the PDPC of any data breach within seventy-two (72) hours of becoming aware of such breach.
6. Ensure secure destruction, anonymization, or return of personal data upon termination of services, unless retention is required by law.

Data Protection Officer – DPO

The Company has designated a qualified Data Protection Officer (DPO) to oversee compliance with this policy, monitor internal practices, and serve as the primary point of contact for any inquiries, complaints, or regulatory matters relating to personal data.

This announcement is effective immediately and serves as a mandatory guideline for Startup Advisory Service Co., Ltd. in dealing with clients, ensuring trust and transparency in all business operations.

Issued on: January 1, 2025