Privacy Policy

1. General

1.1. This Policy explains what personal data CDEK BKK Company Limited (CDEK BKK Co., LTD, the “Operator”) receives through the website cdek-fulfillment.asia (the “Website”), why and on what legal basis it processes that data, to whom it discloses it and how long it keeps it.

1.2. This Policy is prepared with regard to the Personal Data Protection Act B.E. 2562 (2019) of the Kingdom of Thailand (the “PDPA”).

2. Operator

CDEK BKK Company Limited (CDEK BKK Co., LTD)
Registration number: 0105565199963
Address: 18/6 Soi Udomsak 31, Khwaeng Bangchak, Khet Phrakanong, Bangkok 10260, Kingdom of Thailand
Email for personal data requests: info@cdek-thailand.com
Phone: +66 98 670 0369

3. Quote request

3.1. Submitting the “Get a quote” form is a request to calculate the cost of services and to contact you. It is not an order, an acceptance of the Public Offer or a contract.

3.2. Required fields: name and main contact — phone, WhatsApp or Telegram. Without them we cannot respond to your request; instead of the form, you can message us or write to us by email.

3.3. Optional fields: LINE ID, email, description of your goods and needs. Please do not include information about health, religious beliefs or other special categories of data in the description — it is not needed for a quote.

3.4. The Website server adds service data to the request: request number, date and time of receipt, Website language, the form used to send the request, the version of the notice shown under the form and the revision of this Policy. Your IP address is not recorded in the request.

4. Other data

4.1. Technical data. When pages are opened, the hosting web server automatically records the IP address, browser and device information, the page address and the time of the request.

4.2. Correspondence. If you message us, email us or call us, we receive the data you provide and your identifier in the relevant service.

4.3. Customer data. If a contract is concluded between us, we process the data needed to perform it: customer details, information about goods and shipments, and payment data.

4.4. Cookies and analytics. Yandex Metrica and the Google map work only after you make a choice in the cookie banner — see “Cookie Consent” (cdek-fulfillment.asia/cookie/en/).

5. Purposes and legal bases

• Responding to your request, calculating the cost, contacting you and discussing terms at your initiative — processing is necessary to take steps at your request prior to entering into a contract (PDPA, Section 24(3)). Consent is not required for this and is not requested.
• Entering into and performing a contract — PDPA, Section 24(3).
• Accounting, tax records and other obligations established by law — PDPA, Section 24(6).
• Operation and security of the Website (server technical logs) — the Operator’s legitimate interest (PDPA, Section 24(5)).
• Displaying the videos on the home page — technical delivery of media content from the Vercel network based on the Operator’s legitimate interest in displaying the Website’s content (PDPA, Section 24(5)); the content of your request is not transferred.
• Visit analytics (Yandex Metrica) and display of the Google map — your consent in the cookie banner (PDPA, Section 19). You may withdraw consent at any time.

The Operator does not send marketing mailings, does not use request data for advertising or profiling and does not sell personal data.

6. Recipients

6.1. The content of a request is received by:

• the hosting provider Beget — its servers run the Website and the mail server through which the full request is delivered to the Operator by email;
• Telegram — a short notification to staff about a new request: request number, name, main contact, form and Website language. The description, email and LINE ID are not sent to Telegram;
• the Operator’s staff who respond to the request.

6.2. When a contract is performed, data is disclosed to logistics operators (CDEK, Thai Post, DHL and others), banks and payment institutions to the extent necessary to provide services and process payments.

6.3. Government authorities of the Kingdom of Thailand receive data where required by law.

6.4. The content of a request is not received by:

• Vercel Inc. (content delivery network) — when the video on the home page loads, it receives your IP address, browser information and the address of the requested file, without cookies;
• Yandex LLC (Yandex Metrica) and Google LLC (map) — only after your choice in the cookie banner. The request form fields are excluded from Yandex Metrica Webvisor recording.

7. Transfers outside Thailand

7.1. Data may be processed outside Thailand:

• the network of the hosting provider Beget (Website and mail) is registered in the Russian Federation; its servers may be located outside Thailand;
• Telegram servers are located outside Thailand;
• Yandex Metrica — the Russian Federation; Google and Vercel — the United States and other countries.

7.2. Transferring request data to the hosting provider, the mail server and Telegram is necessary to respond to your request prior to entering into a contract (PDPA, Section 28(3)). Data is transferred to Yandex Metrica and Google only with your consent in the cookie banner; the level of personal data protection in the recipients’ countries may differ from that established in Thailand.

8. Retention

8.1. A request that does not lead to a contract is kept for 6 months after the last meaningful contact regarding that request — a reply or other interaction by you or the Operator relating to the request or negotiations. Automatic email delivery, technical resending and analytics events do not count as contact. After this period the request is deleted from email and the Telegram chat during a monthly review.

8.2. If a contract is concluded, the data becomes part of the customer records and is kept for the term of the contract and for the periods required by applicable law (including accounting and tax law), and for as long as necessary to establish, exercise or defend legal claims.

8.3. Server technical logs are kept by the hosting provider for the period set by its rules. Your cookie banner choice is kept in your browser until you delete it.

8.4. Data is deleted earlier at your request if there is no legal basis to keep it.

9. Data security

Form data is transmitted over a secure connection (HTTPS). Access to requests is given to the Operator’s staff who need it to respond. The Operator reviews its security measures when the systems it uses change.

10. Your rights

10.1. Under the PDPA, you have the right to:

• access your data and obtain a copy (Section 30);
• receive your data in a machine-readable format or ask for it to be transferred to another controller — in the cases set out in Section 31;
• object to processing — in the cases set out in Section 32;
• request erasure, destruction or anonymisation of your data — in the cases set out in Section 33;
• request restriction of processing — in the cases set out in Section 34;
• request correction of inaccurate, incomplete or outdated data (Sections 35 and 36);
• withdraw consent to analytics and the map at any time — via the “Cookie settings” link at the bottom of the home page (Section 19); withdrawal does not affect the lawfulness of processing before it;
• file a complaint with the Personal Data Protection Committee (PDPC) (Section 73).

10.2. Please send requests to info@cdek-thailand.com. We may ask you to confirm your identity. An access request is fulfilled without delay and no later than 30 days from the date of receipt (Section 30).

11. Changes to this Policy

The current revision is published at cdek-fulfillment.asia/privacy/en/; the revision date is shown at the end of the document. The Policy is published in Russian, English and Thai with the same content.

Revision of 30 September 2026.