Privacy Policy
Last updated: 7/31/2026
Privacy Policy
This policy explains how Face Scan HR collects, uses, and protects your personal data in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA).
Personal data we collect
- General data: full name, email address, phone number, job title, employee ID.
- Biometric data: facial images and the facial templates used to verify identity and record clock-in/clock-out times. This is sensitive personal data under Section 26 of the PDPA and is stored separately from the general data above.
Purposes of collection and use
- To verify employee identity and record clock-in/clock-out times.
- To produce attendance summary reports for the customer's employer/HR team.
- To maintain the security of the system and improve its quality.
Consent
Because facial data is sensitive personal data, we obtain explicit consent from the data subject before we begin collecting and processing it. Data subjects may withdraw their consent at any time.
Retention period
Facial data is retained for as long as you remain an employee of the employer using our service, and is deleted from the system within 30 days after your employment ends, unless the law requires us to retain it longer.
Disclosure to third parties
We do not disclose, sell, or share your personal data with third parties. Data is processed and stored solely within our own systems, except where disclosure is required by law.
Your rights as a data subject
- Request access to, and a copy of, your personal data
- Request correction of inaccurate data
- Request erasure or destruction of your data
- Withdraw consent previously given
- Object to the collection or processing of your data
- Lodge a complaint if you believe your rights have been violated
Contact
To exercise any of the rights above, or to ask about your personal data, contact us through the channels listed on our "Contact Us" page.