Skip to main content

Privacy notice for directors, partners and authorised signatories in iApp eKYB

Version of 4 November 2026. This notice is for people named in company data, not for iApp's customers, whose notice is the Personal Data Protection Policy. We did not obtain your data from you, so we give these details under section 25 of the Personal Data Protection Act B.E. 2562 (2019). The Thai version prevails over translations.

1. Controller​

iApp Technology Co., Ltd., registration number 0135556015413, 80/359 Moo 3, Soi Khlong Luang 26, Khlong Nueng, Khlong Luang, Pathum Thani 12120 · legal@iapp.co.th · 02-124-4041

2. What we hold​

  • Title, first name and last name.
  • Your role in a company, such as director, partner or managing partner, and the text on signing authority.
  • The companies where you are named, and the dates of changes as registered.

We do not hold your national ID number, home address, phone number or photograph.

3. Source​

Company information the Department of Business Development (DBD) publishes, which iApp collects and stores. When a customer asks for the latest record, iApp reads the register at that time. iApp is not a government agency and does not act for the DBD.

4. Purposes​

To provide company checks to the organisations that are our customers: knowing a business customer (KYB), customer due diligence under anti-money-laundering law, credit and trade-credit assessment, checking a partner before a contract, and preventing fraud. Each needs to know who is registered as able to act for the company.

Legitimate interests under section 24(5): those of iApp and of its customers in checking a company they will deal with. The data used is what the register states as part of a company's record. We use only what is needed, with the safeguards in section 7, so that your rights are not unduly affected.

6. Who receives it​

  • Organisations that use eKYB and have accepted the iApp eKYB Terms of Use, which forbid using your name for marketing or publishing it.
  • Service providers iApp uses to store and process data, under contracts that require confidentiality.
  • Government authorities when the law requires.

7. Safeguards​

  • Customers accept terms that limit the purposes and forbid publishing, reselling or copying the data into another database.
  • Each account may look up at most 1,000 companies a day.
  • Accounts that have never bought credits see no names and cannot search by a person's name.
  • Every call is logged with the account that made it and what it looked up.
  • Data travels encrypted, and access to the systems is restricted.

8. How long we keep it​

For as long as eKYB is provided and the data remains on the register. The change history kept since 28 August 2026 is held to show the record as it stood on a past date. When the data is no longer needed for the purposes in section 4, we delete it or make it impossible to identify you. Call logs are kept as long as billing, audit and the prevention of misuse require.

9. Your rights​

You may ask to access and receive a copy of your data, to have it corrected, to object to its processing, to have it deleted, to restrict its use, to receive or transfer it, and to withdraw consent where consent is used. You may complain to the Personal Data Protection Committee.

Once we accept your objection, your name no longer appears in any eKYB answer: company records, past records, batches, risk evidence and the search by a person's name. Corrections to the company register itself are made at the DBD.

10. How to exercise them​

Use the data subject request form or write to legal@iapp.co.th. We may ask you to confirm your identity first, and we reply within 30 days of receiving the request.

11. Changes​

We publish each new version on this page with its date.