Introduction and definition
Iris Consulting Co., Ltd. respects ​​the right to privacy and protection of The Personal Data of The Data Subject which is a fundamental right to privacy of a person. The Data subject would like to keep their personal data safely and securely by the law on protection of The Personal Data stipulates rules or measures to supervise the protection of The Personal Data in relation to the collection, use, disclosure and rights of The Data Subject. This policy has been prepared as the main principle for the protection of The Personal Data of The Data Subject as the following and in this privacy policy words or phrases can be defined as follows;
Personal Data Protection Law is Personal data protection Act B.E. 2562 and the updated act including rules, regulation and related orders
The Personal Data is data relating to an individual which enables an individual to be identified either directly or indirectly, but not including the information of the deceased.
IRIS is IRIS Consulting Co,. Ltd
Third Party is a person outside IRIS who is a natural person and has direct or indirect relationship with IRIS including the use of services, websites or products or other services of IRIS
The Data Controller is persons who have decision-making powers regarding the collection, use or disclosure of The Personal Data on the order or on behalf of The Data Controller
The Data Protection Officer is an officer who is appointed by the Personal Data Controller to act as The Personal Data Protection Officer in accordance with the Personal Data Protection law
Website is a website which is owned or provided by IRIS, as the case may be.

The Personal Data collection
IRIS will collect your personal data for using for IRIS’s operations, and IRIS will collect The Personal Data limited and only to the extent necessary for the objective of the collection, use, and/or disclose The Personal Data in accordance with The Personal Data Law by collecting The Personal Data in the following;
Your personal data are collected and processed under this policy. The types of The Personal Data can be categorized as follows:
The Personal Data such as name, surname, nickname, date of birth, country, username and password, picture, other registered information as resume or personal bio which is uploaded on website or create on your profile on Website
Contact information such as email, phone number, number of address, address, address for contacting
Profile information such as educational profile, skills, working experience, salary and payment, category of work and workplace
Outsider information such as name, surname, email, phone number, address, workplace, working position and relation relating to you
Sources of The Personal Data
IRIS receives The Personal Data from you directly

The Objective and Scope
IRIS will collect your personal data that is necessary for the operation of IRIS only. IRIS may have different objectives for processing The Personal Data on a case-by-case basis as follows;
IRIS collects, uses, and/or discloses The Personal Data for the following purposes;
to provide and maintain IRIS’s services for creating, updating and maintaining your registered account. To perform service tracking services, offering, processing and facilitating for services.
To provide and maintain service by terms and condition
To check the use of IRIS’s website
For security the integrity of IRIS’s services and to prevent crime and fraud
To verify or identify you, In the case of using various services of IRIS website
For legal or regulatory purposes government agency or the investigating officer will determine or compliance with the law
IRIS will not collect, use and/or disclose your personal data other than the objective stated by IRIS, except in the case of collection, use and/or disclosure The Personal Data for new objectives which IRIS has informed and obtained your consent.

Disclosure The Personal Data
IRIS may disclose your personal data for using on the website, services, or legal action by the following;
Employees or officers within IRIS
Auditors, legal and financial advisors within IRIS
The Third Party involved in the operation of IRS
Regulatory agencies that IRIS is subject to regulations or other agencies that have ordered IRIS disclosure according to legal requirements
Person/people involved(s) IRIS deems it necessary to disclose legal information, government orders, or if such disclosure is appropriate for security objective. This term includes the exchange of your personal data with IRIS to prevent crime or fraud
IRIS may disclose your personal data to other parties which is not specified in this policy. In such a case, IRIS must notify you and obtain your consent, if the relevant law requires.
IRIS will not send your personal data to other parties and undertakes to use your personal data in a lawful and ethical framework to the extent permitted by law.
IRIS may send or transfer your personal data abroad. If it is the case your consent is required for the transmission or transfer of your personal data abroad or the recipient in a foreign country has adequate The Personal Data protection standards and is in accordance with the rules stipulated by The Personal Data Protection Law.

Period regarding The Personal Data retention
IRIS will collect your information for the period you maintain your account and not later than 90 days from the date of termination of your account. In the above case means that IRIS will delete or destroy your personal data or make your personal data to be non-identifiable to The Data Subject within 90 days from the date you notify your account termination. In the case that the user withdraws their consent to the provision of personal data, IRIS will delete or destroy your personal data or render your personal data to be non-identifiable to The Data Subject immediately.

Your choices regarding The Personal Data
In the case that you would like to know or obtain a copy of The Personal Data which is on the responsibility of IRIS or ask for IRIS disclosing the receiving of The Personal Data that you did not give consent. You can contact via the contact information specified by IRIS.
In case you have checked your personal data and found that The Personal Data is inaccurate, not current, incomplete, or may cause misunderstandings. You can contact IRIS to correct your personal data in accordance with the contact information specified by IRIS.
You have the right to withdraw your consent for IRIS to collect, use and/or disclose your personal data at any time except the withdraw consent is limited by law or contract to your interest.
You have the right to obtain The Personal Data related to you from IRIS.
You have the right to object to the collection, use or disclosure of The Personal Data relating to you at any time.
You have the right to request that IRIS delete or destroy The Personal Data for being non-identifiable to The Data Subject in case of The Personal Data is no longer necessary to maintain the objective of collection, use or disclosure. When you withdraw your consent to the collection, use or disclosure of personal information and IRIS There is no other base authority to collect, use or disclose The Personal Data.
You have the right to complain to The Personal Data Protection Committee, in the case that IRIS or The Personal Data Processor violates or does not comply with the law on personal data protection or announcements issued under such laws at
the Office of the Personal Data Protection Committee, 7th floor, Ranprasasanabhakdi Building. Government Center for the 80th Birthday Anniversary, Chaeng Watthana Road, Thung Song Hong Subdistrict, Lak Si District, Bangkok 10210
IRIS reserves the right to consider the request to exercise such right and proceed as required by the Personal Data Protection Law.

Security of The Personal Data retention
IRIS provides great importance to the security of your personal data. Therefore, IRIS has taken appropriate security measures to prevent your personal data from being lost used in a wrong way, accessed, changed or disclosed without permission. IRIS will limit access to your personal data to those who are authorized to access it by these parties to process yours under the conditions that IRIS set only
IRIS will provide measures to maintain the security of personal data covering administrative protection measures, technical precautions, and physical safeguards in relation to access or control of the use of The Personal Data which consists of the following actions at least;
Controlling access to The Personal Data and devices for collecting and processing personal data with regard to usage and security
Determination of permission or assigning rights to access The Personal Data
User access management to control access to The Personal Data which is only for authorized people
Assigning users’ roles and responsibilities to prevent unauthorized access to The Personal Data, disclosure or illegal copying of The Personal Data or theft of storage devices or The Personal Data; and
Providing a means to enable retrospective review of access, change, deletion or transfer of personal data; in accordance with the methods and mediums used to process personal data
In addition, IRIS will collect The Personal Data for the objective that have been notified to The Data Subject and to be in accordance with the law. In the case that IRIS will hire The Third Party or outside companies to processing your personal data, IRIS will select them with standard data protection system and make an agreement relating to the collection of The Personal Data in accordance with the same policy.
In the case of infringement of your personal data, IRIS will notify The Office of The Personal Data Protection Committee within 72 hours from the fact that it is practicable except the infringement does not risk affecting your rights and freedoms. In case of violation has a high risk of affecting your rights and liberties, IRIS will notify you of the breach and provide remedies without delay.
Contact Information
If you wish to contact or have questions or would like to inquire about the details of collecting, using and/or disclosing The Personal Data including your rights in this policy or would like to withdraw consent to the collection, use and/or disclosure of The Personal Data or in the case that your personal data is used in not appropriate way. You can contact IRIS by the following;
1177 12A Floor Pearl Bangkok Building, Phahonyotin Road, Sam Sen Nai Sub-district, Phayathai district, Bangkok 10400
Tel: 096-107-6027
Email: clientservice@brighterbee-learning.com
Part of consent request
IRIS provides great importance to your personal data, therefore IRIS requests for your consent to collection, use and/or disclose your personal data by Privacy Policy