Soho Hospitality Co., Ltd.

At Soho Hospitality Co., Ltd. ("Soho Hospitality," "we," "our," or "us"), we are committed to protecting your personal data in accordance with the Personal Data Protection Act B.E. 2562 (2019) of Thailand ("PDPA").

This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you interact with our corporate website — including when you contact us for business enquiries, submit a job application, or access publicly available information about our company and portfolio.

1. What Personal Data We Collect

Depending on how you interact with our corporate website, we may collect the following types of personal data:

1.1 Contact & Business Enquiries

• Full name
• Job title and company name
• Business email address and phone number
• Nature of your enquiry or message

1.2 Job Applications & Recruitment

• Full name, contact details, and nationality
• CV, cover letter, and professional portfolio
• Employment history and educational background
• References (where voluntarily provided)

1.3 Technical & Website Usage Data

• IP address and general geographic location
• Browser type, operating system, and device information
• Pages visited, referral source, and time spent on site
• Cookies and similar tracking technologies

1.4 Investor & Partner Relations

• Name and business contact details
• Company affiliation and role
• Communication records related to business proposals or partnerships

2. How We Collect Your Data

We collect your personal data through the following means:

• Directly, via contact forms, email, or telephone on our corporate website
• When you submit a job application or express interest in a career opportunity
• Through cookies and analytics tools when you browse our website
• When you subscribe to corporate communications, press releases, or investor updates
• Via third-party professional platforms (e.g., LinkedIn) where you engage with our company profile

3. Purposes of Data Collection

We use your personal data for the following purposes:

• To respond to business, media, or investor enquiries
• To process and evaluate job applications and manage recruitment processes
• To maintain and improve the performance and security of our corporate website
• To send relevant corporate updates, press releases, or announcements (where you have opted in)
• To conduct internal reporting, analytics, and strategic planning
• To comply with legal, regulatory, and governance obligations

Note: We do not use your data submitted via this corporate website for restaurant bookings, event marketing, or venue-specific promotions. Such activities are governed by separate privacy notices applicable to our individual venues.

4. Legal Grounds for Processing

Under the PDPA, we rely on the following lawful bases for processing your personal data:

• Consent — for optional communications such as corporate newsletters or press updates
• Contractual necessity — for processing job applications or formalising business agreements
• Legal obligation — for regulatory compliance, record-keeping, and audit purposes
• Legitimate interests — for website analytics, security, and business development activities

You may withdraw your consent at any time by contacting us (see Section 9).

5. Disclosure of Personal Data

We may share your personal data with:

• Our internal departments and group entities for legitimate business purposes
• Trusted third-party service providers, including IT systems, hosting infrastructure, and analytics platforms
• Recruitment agencies or background screening providers, where applicable to job applications
• Legal, regulatory, or governmental authorities, where required by law

We will never sell your personal data to third parties.

6. Cross-Border Data Transfers

Some of our third-party service providers may store or process data on servers located outside Thailand. Where such transfers occur, we ensure they are conducted in compliance with the PDPA and that appropriate safeguards are in place to protect your personal data.

7. Retention Period

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. For example:

• Business enquiry data is typically retained for up to 2 years after last contact
• Job application data is retained for up to 1 year following the conclusion of a recruitment process, unless you are hired
• Website usage data is retained in accordance with our cookie policy and analytics provider settings

Once the applicable retention period expires, we will securely delete or anonymise your data.

8. Cookies & Tracking Technologies

Our corporate website uses cookies and similar technologies to analyse traffic, understand user behaviour, and improve site performance. You may manage or withdraw your cookie preferences at any time through your browser settings or our cookie consent tool.

For full details, please refer to our separate Cookie Policy available on this website.

9. Your Rights Under the PDPA

As a data subject, you have the following rights:

• Right to Access — request a copy of the personal data we hold about you
• Right to Rectification — request correction of inaccurate or incomplete data
• Right to Erasure — request deletion of your personal data, subject to legal obligations
• Right to Restrict Processing — request that we temporarily suspend use of your data
• Right to Data Portability — request transfer of your data in a structured, machine-readable format
• Right to Withdraw Consent — opt out of consent-based processing at any time
• Right to Object — object to processing based on legitimate interests, including direct marketing

To exercise any of these rights, please contact us using the details provided in Section 10 below.

10. Contact Us

For data protection enquiries, requests, or complaints, please contact:

Soho Hospitality Co., Ltd.

Email: info@sohohospitality.com

Phone: 02 255 3511

Address: Ocean Tower 2, 75/36-37 Sukhumvit Road, Soi Sukhumvit 19, Khlong Toei, Bangkok 10110, Thailand

11. Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or business operations. The effective date at the top of this document will be revised accordingly. We encourage you to review this policy regularly. For significant changes, we will post a notice on our corporate website.