Privacy Policy

LotusHall Mining Heavy Engineering Construction Co., Ltd. (“LotusHall Mining”, “we”, “us”) respects your privacy. This policy explains what personal data we collect when you use lotushall.com (the “website”) or contact us through it, how we use and protect that data, and the rights you have under Thailand’s Personal Data Protection Act B.E. 2562 (2019) (the “PDPA”).

1. Who is responsible for your data

LotusHall Mining Heavy Engineering Construction Co., Ltd., 147 Wangkong Road, Tambon Wiengneur, Amphur Muang, Lampang 52000, Thailand, is the data controller for the personal data described in this policy. You can reach us using the details in section 12.

2. Personal data we collect

Data you give us

• Contact form: your name, email address, the subject and the content of your message.
• Emails and phone calls: the details you choose to share when you contact us directly.
• Job applications: when you send an application or CV to hr@lotushall.com, your contact details, work history, qualifications and any other information in your documents.

Data collected automatically

When you visit the website, our web server automatically records technical data such as your IP address, browser type, the pages you request and the date and time of each request.

We do not use the website to collect sensitive personal data. Please do not send us sensitive data, such as health information, religion or criminal records, unless we ask for it as part of a recruitment process where the law requires it.

3. How we use your data

• To reply to your enquiry and to discuss or prepare a project with you. This is necessary to take steps at your request before entering into a contract, or is in our legitimate interest in responding to business enquiries.
• To assess job applications. This is necessary to take steps at your request before entering into an employment contract.
• To run and secure the website, prevent abuse and fix problems. This is in our legitimate interest in operating a safe and reliable website.
• To comply with the law and respond to lawful requests from public authorities.

We do not sell your personal data and we do not use it for advertising. If we want to use your data for a purpose not described here, we will ask for your consent first.

4. Cookies and browser storage

• The website does not set advertising or tracking cookies of its own.
• It stores a few small values in your browser to work properly. Session storage, which is deleted automatically when you close the browser tab, remembers that you have already seen the opening animation and keeps transitions between pages smooth. Local storage remembers that you have accepted the privacy notice, so it is not shown to you again. None of these values contain personal data.
• WordPress, the system the website runs on, sets cookies only for staff who log in to manage the website.

5. Third-party services on the website

• Maps: the map on the Contact page loads its map images from Esri (ArcGIS). To display the map, your browser sends your IP address and the area of the map you are viewing to Esri.
• Directions: the “Get directions” links open Google Maps. Google receives data only if you click a link, and Google’s privacy policy then applies.
• Share buttons: the Facebook, LINE, X and LinkedIn buttons on news and award pages are ordinary links. Nothing is sent to these services unless you click a button, and their own privacy policies then apply.
• Website security: our hosting provider’s security service (Imunify) checks requests to the website, including IP addresses, to block attacks and malicious traffic.
• Email delivery: messages sent through the contact form are delivered to our inbox through an email service provider.

6. Who we share your data with

We share personal data only when necessary:

• with service providers that host and operate the website and our email on our behalf, who must protect it and use it only on our instructions;
• within LotusHall Mining, including our offices and project sites in Thailand and Lao PDR, when needed to handle your enquiry or application;
• with government authorities, courts or regulators when the law requires it.

7. Transfers outside Thailand

Some of our service providers, such as Esri (see section 5), process data outside Thailand, including in the United States. When personal data is transferred abroad, we take the steps required by the PDPA to make sure it remains adequately protected.

8. How long we keep your data

• Enquiries: up to 2 years after our last contact with you. If an enquiry leads to a contract, we keep the related records for as long as the law requires.
• Job applications: up to 6 months after the recruitment process ends. If you are hired, your application becomes part of your employee record. If you agree that we may keep it for future vacancies, we keep it for up to 2 years.
• Web server records: for a short period for security purposes, normally no longer than 90 days.

When a retention period ends, we delete or anonymise the data.

9. How we protect your data

We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access, such as secure connections, restricted access for staff and keeping our software up to date.

10. Your rights

Under the PDPA you have the right to:

• withdraw your consent at any time, where we rely on your consent;
• access and obtain a copy of your personal data, and ask how we obtained it;
• receive your data in a commonly used electronic format, or ask us to send it to another organisation;
• object to the processing of your data;
• ask us to delete, destroy or anonymise your data;
• ask us to restrict the use of your data;
• ask us to correct your data and keep it accurate, up to date and complete;
• complain to the Office of the Personal Data Protection Committee (PDPC), www.pdpc.or.th.

To use any of these rights, contact us using the details in section 12. We will reply within 30 days and may ask you to confirm your identity first.

11. Children

The website is intended for businesses and job seekers and is not directed at children. We do not knowingly collect personal data from anyone under 20 years of age without the consent of their parent or guardian.

12. Contact us

For questions about this policy or your personal data, contact:

LotusHall Mining Heavy Engineering Construction Co., Ltd.
147 Wangkong Road, Tambon Wiengneur, Amphur Muang, Lampang 52000, Thailand
Email: webmaster@lotushall.com
Phone: +66 (0)54 321 511

13. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last changed.