HomePDPA Compliance
PDPA Compliance

KabyTech & Thailand's Personal Data Protection Act

KabyTech is fully compliant with Thailand's PDPA (พ.ร.บ. คุ้มครองข้อมูลส่วนบุคคล พ.ศ. 2562).

📋

Data Controller Registration

KabyTech (Accomate Co., Ltd.) is registered as a Data Controller under the PDPA. We have appointed a certified Data Protection Officer at privacy@kabytech.co.th.

⚖️

Lawful Basis for Processing

AWB data containing personal information is processed under legitimate interests — the performance of international freight logistics contracts.

🗑️

Data Minimisation & Deletion

We process only fields necessary for AWB extraction. Raw documents are deleted within 24 hours. Extracted personal fields can be purged on request via our API.

PDPA obligations for your business

📌
As a freight forwarder, you are a Data Controller

You collect shipper and consignee personal data as part of your freight operations. KabyTech acts as your Data Processor — processing that data only under your instructions.

📌
Data Processing Agreement (DPA)

KabyTech provides a standard DPA that satisfies PDPA Article 40 requirements. All enterprise customers sign this before going live. Request yours at legal@kabytech.co.th.

📌
Sub-processor Disclosure

KabyTech uses AWS (Singapore, ap-southeast-1) for cloud infrastructure. AWS maintains SOC 2 Type II and ISO 27001 certifications. No other sub-processors handle personal data from AWBs.

📌
Data Subject Rights

If a shipper or consignee exercises PDPA rights directly with your company, KabyTech will assist you in fulfilling those requests within 30 days via our data management API.

Need a Data Processing Agreement?

Contact our legal team. Pre-signed DPA within 24 hours satisfying PDPA Article 40 requirements.