Last updated: 25 June 2026
Contents
1. Who we are
THAIMOST is a B2B marketplace connecting Thai suppliers with international buyers, operated by 7CENTER HOLDING (“THAIMOST”, “we”, “us”). For personal data processed about account holders and visitors, we act as a data controller. For Content that Users exchange with each other (e.g., an RFQ a Buyer sends a Supplier), each User is an independent controller of the data they receive. You can reach us about this Policy or any data-protection matter at privacy@thaimost.com.
2. Data we collect
| Category | Examples |
|---|---|
| Account data | Name, business email, company name, role, phone, country. |
| Supplier / KYC data | Business registration, addresses, certifications, factory and identity documents submitted for verification. |
| Marketplace data | RFQs, quotes, orders, sample requests, messages, listings and documents you submit. |
| Usage & device data | Pages viewed, searches, approximate location/IP, browser/device info, basic analytics. |
| Communications | Messages to our team, support requests, survey responses. |
| Cookies | Session/sign-in cookies and limited analytics (see §5). |
3. How & why we use data
- Operate the marketplace — matching Buyers and Suppliers, RFQs, quotes, orders, messaging.
- Verify Suppliers (KYC) and maintain trust, safety and fraud prevention.
- Provide, secure, maintain and improve the Platform and customer support.
- Communicate about your account, transactions and service updates.
- Comply with legal, tax and regulatory obligations and enforce our Terms.
- Send marketing only where permitted and with opt-out (see §11).
4. Legal bases
Where PDPA/GDPR applies, we rely on: performance of a contract (operating your account and the marketplace); legitimate interests (platform safety, fraud prevention, analytics and improvement, balanced against your rights); legal obligation (tax, accounting, lawful requests); and consent where required (e.g., certain cookies or marketing), which you may withdraw at any time.
5. Cookies & tracking
We use essential cookies for sign-in and session functionality, and limited analytics to understand usage and improve the Platform. We aim to minimise tracking and do not sell personal data or use cookies to do so. You can control or block non-essential cookies via your browser settings; blocking essential cookies may affect functionality. Where required, we will request consent for non-essential cookies.
6. Sharing & disclosure
We share personal data: (a) with the relevant counterparty in a marketplace interaction (e.g., a Supplier sees the RFQ and contact details a Buyer sends them); (b) with trusted service providers / processors who run the service under contract (e.g., cloud hosting and database, email delivery, analytics); (c) where required by law or to protect rights, safety and the Platform; and (d) in a business transfer (merger, acquisition). We do not sell your personal data, email lists or contact details.
7. International transfers
Your data may be processed in countries outside your own, including where our service providers operate. Where required, we use appropriate safeguards (such as adequacy decisions or standard contractual clauses) for cross-border transfers.
8. Retention
We keep personal data only as long as necessary for the purposes described, to provide the service, and to meet legal, tax and dispute-resolution obligations, after which we delete or anonymise it. KYC and transaction records may be retained longer where law requires.
9. Security
We use access controls, encryption in transit, and restricted access to sensitive documents (e.g., KYC files stored with signed, time-limited access). No method of transmission or storage is completely secure; we work to protect your data and will notify affected users and authorities of qualifying breaches as required by law.
10. Your rights
Subject to applicable law (PDPA/GDPR), you may have the right to: access your data; correct inaccurate data; delete (“erasure”); restrict or object to processing; data portability; and withdraw consent. You may also lodge a complaint with your data-protection authority (in Thailand, the PDPC). To exercise your rights, contact privacy@thaimost.com; we will respond within the timeframe required by law and may need to verify your identity.
11. Marketing communications
We only send marketing where permitted. You can opt out at any time via the unsubscribe link or by contacting us. Transactional and service messages (e.g., account, RFQ, order notices) are not marketing and may still be sent.
12. Children
The Platform is for businesses and is not directed to children. We do not knowingly collect personal data from anyone under 18; if you believe a minor has provided data, contact us and we will delete it.
13. Third-party links
The Platform may link to third-party sites and services, which have their own privacy practices. We are not responsible for their content or policies.
14. Changes
We may update this Policy. Material changes will be indicated by updating the “Last updated” date and, where appropriate, by notice. Continued use after changes take effect constitutes acceptance.
15. Contact
Privacy enquiries and rights requests: privacy@thaimost.com. General legal: legal@thaimost.com.