Privacy Policy

Your privacy matters to us. Learn how we protect your information.

Event Information

Contact Information

Our Privacy Commitment

Introduction

The 20th International Symposium of the Protein Society of Thailand (“we,” “us,” or “our”) is committed to protecting your privacy.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and participate in our symposium.

1. Information We Collect

We may collect information about you in a variety of ways:

• Registration Information: When you register for the symposium, we collect your title, full name, gender, email address, phone number, dietary preference, PST membership number, registration type, attendance mode, academic status, faculty, university, contact address, and billing information (name, address, city, state, postal code, country).
• Payment Documentation: We collect payment slip uploads and, where applicable, supporting evidence files (e.g. student card, employee card) required to verify your registration category.
• Authentication & Security Data: When you log in or register, we automatically record your IP address, browser user-agent string, login timestamp, and the outcome of each login attempt (success or failure). This information is stored in our login audit and activity logs.
• Session Information: Upon successful login, a secure session token is created and stored server-side. A session cookie is placed in your browser to link your requests to that token.
• Communication Information: When you contact us or use the in-platform messaging system, we may collect the content of your communications and any attachments.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To process your symposium registration and provide symposium materials
• To communicate with you about symposium updates, schedules, and important announcements
• To send promotional communications (if you opted in)
• To improve our website and symposium experience
• To comply with legal obligations and enforce our terms
• To conduct research and gather analytics about attendee preferences

3. Information Sharing

We do not sell, trade, or rent your personal information to third parties. However, we may share your information with:

• The Protein Society of Thailand for symposium coordination
• Chulalongkorn University for administrative purposes
• Service providers who assist us in operating our website and conducting the symposium (under confidentiality agreements)
• Law enforcement when required by law

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include:

• Password Hashing: All account passwords are hashed using bcrypt (cost factor 12) and are never stored in plain text.
• Email Verification (OTP): When enabled, new registrants must verify their email address using a 6-digit One-Time Password (OTP) that expires within 10 minutes.
• Rate Limiting & Account Lockout: Failed login attempts are rate-limited to 10 attempts per 15 minutes per IP address. After 10 consecutive failed attempts, accounts are temporarily locked for 30 minutes. OTP requests are limited to 3 per 15-minute window.
• CSRF Protection: All forms and AJAX actions are protected with cryptographic nonces to prevent cross-site request forgery.
• Secure Session Cookies: Session cookies are set with the HttpOnly, Secure (HTTPS), and SameSite=Lax flags to mitigate XSS and CSRF risks.
• File Upload Security: Uploaded files (payment slips, evidence documents, abstract files) are validated by MIME type and stored in a protected directory with direct web access disabled.
• Audit Logging: All login attempts (successful and failed), administrative actions, and member activity are recorded with IP address and timestamp in our audit logs.

However, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security of your information.

5. Your Rights

You have the right to:

During registration, you are required to give explicit consent by checking two separate boxes: one for the Terms and Conditions and one for this Privacy Policy. Both consents are mandatory to complete your registration.

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information (subject to legal requirements)
• Opt-out of marketing communications
• Withdraw consent at any time by contacting us at the address below
• Request a copy of your personal data in a portable format

6. Cookies

Our website and member portal use the following cookies:

• Session Cookie (Name: pst2026_session): This is a strictly necessary, HttpOnly, Secure, SameSite=Lax cookie set upon successful login to the member portal. It stores an encrypted session token that links your browser to your account session on our server. No personal data is stored inside the cookie itself — only the server-side token reference. Duration: 1 day (standard login) or up to 30 days if you select “Remember Me”. The cookie is automatically cleared when you log out or your session expires.
• Analytics & Third-Party Cookies: Third-party services described in Section 7 (Google Analytics, Google Search Console) may set their own cookies. Please refer to their respective privacy policies for details.

You can control or delete cookies through your browser preferences. Please note that disabling the session cookie will prevent you from accessing the member portal.

7. Third-Party Services and User Consent

We use third-party services to help us understand how our website is used and to improve your experience. These services may collect and analyze data about your visit to our website.

Google Search Console

What it does: Google Search Console is a free tool provided by Google that helps us monitor and maintain our website’s presence in Google Search results. It provides insights into how Google sees our site and helps us optimize our search visibility.

Data collected: Google Search Console collects data about how your device accesses our website, including:

• Your IP address
• Browser and device information
• Pages you visit and how you interact with them
• Search queries that lead you to our site
• Referring website information

Your consent: By visiting our website, you consent to the use of Google Search Console verification and monitoring. This is necessary to optimize our website for search engines and provide better user experience.

Opt-out: You can prevent Google from tracking your activities by:

• Using privacy extensions and ad blockers in your browser
• Installing the Google Analytics Opt-out Browser Add-on
• Adjusting your privacy settings in your browser
• Managing your Google Account privacy settings at myaccount.google.com

Google Analytics

What it does: Google Analytics is a powerful analytics tool that helps us understand how visitors interact with our website. It provides detailed reports about website traffic, user behavior, and engagement patterns to help us improve our services.

Data collected: Google Analytics collects the following information through cookies and other tracking technologies:

• Your IP address
• Browser type, operating system, and device information
• Pages visited, time spent on each page, and scroll depth
• Click and interaction events on the website
• Referral source (how you found our website)
• Geographic location (country, city level)
• Language preferences
• Session duration and frequency

Your consent: By continuing to use our website, you consent to the collection and processing of your data by Google Analytics. This data helps us understand our audience and optimize the symposium website experience.

Data retention: Google Analytics retains your data according to your account settings. By default, user-level and event-level data is retained for 14 months.

Opt-out options: You can opt out of Google Analytics tracking through several methods:

• Install the Google Analytics Opt-out Browser Add-on (available for Chrome, Firefox, Safari, Edge, and Opera)
• Disable cookies in your browser settings
• Use private or incognito browsing mode
• Manage your Google Account settings at Google Data & Privacy settings
• Use a VPN or privacy-focused browser

Google’s Privacy Policy: For more information about how Google processes your data, please review Google’s Privacy Policy and Google’s Cookie Policy.

8. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us:

Center of Excellence in Systems Biology (CUSB)
Faculty of Medicine
Chulalongkorn University
Bangkok 10330, THAILAND

Email: CUSB.PROTEOMICS@GMAIL.COM
Phone: +66 2 652 4927

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.
We will notify you of any significant changes by posting the updated policy on our website and updating the “Last Updated” date below.

Last Updated: April 1, 2026