Privacy Policy

What is personal information?

Personal data* means “information about an individual that enables the identification of that individual, either directly or indirectly, but does not include information specifically about a deceased person.”

Personal information we collect

We will collect the following personal data:

[Personally identifiable information such as name, address, contact information, telephone number, email]
[xxx data]
[ข้อมูล yyy]
[…]

Sources of personal data

We may receive your personal information through two channels as follows:

1. We receive personal information directly from you. We collect your personal information from the service process as follows:
1. The steps to apply for services with us or the steps to submit a request to exercise various rights with us
2. From your voluntary participation in a survey or correspondence via email or other communication channels between us and you
3. Collected from information about your use of our website through your browser’s cookies
4. […]
We receive your personal data from the following third parties:
1. [Third party disclosing the information]
2. […]
By obtaining information in the following ways:
1. [Methods such as receiving by email, receiving by phone, receiving by document]
2. […]

Purpose of data processing

[We collect your personal information for….]
[We collect your personal information for….]

Processing of personal data

Once we receive personal data from the source of the personal data, we will process your personal data as follows:

Collect [processing details]
Use [Processing details]
Disclosure of [processing details] The persons and entities to whom we may disclose your personal data are as follows:

[List or categories (as detailed as possible) of persons who may have received personal data from you]

We may also need to submit your personal data to credit bureaus for verification and may use the results of such verification for fraud prevention purposes.

We may need to transfer your personal data to foreign entities or international organizations.

Countries are listed as follows:

[List]

Such agencies have adequate safeguards in place to protect personal data and are able to enforce data subject rights, including legal remedies available to them, as detailed below.

[Brief details of the personal data protection standards of the agency and the country in which the agency is located]

Storage and retention period of personal data

Retention of personal data

The controller holds your personal data as follows:

1. Storage type [Stored as Soft Copy / Hard Copy]

2. Storage location [Keep in a room, cabinet with safety equipment / Keep on a computer / Keep on the Cloud using the service with…]

3. Storage period is in accordance with the topic: Period of processing of personal data.

4. When the storage period has expired or we no longer have the right or cannot claim the basis for processing your personal data, we will destroy that personal data by the following methods: [Method of destruction in the case of Soft Copy / Hard Copy] and will complete the process within [number of days] days from the end of the said period.

Duration of personal data retention

We collect personal data as follows:

[Personally identifiable information such as name, address, contact location, telephone number, email]
Processing period: 10 years from the date of termination of the contract.
[xxx information]

Data Owner Rights

You have the right to do the following:

(1) Right to withdraw consent: You have the right to withdraw your consent to the processing of your personal data that you have provided to us at any time for the period that your personal data is with us.

(2) Right of access: You have the right to access your personal data and request that we provide you with a copy of that personal data, including requesting that we disclose the source of any personal data that you have not given us consent to.

(3) Right to rectification: You have the right to request that we correct inaccurate or incomplete personal data.

(4) Right to erasure: You have the right to request that we erase your personal data for certain reasons.

(5) Right to restriction of processing: You have the right to have your personal data restricted for certain reasons.

(6) Right to data portability: You have the right to have your personal data that you have provided to us portable to another data controller, or to yourself, for certain reasons.

(7) Right to object to processing of personal data: You have the right to object to the processing of your personal data on certain grounds.

You can contact our DPO/Departmental Officer to submit a request to exercise the above rights (contact details are shown in the “Contact Channels” section below) or you can study the details of the conditions and exemptions from the exercise of various rights at [link Details of the exercise of rights*] or you may study more at [link Information for owners of personal data, such as TDPG3.0, the website of the Ministry of Digital Economy and Society http://www.mdes.go.th]

You do not need to pay any expenses to exercise the above rights. We will consider and notify you of the results.

We will consider your request within 30 days from the date we receive it.

Marketing and promotion activities

During the use of the Service, we will send you information about marketing activities and promotions of our products and services that we think may be of interest to you in order to provide you with the most efficient service. If you have agreed to receive such information from us, you have the right to revoke such consent at any time. You can revoke your consent to receive information notifications by following these steps:

[Procedure for cancelling the receipt of information]

Cookies

What are cookies?

Cookies are text files placed on your computer that are used to store details of your internet log data or website browsing behavior. You can learn more about Cookies at https://www.allaboutcookies.org/.

How do we use Cookies?

We will collect website visit information from all visitors through Cookies or similar technologies. We will use Cookies to improve the efficiency of accessing our services via the internet, including improving the efficiency of using our services via the internet. It will be used in the following cases:

To enable you to continuously sign in to your account on our website.
To study your website usage behavior in order to develop it to be easier, faster, and more efficient to use.
[…]

What types of Cookies do we use?

We use the following cookies on our website:

[Functionality – cookies used to remember customer preferences, such as language preferences, etc.]
[Advertising – cookies used to remember what customers have visited in order to present products, services or advertising media that are relevant to the interests of the user]
[…]

Cookie Management

You can set your browser not to accept our cookies. Here are the steps to manage cookies:

[Setting steps may be set for use of Google Chrome / use of Safari / use of Internet Explorer, etc.]

Privacy Policy of other websites

This Privacy Policy applies only to our services and your use of our website. If you click on a link to another website (even through a channel on our website), you will be required to review and comply with the privacy policies that appear on that website, which are separate from ours.

Changes to the Privacy Policy

We will review this Privacy Policy regularly to ensure compliance with applicable practices and laws and regulations. If we make any changes to this Privacy Policy, we will notify you by updating the information on our website as soon as possible.

This Privacy Policy was last revised on [dd/mm/yy].

Contact channels

Data Controller Details

Name: [Name in Thai and English (if any)]
Contact address: [Address of head office, workplace of the data controller]
Contact channels:
[Telephone]
[email]
[website ]
[Contact channels or receive other news: such as LINE, Facebook, Instagram, Twitter or other Social Media]

Details of responsible representative (if any)

[Note: In the case where the organization is an individual or juristic person located outside the Kingdom, according to Section 5, paragraph two of the Personal Data Protection Act B.E. 2562]

Name of the responsible representative: [Name in Thai and English (if any)]
Contact address: [Address of the head office, workplace of the data controller]
Contact channels:
[Telephone]
[email]
[website]
[Contact channels or receive other news: such as LINE, Facebook, Instagram, Twitter or other Social Media]

Details of the Data Protection Officer (DPO) (if any)

Name: [Name in Thai and English (if any)]
Contact address: [Head office address, workplace of the data controller]
Contact channel:
[Telephone]
[email]

Regulatory agency details

In the event that we or our employees or staff violate or fail to comply with the Data Protection Act, you may lodge a complaint with the supervisory authority as follows:

Name: Office of the Personal Data Protection Committee
Contact address: [Address]
Contact channel:
[Telephone]
[email]
Period for contacting / complaints [within…days from….. ]