Privacy Policy

What is personal information?

Personal data* means “information about an individual that enables the identification of that individual, either directly or indirectly, but does not include information specifically about a deceased person.”

Personal information we collect

We will collect the following personal data:

1. [Personally identifiable information such as name, address, contact information, telephone number, email]
2. [xxx information]
3. [y informationyy]
4. […]

Sources of personal data

We may receive your personal information through two channels as follows:

1. 1. We receive personal information directly from you. We collect your personal information from the service process as follows:
   1. The process of applying for services with us or the process of submitting requests to exercise various rights with us
   2. By voluntarily completing a survey or responding via email or other communication channels between us and you.
   3. Collected from your website usage information via your browser's cookies.
   4. […]
2. We receive your personal data from the following third parties:
   1. [Third party disclosing information]
   2. […]
3. By obtaining information in the following ways:
   1. [Methods such as receiving by email, receiving by phone, receiving by document]
   2. […]

Purpose of data processing

1. [We collect your personal information for….]
2. [We collect your personal information for….]

Processing of personal data

Once we receive personal data from the source of the personal data, we will process your personal data as follows:

• Collect [processing details]
• Use [Processing details]
• Disclosure of [processing details] The persons and entities to whom we may disclose your personal data are as follows:

[List or categories (as detailed as possible) of persons who may have received personal data from you] 

We may also need to submit your personal data to credit bureaus for verification and may use the results of such verification for fraud prevention purposes.

We may need to transfer your personal data to foreign entities or international organizations.

Countries are listed as follows:

[List]

Such agencies have adequate safeguards in place to protect personal data and are able to enforce data subject rights, including legal remedies available to them, as detailed below.

[Brief details of the personal data protection standards of the agency and the country in which the agency is located]

Storage and retention period of personal data

Retention of personal data

The controller holds your personal data as follows:

1. Storage characteristics [Save as Soft Copy / Hard Copy]

2. Storage location [Keep in a room, cabinet with safety equipment / Keep on a computer / Keep on the Cloud that uses the service with…]

3. Storage period is in accordance with the topic: Period of processing of personal data.

4. When the storage period has expired or we no longer have the right or can claim the basis for processing your personal data, we will destroy that personal data by the following methods: [How to destroy in case of Soft Copy / Hard Copy] and will be completed within [Number of days] Days from the date of expiration of the said period

Duration of personal data retention

We collect personal data as follows:

1. [Personally identifiable information such as name, address, contact information, telephone number, email]
   Processing period: 10 years from the date of termination
2. [xxx information]

Data Owner Rights

You have the right to do the following:

(1) Right to withdraw consent: You have the right to withdraw your consent to the processing of your personal data that you have given us at any time during the period that your personal data is with us.

(2) Right of access to personal data: You have the right to access your personal data and request that we provide you with a copy of that personal data, including requesting that we disclose the source of any personal data that you have not given us consent to.

(3) Right to rectification of personal data: You have the right to request that we correct inaccurate information or add incomplete information.

(4) Right to erasure: You have the right to ask us to delete your data for certain reasons.

(5) Right to restriction of processing of personal data: You have the right to suspend the use of your personal data for certain reasons.

(6) Right to data portability: You have the right to have your personal data transferred to another data controller or to yourself for certain reasons.

(7) Right to object to the processing of personal data: You have the right to object to the processing of your personal data on certain grounds.

You can contact our DPO/Department Officer to submit a request to exercise the above rights (contact details are in the “Contact Channels” section below) or you can study the details of the conditions and request for exemption from exercising various rights at [link Details of rights use*] Or you may study more at [link] Information for personal data owners, such as TDPG3.0, the Ministry of Digital Economy and Society website http://www.mdes.go.th]

You do not need to pay any expenses to exercise the above rights. We will consider and notify you of the results.

We will consider your request within 30 days from the date we receive it.

Marketing and promotion activities

During the use of the Service, we will send you information about marketing activities and promotions of our products and services that we think may be of interest to you in order to provide you with the most efficient service. If you have agreed to receive such information from us, you have the right to revoke such consent at any time. You can revoke your consent to receive information notifications by following these steps:

[Procedure for cancelling the receipt of information]

Cookies

What are cookies?

Cookies are text files placed on your computer that are used to store details of your internet usage logs or website browsing behavior. You can learn more about Cookies at https://www.allaboutcookies.org/

How do we use Cookies?

We will collect website visit information from all visitors through Cookies or similar technologies. We will use Cookies to improve the efficiency of accessing our services via the internet, including improving the efficiency of using our services via the internet. It will be used in the following cases:

1. To enable you to continuously sign in to your account on our website.
2. To study your website usage behavior in order to develop it to be easier, faster, and more efficient to use.
3. […]

What types of Cookies do we use?

We use the following cookies on our website:

1. [Functionality – cookies used to remember customer preferences, such as language preferences, etc.]
2. [Advertising – cookies used to remember what customers have visited in order to present products, services or advertising media that are relevant to the interests of users]
3. […]

Cookie Management

You can set your browser not to accept our cookies. Here are the steps to manage cookies:

[Setting steps may be set for Google Chrome / Safari / Internet Explorer, etc.]

Privacy Policy of other websites

This Privacy Policy applies only to our services and your use of our website. If you click on a link to another website (even through a channel on our website), you will be required to review and comply with the privacy policies that appear on that website, which are separate from ours.

Changes to the Privacy Policy

We will review this Privacy Policy regularly to ensure compliance with applicable practices and laws and regulations. If we make any changes to this Privacy Policy, we will notify you by updating the information on our website as soon as possible.

This Privacy Policy was last revised on [dd/mm/yy].

Contact channels

Data Controller Details

name: [Thai and English name (if available)]
Contact Address: [Head office address, workplace of the data controller]
Contact channels: 
[telephone]
[email]
[website]
[Contact channels or other news: such as LINE, Facebook, Instagram, Twitter or other social media]

Details of responsible representative (if any)

[Note: In the case where the organization is an individual or juristic person located outside the Kingdom, according to Section 5, paragraph two of the Personal Data Protection Act B.E. 2562]

Name of responsible representative: [Thai and English name (if available)]
Contact Address: [Head office address, workplace of the data controller]
Contact channels:
[telephone]
[email]
[website]
[Contact channels or other news: such as LINE, Facebook, Instagram, Twitter or other social media]

Details of the Data Protection Officer (DPO) (if any)

name: [Thai and English name (if available)]
Contact Address: [Head office address, workplace of the data controller]
Contact channels:
[telephone]
[email]

Regulatory agency details

In the event that we or our employees or staff violate or fail to comply with the Data Protection Act, you may lodge a complaint with the supervisory authority as follows:

Name: Office of the Personal Data Protection Committee
Contact Address: [address]
Contact channels:
[telephone]
[email]
Contact / Complaint Time [Within…days from….. ]