SJA Inter Group Co., Ltd. (Registration No. 0105566155471), located at 290/249 Rom Klao Road, Min Buri, Min Buri, Bangkok 10510, Thailand ("Company", "we", "us") is committed to protecting the personal data of users of the SJA-HR application ("Application").
This Privacy Policy describes how we collect, use, disclose, and protect your personal information, prepared in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and applicable international standards.
2
Information We Collect
We collect the following categories of personal data to provide our services:
Data Category
Details
Personal Information
Full name, employee ID, job position, work location, nationality
Login Credentials
Username, password (encrypted), session tokens
Location Data
GPS coordinates for clock-in/clock-out verification
Photographs
Facial photos for identity verification during attendance
Device Information
Device model, operating system, FCM Token for notifications
Work Data
Attendance records, work schedules, payroll, bank account information
3
How We Use Your Information
Human resource management and employment administration
Clock-in/clock-out attendance with location and photo verification
Work scheduling and workforce planning
Payroll calculation and compensation processing
Sending work-related push notifications
Work-related document management
Compliance with labor laws and applicable regulations
4
Camera and Location Permissions
Camera — Used exclusively for capturing identity verification photos during clock-in/clock-out and photographing work-related documents
Location (GPS) — Used exclusively for recording geographic coordinates during clock-in/clock-out to verify workplace presence
Storage — Used for storing work-related photographs
This data is collected only when you actively use the relevant functions. No background data collection occurs outside of active usage.
5
Data Disclosure
We do not sell, trade, or disclose your personal data to third parties except:
With your explicit consent
To comply with legal obligations, court orders, or lawful government requests
To service providers such as Firebase Cloud Messaging (Google) for notification delivery, limited to minimum necessary data
To your assigned workplace for work schedule management
6
Data Security
Industry-standard password encryption
Encrypted communication via HTTPS protocol
Role-based access control limiting data access to authorized personnel
Secure server infrastructure for data storage
Secure session management with defined expiration periods
Regular access monitoring and audit logging
7
Your Rights
Under Thailand's PDPA, you have the following rights:
Right of Access — Request a copy of your personal data we hold
Right of Rectification — Request correction of inaccurate or incomplete data
Right of Erasure — Request deletion of your data under certain conditions
Right to Object — Object to processing of your data in certain circumstances
Right to Withdraw Consent — Withdraw previously given consent at any time
Right to Data Portability — Receive your data in a machine-readable format
Right to Lodge a Complaint — File a complaint with the relevant authority
8
Data Retention
We retain your personal data for the duration of your employment or contractual relationship with the Company, and for the period required by applicable laws following the termination of employment.
Attendance records, including photographs and GPS coordinates, are retained for an appropriate period in accordance with legal and business requirements.
9
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be communicated through the Application or other appropriate channels and will take effect immediately upon publication.
10
Contact Us
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
SJA Inter Group Co., Ltd.
290/249 Rom Klao Road, Min Buri, Min Buri, Bangkok 10510, Thailand
