Privacy Policy

Who we are

• Registered name: Bluroca Co., Ltd. (บริษัท บลูโรกา จำกัด)
• Juristic person registration number: 0745569007435
• Registered office: 99/44 Moo 4, Ekkachai Road, Khok Kham Subdistrict, Mueang Samut Sakhon District, Samut Sakhon, Thailand
• Website: www.bluroca.com
• Email: info@bluroca.com

Information we collect

When you contact us, we may collect:

• Business name, contact person, phone number, email address, and Line or Facebook contact if you provide it.
• Technical details such as IP address and browser user agent, used for security, abuse prevention, and rate limiting.
• Website usage data from analytics tools, such as page visits and general engagement signals.

How we use information

• To respond to your message and evaluate how Bluroca may support your growth goals.
• To prevent spam, automated submissions, and repeated abuse of the contact form.
• To improve website content, navigation, and performance.
• To keep records of business conversations where reasonably necessary.

Services that process data

Contact form submissions and job applications are stored in our Supabase database. Uploaded application documents are stored in Cloudflare R2 object storage. We use Cloudflare Turnstile to verify that submissions are human, Google Analytics to understand site usage, and Resend to send confirmation emails when configured.

Posting to our LinkedIn page

We operate an internal application that publishes posts to our own BlurocaLinkedIn company page through LinkedIn’s Community Management API.

When a member of our staff connects that application to LinkedIn, we store the access token LinkedIn issues and the identifier of our company page. We use them only to publish posts we have written ourselves, such as job openings and company news.

We do not collect, store, or process LinkedIn member profiles, connections, follower lists, or engagement data, and we do not use the API to gather information about applicants, customers, or any other individual. Nothing you submit through this website is sent to LinkedIn.

Access tokens are held only while the connection is active, and only our own staff can authorise or use it. Disconnecting the application, or revoking its access from LinkedIn account settings, deletes the stored token.

How long we keep information

We keep inquiry records only as long as needed for business follow-up, operational records, security, or legal requirements. You can ask us to update or delete your contact information by emailing us.

Job application records are kept on the separate basis described below.

Recruitment and job applications

When you apply for a role through our careers page, we collect:

• First name and last name.
• Contact details you provide: email address, phone number, LINE ID, Facebook, and LinkedIn. Which of these are mandatory is set per job posting, and at least one way of reaching you is always required.
• Any message you choose to add to the application.
• A PDF document, up to 5 MB, only when the posting asks for one.
• Your IP address and browser user agent, recorded with the submission for security and abuse prevention.
• The date and time of submission and the application reference number our system generates.
• A record of your consent: that you gave it, when, and which version of the applicant notice you agreed to.
• Records we create while assessing you: the status of your application, internal notes from our recruitment team, and who reviewed it. These are your personal data and you may request access to them.

We use this to assess your application, contact you about it, arrange interviews, and tell you the outcome. We rely on your consent, given when you tick the consent box on the form, and on taking steps at your request before entering into a contract. Security and abuse prevention rely on our legitimate interest in protecting the site. Applicant data is never used for marketing.

Only Bluroca staff holding HR, admin, or manager roles can see applications. This is enforced in the database itself, not only in the interface. Uploaded documents are held in a private storage bucket that is never publicly accessible; staff open them through short-lived signed links.

How long we keep it. We keep applications and their documents for no longer than one year from the date you apply. After that we delete them, or remove anything in them that identifies you. Our HR team may delete a candidate sooner, and deleting a job posting removes its candidates as well; either way, the uploaded document is deleted along with the record. If you are hired, your data moves into your employee file and is kept for the period employment law requires.

To have your application deleted, or to exercise any other right below, email recruitment@bluroca.com.

The full applicant notice is published in Thai: นโยบายความเป็นส่วนตัวสำหรับผู้สมัครงาน.

Where your data is stored

Personal data collected through this website is stored outside Thailand. Our Supabase database is hosted in the ap-south-1 region (Mumbai, India). Cloudflare Turnstile and Cloudflare R2 operate on Cloudflare’s global network. Where data is transferred abroad, we use providers that apply appropriate safeguards and contractual protections, consistent with the PDPA’s requirements for cross-border transfers.

Your rights under the PDPA

Under the Personal Data Protection Act B.E. 2562 (2019), and subject to the conditions the law sets, you have the right to:

• Access your personal data and request a copy of it.
• Have inaccurate or incomplete data corrected.
• Request deletion of your personal data.
• Object to our collection, use, or disclosure of your data.
• Withdraw consent at any time. Withdrawal does not affect processing already carried out lawfully, and for job applications it may mean we can no longer consider you for the role.
• Lodge a complaint with the Personal Data Protection Committee.

To exercise any of these, email us using the addresses below. We will respond without delay and within 30 days of receiving your request.

Your choices

• You may choose not to submit the contact form.
• You may ask us to correct, update, or delete your submitted contact information.
• You may manage cookies through your browser settings. See our Cookie Policy for details.

Contact

For privacy questions or data requests, contact Bluroca at info@bluroca.com.

For anything concerning a job application, contact our HR team at recruitment@bluroca.com instead.