Legal

Privacy Policy

Last updated: 13 March 2026

1. Who we are

This Privacy Policy describes how The Checklist Co. Ltd. ("we", "us", "our") collects, uses and protects personal data when you visit our website thelistyouneed.com or contact us through our forms.

The Checklist Co. Ltd. is incorporated in Thailand and acts as the data controller for the personal data collected through this website.

  • Company name: The Checklist Co. Ltd.
  • Address: 81/1 room 503 Floor 5 Soi 2 Sukhumvit Road Klongtoei Bangkok 10110 Thailand
  • Country of incorporation: Thailand
  • Tax ID: 0105568060109
  • Contact email for privacy matters: b3nz@thelistyouneed.com

2. Personal data we collect

We only collect personal data that you choose to provide to us through our website forms and the data generated by your use of our website.

Data you provide directly

When you submit a form on our website, we may collect:

  • Name
  • Email address
  • Phone number
  • Company name
  • Company website

We do not intentionally collect sensitive personal data (such as health information, religious beliefs, biometric data, or criminal records) and we do not knowingly collect data of minors under 20 years old.

Data collected automatically

When you visit our website, certain technical and usage information may be collected automatically, such as:

  • IP address
  • Browser type and version
  • Device information
  • Pages visited, time and date of visit, time spent on pages
  • Referring website or advertising source

This information may be collected through cookies and similar technologies using tools such as Google Analytics 4, Google Ads tags and Meta Pixel.

3. How we use personal data

We use your personal data only for the following purposes:

  • To respond to your enquiries and contact requests
  • To communicate with you regarding the services you requested from us
  • To operate, maintain and improve our website
  • To measure and understand the performance of our marketing and advertising campaigns
  • To run and optimize advertising, including retargeting people who have visited our website
  • To comply with legal obligations and protect our rights

We do not use your data to send bulk marketing emails or newsletters. We only contact you individually in relation to your specific enquiry or ongoing communications with you.

4. Legal bases under Thai PDPA

We process personal data in accordance with the Personal Data Protection Act B.E. 2562 (2019) ("PDPA") and its implementing regulations.

Depending on the context, we rely on the following legal bases:

  • Contractual necessity and pre‑contractual steps: when we process your data to respond to your enquiry or to discuss and provide our services to you.
  • Legitimate interests: when we process technical and usage data to maintain the security of our website, understand how visitors use our site and improve our services, where these interests are not overridden by your rights and freedoms.
  • Consent: where required under PDPA for certain cookies or tracking technologies used for analytics and advertising. You can manage your cookie preferences through the cookie banner (as implemented) and the settings in your browser.

If we rely on consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

5. Cookies and tracking technologies

We use cookies and similar technologies on our website for the following purposes:

  • Strictly necessary cookies: to enable core site functions and security. These are usually set to respond to actions made by you, such as filling out forms or setting preferences.
  • Analytics cookies: to understand how visitors use our website, for example which pages are viewed and how long visitors stay on them (e.g. via Google Analytics 4).
  • Advertising and retargeting cookies: to measure the effectiveness of our ads and to show relevant advertisements to people who have visited our website (e.g. via Google Ads and Meta Pixel).

When you first visit our website, a cookie consent banner will appear, allowing you to accept or reject analytics and advertising cookies. You can change your preferences at any time by clicking the "Cookie Settings" button at the bottom of any page or via the link in the footer. You can also control cookies by adjusting your browser settings to refuse or delete cookies.

You can also manage how Google and Meta use your data for advertising through their own settings pages and tools.

6. How we share personal data

We do not sell your personal data. We may share your personal data only with the following categories of recipients:

  • Service providers and technical partners, such as:
    • Website hosting and content delivery services (e.g. Cloudflare)
    • Analytics and advertising providers (e.g. Google Analytics, Google Ads, Meta Platforms)

These service providers act as processors or independent controllers and process personal data only on our instructions or in line with their own privacy terms, as applicable.

We may also share personal data where required by law, to comply with legal obligations, to respond to lawful requests from public authorities, or to protect our rights, privacy, safety or property.

7. International transfers

Although we focus on the Thai market, our service providers and technical partners may store or process your personal data on servers located outside Thailand (for example in the European Union, the United States or other regions).

Where required by PDPA, we will take appropriate measures to ensure that such transfers provide adequate protection, such as using service providers that implement suitable security measures and contractual safeguards.

8. Data retention

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy or as required by applicable law.

In general, we apply the following retention periods:

  • Contact and enquiry data: up to 10 years from our last meaningful interaction with you, to maintain records of our business relationship and comply with legal obligations.
  • Technical and analytics data: in line with the default or configured retention periods of each analytics or advertising tool we use, and not longer than necessary for the purposes described above.
  • Legal and administrative records: for as long as required under applicable Thai laws and regulations.

When personal data is no longer needed, we will delete or anonymize it.

9. How we protect personal data

We take reasonable technical and organizational measures to protect personal data against loss, misuse and unauthorized access, disclosure, alteration or destruction. These measures include:

  • Use of HTTPS encryption for data transmitted between your browser and our website
  • Limiting access to personal data to individuals who need it for legitimate business purposes
  • Using reputable service providers with appropriate security practices

However, no method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.

10. Your rights under PDPA

Under the Thai PDPA, and subject to certain conditions and exceptions, you may have the following rights regarding your personal data:

  • Right to access: to request confirmation whether we process your personal data and to obtain a copy of such data.
  • Right to rectification: to request correction of inaccurate or incomplete personal data.
  • Right to erasure: to request deletion or anonymization of your personal data where there is no lawful reason for us to continue processing it.
  • Right to restriction of processing: to request that we limit the processing of your personal data in certain circumstances.
  • Right to data portability: to request that we provide your personal data in a structured, commonly used and machine‑readable format, where applicable.
  • Right to object: to object to certain processing activities, particularly where we rely on legitimate interests.
  • Right to withdraw consent: where processing is based on your consent, you can withdraw that consent at any time.
  • Right to lodge a complaint: to submit a complaint to the relevant supervisory authority under Thai law if you believe your rights have been violated.

To exercise your rights, please contact us using the details in the "Contact us" section below. We may ask for information to verify your identity before responding.

11. Third‑party links

Our website may contain links to third‑party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies before providing any personal data to them.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other reasons. When we do so, we will update the "Last updated" date at the top of this page. In the case of material changes, we may provide additional notice on our website.

Your continued use of our website after any changes to this Privacy Policy constitutes your acceptance of those changes.

13. Contact us

If you have any questions about this Privacy Policy, our data protection practices, or if you wish to exercise your rights, please contact:

  • The Checklist Co. Ltd.
  • Attn: Arisa Chaiyapalakul, Founder & Operations Director
  • Email: b3nz@thelistyouneed.com
  • Address: 81/1 room 503 Floor 5 Soi 2 Sukhumvit Road Klongtoei Bangkok 10110 Thailand