Privacy Policy
Version dated 1 August 2026 ·
Important notice — please read first
This document was written from an audit of what this website's systems actually do, but it has NOT yet been reviewed by legal counsel. Where anything here conflicts with the Personal Data Protection Act B.E. 2562 (2019) or any other Thai law, the law prevails. If you believe any statement here is inaccurate, or you wish to object, exercise your rights, or complain, please contact info@capsolar.co.th and we will investigate and respond.
1. Data controller
We act as the Data Controller for personal data collected through this website.
2. Scope
This policy covers the websites capsolar.co.th and capsolar.homes, including every online form on them. It does not cover offline dealings (in-person meetings, signed contracts) or third-party websites we link out to.
3. Personal data we collect
3.1 Career application form (Careers page)
When you submit an application, we receive the following — this is the complete list of what the form sends to our server:
- Full name (required)
- Email address (required)
- Phone number (required)
- Area of interest and years of experience (required)
- Your CV/resume as a PDF, up to 5 MB (required) — this file may contain further personal data that you choose to include, such as your address, education and employment history, or a photograph
- LinkedIn or portfolio URL (optional)
- Cover message (optional)
- Your PDPA consent, recorded as a true/false value
- The language you were browsing in, and the URL of the page you submitted from
3.2 Contact / enquiry form (Contact page and homepage)
- Contact name and company name
- Email address (required) and phone number
- Service of interest, business sector, whether you have an AMR meter, roof area, and approximate monthly electricity bill
- The message you type
- The URL of the page you submitted from
3.3 Data collected automatically
- Your IP address — used to count how many form submissions come from one address within a one-hour window, so we can block spam. It is held only in the web server's working memory, is never written to our database, is not included in notification emails, and is lost when the service restarts.
- Web server access logs, which by default record IP address, timestamp, requested URL, browser type, and referring page.
- Usage data via Google Analytics 4: pages viewed, time on page, device and browser type, and approximate city-level location that Google derives from your IP address.
3.4 What we do NOT collect
Every calculator on this site (electricity bill calculator, TOU comparator, air-conditioner cost calculator, rental electricity checker, and the rest) runs entirely inside your browser. The figures you enter are never sent to our server, never written to a database, and are not retained on your device after you close the page. General page-visit analytics as described in 3.3 still applies.
We do not collect credit card details, payment information, or national ID numbers through this website, and there is no visitor account or password system.
4. Purposes and lawful bases
We do not use your personal data for automated decision-making that produces legal effects concerning you, and we will not use it for any new purpose without telling you first.
5. Disclosure and recipients
Your data may be disclosed only to the following:
- CapSolar personnel involved in recruitment or commercial follow-up, who receive it through company email.
- Google LLC — as our website analytics provider (Google Analytics 4) and as the email delivery service this site uses to send notification and acknowledgement emails.
- Amazon Web Services — as the hosting provider for our website and database (Bangkok region data centre).
- Government authorities or other bodies where we are legally required to disclose.
We do not sell your personal data, and we do not rent or trade it to third parties for their own marketing.
Using Google's services may involve processing outside Thailand. Google's privacy policy is at policies.google.com/privacy
6. Storage and retention
We state the actual position as at the date of this document, rather than promise something the system does not yet do:
- Job applications and uploaded CV files are stored on our server and content management system, and a copy of the same information appears in company email inboxes.
- Contact-form submissions are stored the same way.
- There is currently no automated deletion after a fixed period. Data is kept until it is no longer needed for the purpose it was collected for, or until you ask us to delete it.
- Defining a concrete retention schedule and implementing automated deletion is in progress with legal counsel and will be reflected in the next version of this policy.
7. Security measures
Measures actually in place today:
- All traffic on this website is encrypted with HTTPS/TLS.
- Access to the content management system requires an administrator account, and programmatic access requires a dedicated API token.
- Form submissions are rate-limited per IP address, and an automated bot trap is in place.
- Uploaded files are checked for type and size — PDF only, maximum 5 MB.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a personal data breach occurs that poses a risk to your rights and freedoms, we will notify the Office of the Personal Data Protection Committee and, where required, you, as the law prescribes.
8. Your rights as a data subject
Under Thailand's PDPA B.E. 2562 (2019) you have the right to:
- Access your personal data and obtain a copy of it
- Have inaccurate, out-of-date, or misleading data corrected
- Request erasure or destruction of your data, or that it be anonymised
- Request restriction of the use of your data
- Object to the collection, use, or disclosure of your data
- Request data portability to another controller in a machine-readable form, so far as our systems allow
- Withdraw your consent at any time, without affecting processing lawfully carried out before the withdrawal
- Lodge a complaint with the supervisory authority
To exercise a right, email info@capsolar.co.th stating which right you wish to exercise and enough detail for us to find your record (for example the name and email address you used on the form). We will act within 30 days of receiving your request, as required by law, and there is no charge for an ordinary request.
We may ask you to verify your identity before we act, so that we do not disclose your data to someone else.
10. Third-party links and services
This site links out to services such as LINE, WhatsApp, LinkedIn, Facebook, YouTube, and government or media sources. When you follow those links you leave our website, and any collection of your data there is governed by that provider's own policy, outside our control.
11. Minors
Our website and services are aimed at businesses, organisations, and adults. We do not intend to collect personal data from minors. If you are a parent or guardian and believe a child has given us personal data, please contact info@capsolar.co.th and we will delete it.
12. Sections pending legal review
For transparency we state plainly which items are not yet settled in this document. We have chosen to leave them open rather than write text that might not match what we actually do:
13. Changes to this policy
We may update this policy as our systems or the law change. The version date is always shown at the top of this page. Where a change materially affects your rights, we will say so on the website.
14. Contact and complaints
If you are not satisfied with how we handle your request, you have the right to complain to the Office of the Personal Data Protection Committee (PDPC): www.pdpc.or.th
The Thai version of this policy is the authoritative one. The English and Chinese versions are provided for convenience only.