Cookie Policy

1. Cookies and similar technologies

Cookies are small text files placed on your computer or phone when you visit a website. Similar technologies include local storage, pixels and scripts. We refer to these technologies collectively as “cookies” in this policy, while identifying our actual use below.

Session cookies normally last until you close your browser. Persistent cookies remain for a specified period or until deleted. First-party cookies are set by the site; third-party cookies are set by another provider. Local storage is browser storage, not an HTTP cookie, and remains until cleared or removed by the site.

2. Browser storage used on this website

Necessary cookie-preference storage

sbc.cookie-preferences.v1 is a first-party localStorage record used to remember your cookie choices. It includes the preference version, chosenAt and expiresAt, together with your category choices. Your choice is valid for 180 days; the website checks the recorded expiry and asks again when it expires. Browser storage may remain on your device until cleared or replaced. This record is not an analytics identifier.

Authentication storage for administrators

When an authorised user signs in, our authentication system uses browser storage for a sign-in token. This is necessary for access to protected administration services, not tracking. It is not created simply by reading public pages. It is cleared when signing out; session validity is controlled by the authentication system.

Font delivery

The website loads its typefaces from Google Fonts. Your browser connects to Google to request the fonts, which can reveal your IP address and technical request information. This is separate from Google Analytics and is not article-view tracking.

Independent hosting and security records

The hosting platform may independently use technical request logs, cookies or other security records to deliver and protect its infrastructure. These records are separate from SBC’s optional article analytics. Please contact our Data Protection Officer if you would like further information about hosting-related processing.

Necessary preference and authentication storage serves the functions you request and does not require consent for analytics. No optional service is activated by choosing “accept” in the current settings.

Future services

Before enabling Google Analytics, Cloudflare or any other new service, we will update this policy with the verified provider, purpose, storage names and duration. Any non-essential technology will require an appropriate consent choice before activation. Cookies sometimes associated with those services, such as __cf_bm, _ga and _ga_<ID>, are not listed as currently active project cookies.

3. Your choices and browser controls

The cookie-preference banner lets you accept all, reject non-essential categories or manage your choices. In this release, optional analytics and advertising remain inactive regardless of your choice. You can review or change preferences at any time using cookie settings.

You can also block or delete cookies and clear website local storage in your browser. See the help pages for Google Chrome, Apple Safari, Mozilla Firefox or Microsoft Edge. Clearing preference storage makes the banner appear again; blocking necessary storage may prevent your choices being remembered or interrupt administrator sign-in.

You can read our public legal notices without accepting optional cookies or logging in. Google offers a browser add-on to opt out of Google Analytics on other sites; it is not required to stop analytics on this release, because we have not enabled it.

4. Who can access data and overseas processing

The preference record is stored in your browser. Administrator authentication data is used by the authentication system to provide protected access. A limited number of authorised SBC staff and providers supporting the website may access relevant operational data where necessary for their work.

Our hosting provider, Skywork, may process operational and security data on servers outside Thailand. Google Analytics and Cloudflare are not enabled project providers for this release. For our confidentiality, provider and cross-border safeguards, see the sharing and overseas-transfer sections of our Privacy Notice.

5. Your data-protection rights

Where cookie or technical data is personal data, you have the rights described in our Privacy Notice, including withdrawing consent where relied upon and complaining to Thailand’s Personal Data Protection Committee.

6. Policy updates and contact

We will update this policy before changing the technologies we enable and publish a revised effective date. For questions or rights requests, contact our Data Protection Officer: