ATA Services

Privacy Policy

Last updated: June 2026. This policy explains what personal data ATA Services Group collects, why, and the rights you have over it.

1. Who We Are

ATA Services Group ("ATA", "we", "us", or "our") provides business outsourcing, recruitment, PEO/EOR, legal, payroll, and digital marketing services across Thailand, Vietnam, Malaysia, Indonesia, Singapore, and Hong Kong. This Privacy Policy applies to personal data we collect through our websites, forms, and in the course of providing services to clients and candidates.

For questions about this policy or to exercise any of the rights described below, contact us via our Contact page or at the email address listed in the footer of this site.

2. Information We Collect

We collect personal data that you provide directly to us, including:

  • Contact details — name, email address, phone number, company name
  • Information submitted through enquiry, recruitment, and job-application forms (e.g. CV/resume, desired position, salary expectations)
  • Correspondence you send us, including support and consultation requests

We also collect limited technical data automatically when you visit our website, such as IP address, browser type, pages viewed, and referring URL, via cookies and similar technologies — see our Cookie Policy for details.

3. How We Use Your Information

We use the personal data we collect to:

  • Respond to enquiries and provide the services you request
  • Process job applications and connect candidates with relevant opportunities
  • Communicate with you about our services, including service-related updates
  • Improve our website and services, including analytics on how our site is used
  • Comply with legal, regulatory, and contractual obligations

4. Legal Basis for Processing

Where the EU General Data Protection Regulation (GDPR) applies, we process personal data on one or more of the following bases: your consent; performance of a contract with you (or steps to enter into one); our legitimate interests in operating and improving our business, provided these do not override your rights; and compliance with a legal obligation.

5. Data Sharing and Disclosure

We do not sell personal data. We may share personal data with:

  • Group entities and affiliated ATA brands involved in delivering the service you requested
  • Service providers who support our operations (e.g. hosting, email delivery, analytics), under contractual confidentiality obligations
  • Prospective employers, where you have submitted a job application or recruitment profile
  • Authorities or third parties where required by law, or to protect our rights or the safety of others

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, including any legal, accounting, or reporting requirements. Job application data is generally retained for the duration of an active recruitment search and for a reasonable period afterward in case relevant future opportunities arise, unless you ask us to delete it sooner.

7. Your Rights

Subject to applicable law, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of your personal data
  • Object to or restrict certain processing
  • Request a portable copy of your data
  • Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us using the details on our Contact page.

8. Data Security

We apply reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, or alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International Data Transfers

Because ATA Services Group operates across multiple countries, personal data may be transferred to, and processed in, countries other than the one in which it was originally collected. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for such transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. The "Last updated" date at the top of this page indicates when it was last revised.