How we handle your personal data

Who we are

Excelsior Consulting Recruitment (Thailand) Co., Ltd. operates as a talent advisory and executive search firm based in Bangkok. When we refer to "Excelsior", "we", or "us" in this notice, we mean Excelsior Consulting Recruitment (Thailand) Co., Ltd.

We act as the data controller for the personal data you share with us through this website, by email, or through any direct interaction with our team.

What information we collect

Depending on how you engage with us, we may collect:

If you are a client or prospective client

• Your name, job title, email address, and phone number
• Your company name and industry
• Details about the role you are looking to fill — such as position title, seniority level, location, and hiring timeline

If you are a candidate

• Your name, email address, phone number, and current location
• Your current job title and career preferences
• Your CV or resume and, optionally, your LinkedIn profile URL
• Any additional information you choose to share about your experience or career goals

When you visit our website

• Basic technical information such as your browser type, device type, and pages visited — collected through standard web analytics

Why we collect it

We only collect information that serves a clear purpose:

• To provide our services — matching candidates with suitable roles and advising clients on their hiring needs
• To communicate with you — responding to your enquiry, sharing relevant opportunities, or keeping you informed about next steps
• To improve our service — understanding how people use our website so we can make it more useful
• To meet our legal obligations — complying with applicable laws and regulations, including Thailand's Personal Data Protection Act (PDPA)

We do not sell your data. We do not share it with third parties for marketing. We do not use it for any purpose beyond what is described here.

Our legal basis for processing

Under Thailand's PDPA, we process your personal data based on one or more of the following grounds:

• Your consent — when you submit a form, upload your CV, or tick a consent checkbox, you are giving us permission to use your data for the stated purpose
• Contractual necessity — when processing is needed to fulfil our engagement with you or your organisation
• Legitimate interest — when we have a reasonable business purpose that does not override your rights, such as contacting a candidate about a role that genuinely matches their background

How we store and protect your data

Your data is stored securely using industry-standard measures. Access is limited to the Excelsior consultants who need it to do their work. We do not store data longer than necessary.

• Client data is retained for the duration of our engagement and a reasonable period afterwards for follow-up and record-keeping
• Candidate data is retained for up to 24 months unless you ask us to remove it sooner, or unless we need it for a longer period with your consent
• Website analytics data is anonymised and does not identify you personally

Who we share your data with

We treat your information with discretion. We only share personal data in the following circumstances:

• With our clients — if you are a candidate and we believe there is a genuine fit for a role, we will always discuss this with you before sharing your profile with any client
• With service providers — such as our hosting provider or email service, who process data on our behalf and are bound by appropriate agreements
• When required by law — if we are legally obligated to disclose information to a regulatory authority or court

We will never share your CV or personal details with a client without speaking to you first.

Your rights

Under the PDPA, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to update or correct inaccurate information
• Deletion — ask us to delete your data when there is no longer a valid reason for us to keep it
• Withdraw consent — change your mind at any time about the permissions you've given us
• Data portability — request your data in a structured, commonly used format
• Object or restrict — ask us to stop or limit certain types of processing

To exercise any of these rights, simply get in touch with us using the contact details below. We aim to respond to all requests within 30 days.

Cookies

Our website uses only essential cookies required for the site to function. We do not use advertising cookies or tracking pixels. If we introduce analytics in the future, we will update this notice and seek your consent where required.

Changes to this notice

We may update this privacy notice from time to time. When we do, we will revise the date at the bottom of this page. We encourage you to check back occasionally.

How to contact us

If you have any questions about how we handle your data, or if you would like to exercise any of your rights, please contact us: