Version 2026-08-17-1
True Blue Recruitment Co., Ltd. (“True Blue”, “we”, “us”) is a recruitment business registered in Thailand (registration number 0105565040760) with its registered address at 8 T-ONE Building, 17th floor, Soi Sukhumvit 40, Sukhumvit Road, Phra Khanong, Khlong Toei, Bangkok 10110. We are the data controller for personal data collected through this website under Thailand’s Personal Data Protection Act B.E. 2562 (PDPA).
When you apply for a role or join our talent pool we collect the details you provide: your name, email address, phone number, LinkedIn profile, current role, seniority, the specialism you work in, what you tell us you are looking for, and your CV, which may itself contain further personal data such as your work history and education. We process this data to consider you for the role you applied for and for similar roles we believe may interest you, to communicate with you about your application, and to meet our legal obligations as a recruitment business.
When you brief a role to us as an employer, we collect your name, company, work email, phone number if you give one, and what you tell us about the role. We use this to respond to your enquiry.
When you request our talent report, we collect your work email address. We use it to send you a download link for the report and to follow up with you about it.
When you send us a general enquiry through the contact page, we collect your name, your company if you give one, your email address, your phone number if you give one, and your message. We use this to respond to your enquiry.
We process the data submitted through our forms on the basis of the consent you give when submitting. We record the time of your consent and the version of this notice you consented to. You may withdraw consent at any time by contacting us, after which we will stop processing and delete your data unless we are legally required to retain it.
Application data is stored in Spott, the applicant tracking system we use to manage recruitment, and is accessible only to our consultants. If you join the talent pool without uploading a CV, we generate a one page summary of your form answers and store it in Spott in place of a CV; it contains only what you typed into the form. We share your profile with a prospective employer only with your prior agreement, and we never approach your current employer. We do not sell personal data.
Employer briefs and general enquiries are not stored in Spott. They are delivered by email to our consultants and kept in the delivery record described in section 5.
We also send ourselves internal email about submissions, through Microsoft 365, the email platform we already use for company mail, not through any separate third-party email service. For talent pool registrations, employer briefs, general enquiries and talent report requests this is a routine notification sent on every submission, and it contains what you submitted. For job applications and register-interest submissions it is an alert sent only if a submission may not have arrived safely, and it may include your name and contact details.
The talent report is the one case where this website emails you directly: the message containing your download link is sent to the address you entered, through the same Microsoft 365 platform. The link stops working after 7 days.
We use Cloudflare Turnstile to keep bots off our forms. Every form submission sends a verification token and your IP address to Cloudflare for that check. Cloudflare does not receive what you typed into the form.
This website can use two optional analytics tools: Google Analytics and Microsoft Clarity. Neither loads unless you accept analytics cookies through the banner shown on your first visit; if you reject them, or never choose, no analytics run and the site works exactly the same. You can change your choice at any time on the cookie policy page, which also lists the cookies each tool sets.
Google Analytics shows us how the site is used in aggregate: which pages are visited, how visitors arrive, and actions such as opening or submitting a form. We do not send it the contents of anything you type. It is operated by Google, which processes this data on our behalf.
Microsoft Clarity provides session recordings and heatmaps. The recording is made and stored by Microsoft, not on our servers. We have set Clarity to its strictest masking, so a recording shows how a page was used, such as scrolling and clicking, while the text on the page and anything you type are masked and do not appear. Files you upload are not captured by the recording.
Microsoft sets the retention periods for Clarity data and we do not control them: session recordings are available for playback for 30 days, and click data, heatmaps and any session we label or favourite are kept for 9 months. These periods are separate from the retention rules in section 6, which apply to candidate profiles in our recruitment database and not to analytics data.
Our recruitment database (section 4) is the system of record for candidate data. We delete candidate profiles when more than two years have passed since our last interaction with you, or since your profile was added where no interaction followed. We run this review at least once a year. You can ask us to delete your data sooner at any time (section 8).
Email correspondence, meaning messages you exchange with our consultants and the internal notification emails described in section 4, is kept in our Microsoft 365 mailboxes and is not deleted on a fixed schedule. The two-year rule above applies to your profile in the recruitment database. A deletion request under section 8 covers your correspondence as well as your profile, subject to anything we are legally required to keep.
When you submit a form, this website also keeps a delivery record, used solely to verify that every submission safely reached the right place. It holds the details you entered: depending on the form, your name, email address, phone number, LinkedIn profile, current role, seniority, what you are looking for, and the role or specialism concerned. For employer briefs it holds the brief itself, including the company and role details. For general enquiries it holds the enquiry itself, including your message. For talent report requests it holds only your email address. It also holds the IP address the form was sent from, which we use to protect the forms against abuse. Personal details are automatically deleted from that record after 90 days. Only a minimal technical entry is kept beyond that: the time, the role or specialism, and the outcome.
Applications are transmitted over encrypted connections and forwarded directly to our applicant tracking system; CV files are not stored on this website’s servers. Access to candidate data is limited to the True Blue team.
Under the PDPA you may request access to, correction of, or deletion of your personal data, object to or restrict its processing, and withdraw consent. To exercise any of these rights, contact us using the details in the site footer. You may also lodge a complaint with Thailand’s Personal Data Protection Committee.
When this notice changes materially, the version identifier above changes with it, and new applications record the version in force at the time of consent.