Privacy Policy

1. Who we are

STEP SOLUTIONS CO., LTD. is a Thai engineering, manufacturing and technology integration company specialising in LED displays, digital signage, smart city and audiovisual systems. Our registered office is at 75 Nimitmai Road, Samwa Tawan Ok, Klong Samwa, Bangkok 10510, Thailand.

For the purposes of the PDPA, Step Solutions acts as the data controller for personal data collected through this website, our sales and project activities, and our after-sales service operations.

2. Personal data we collect

We only collect data that is necessary for the purposes described in this policy.

• Contact details you submit through enquiry forms, email, phone or Line — name, company, job title, email address and telephone number.
• Project information you share with us, such as site details, technical requirements, drawings and budget ranges.
• Commercial records including quotations, purchase orders, invoices and service tickets.
• Recruitment data if you apply for a position with us, such as your CV and employment history.
• Technical data collected automatically when you browse our website — IP address, browser type, device type, referring page and pages visited.

3. Why we use your data

• To respond to enquiries, prepare quotations and deliver the products or services you request.
• To manage installation, warranty, maintenance and technical support activities.
• To meet accounting, tax, warranty and other legal or regulatory obligations.
• To improve our website, products and service quality through aggregated usage analysis.
• To send company news, product updates and event invitations where you have consented to receive them.

4. Legal basis for processing

Depending on the activity, we rely on contractual necessity (delivering a project you have ordered), legitimate interest (responding to business enquiries and securing our systems), legal obligation (tax and accounting records), or your consent (marketing communications and non-essential cookies). Where we rely on consent, you may withdraw it at any time.

5. Sharing your data

We do not sell personal data. We share it only where necessary, and always under confidentiality obligations.

• Manufacturing and technology partners where a product or warranty claim requires it.
• Installation subcontractors and logistics providers engaged for your project.
• IT, hosting, email and analytics service providers that operate our systems.
• Government authorities, auditors or legal advisers when required by law.

6. International transfers

Some of our suppliers and cloud services operate outside Thailand. Where personal data is transferred abroad, we take reasonable steps to ensure it receives a comparable standard of protection, including contractual safeguards with the receiving party.

7. Data retention

We keep personal data only as long as necessary for the purpose it was collected. Enquiry records are generally retained for up to 2 years, project and warranty records for the duration of the warranty plus 5 years, and accounting documents for 10 years as required by Thai law. Data no longer needed is securely deleted or anonymised.

8. Security

We apply organisational and technical measures appropriate to the sensitivity of the data, including access control, encrypted connections for our website, restricted internal permissions, and staff awareness. Our quality management system is certified to ISO 9001:2015.

9. Your rights

• Access a copy of the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion or destruction of data where there is no lawful basis to keep it.
• Object to or request restriction of certain processing activities.
• Request data portability in a machine-readable format where applicable.
• Withdraw consent for marketing communications or non-essential cookies at any time.
• Lodge a complaint with Thailand's Personal Data Protection Committee.

10. Children

Our website and services are intended for business customers. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to this policy

We may update this policy to reflect changes in our operations or in the law. The revision date at the top of this page shows when it was last amended. Material changes will be highlighted on this page.