What is personal information?

“Personal Data” means any information relating to a person, which enables the identification of such person, whether directly or indirectly, but not including the information of the deceased persons in particular.*

Personal Information We Collect

We will collect the following personal information:

1. [Identifiable information such as name, address, contact information, telephone number, and email]
2. [xxx information]
3. [yyy information]
4. […]

Sources of Personal Information

We may obtain your personal data through the following two channels:

1. We obtain personal data directly from you, whereby we will collect your personal data from the service provision process as follows:
   1. The registration process for our services, or the procedure for submitting a request to exercise your rights with us.
   2. Based on your voluntary submission of surveys, email interactions, or other communication channels between you and us.
   3. From your usage of our website through your browser’s cookies.
   4. […]
2. e receive your personal information from third-party sources as follows:
   1. [Third parties that disclose information]
   2. […]
3. By obtaining the data through the following methods:
   1. [Methods including receipt by email, verbal notification via phone, or in physical document format]
   2. […]

Purposes of Processing Personal Data

1. [We collect your personal data for the purpose of…]
2. [We collect your personal data for the purpose of…]

Personal Data Processing

Once your personal data has been obtained from the sources, we will take the following actions regarding your personal data:

• Collection [details of processing]
• Use [processing details]
• Disclosure [processing details]. The third parties or organizations to which we may disclose your personal data include the following:

[Names or categories (specified with the highest possible level of detail) of entities who may receive your personal data]

Furthermore, we may be required to transfer your personal information to credit bureau agencies for assessment, and the findings may be utilized for the purpose of fraud prevention.

We may find it necessary to transfer your personal data to overseas agencies or international organizations.

…countries, the list of which is as follows:

[List of countries / entities]

Such entities maintain adequate personal data protection measures (appropriate safeguards), ensuring that data subject rights are enforceable and that effective legal remedies are available, as detailed below:

[A brief summary of the personal data protection standards implemented by the entity and the country of its establishment]

Data Retention and Storage Period

Personal Data Retention

The Controller stores your personal data in the following manner:

1. Method of Storage [Stored in electronic format (Soft Copy) / Physical document format (Hard Copy)]

2. Storage Location [Maintained in secure rooms or locked cabinets / Stored on local computers / Hosted on Cloud services provided by…]

3. Retention Period: Refer to the section “Processing Period of Personal Data”.

4. When the retention period expires, or in the event that we have no further legal ground or basis to process your personal data, we will proceed to delete or destroy such personal data by means of [destruction method for Soft Copy / Hard Copy]. This action will be completed within [number] days from the end of the specified period.

Personal Data Retention Period

We retain your personal data in the following categories:

1. [Identity Data, including name, address, contact information, phone number, and email address]
   Retention Period: 10 years commencing from the date of contract termination.
2. [Details of xxx]

Rights of the Data Subject

As a data subject, you are entitled to exercise the following rights:

(1) Right to Withdraw Consent: You are entitled to withdraw your consent to the processing of your personal data at any time as long as your personal data remains in our possession.

(2) Right of Access: You have the right to access your personal data and request a copy of such data from us, including the right to request disclosure of how we obtained your personal data without your consent.

(3) Right to Rectification: You have the right to request that we rectify any inaccurate personal data or update any incomplete information.

(4) Right to Erasure: You have the right to request the deletion or destruction of your personal data under certain circumstances.

(5) Right to Restriction of Processing: You have the right to request the restriction of the use of your personal data under certain circumstances.

(6) Right to Data Portability: You have the right to obtain your personal data provided to us and request the transfer of such data to another data controller or directly to yourself under certain circumstances.

(7) Right to Object: You have the right to object to the processing of your personal data under certain circumstances.

ou may reach out to our Data Protection Officer (DPO) or our authorized personnel to lodge a request to exercise any of the rights listed above (our contact details can be found under the “Contact Channels” section below). Furthermore, you can examine the specific terms, conditions, and exemptions regarding your rights at [Link to Rights Details], or seek further guidance at [Link to Data Subject Resources, such as TDPG 3.0, or the Ministry of Digital Economy and Society website: http://www.mdes.go.th].*

Please note that you are not required to pay any fees to exercise the rights stated above. We will review and notify you of the result of your request [within 30 days from the date of receipt].

Please note that you will not incur any costs to exercise the aforementioned rights. We will consider and notify you of the outcome of your request within 30 days from the date we receive such request.

Marketing and Promotional Activities

During your use of our services, we may send you information regarding marketing and promotional activities, products, and services that we believe may interest you, in order to provide you with the most efficient service. If you have agreed to receive such updates from us, you retain the right to withdraw your consent at any time. You may opt-out or unsubscribe from these communications by following these steps:

[Steps to Opt-Out of Marketing Communications]

Use of Cookies

What are cookies?

Cookies are text files placed on your computer to collect standard internet log information and visitor behavior information. You can find more details about cookies at https://www.allaboutcookies.org/

How Do We Use Cookies?

We collect browsing data from all website visitors via cookies or similar technologies. We utilize cookies to optimize the accessibility and performance of our online services, specifically under the following circumstances:

1. To allow you to continuously stay signed in to your account on our website.
2. To analyze your website browsing behavior in order to enhance usability, speed, and overall performance.
3. […]

What Types of Cookies Do We Use?

The following types of cookies are utilized on our website:

1. [Functional Cookies: Cookies utilized to recall user-defined preferences, such as language settings and region choices.]
2. [Advertising Cookies: Cookies utilized to track your browsing history and deliver relevant products, services, or advertisements tailored to your specific interests.]
3. […]

Managing Cookies

You can set your browser to refuse our cookies. The procedure for managing your cookie settings is outlined below:

[How to Manage Cookies via Google Chrome / Safari / Microsoft Edge]

Privacy Policies of Other Websites

This Privacy Policy applies exclusively to our services and your use of our website. Should you follow any links to third-party websites (even if accessed via our platform), you are required to review and adhere to the privacy policies of those specific websites independently.

Changes to Our Privacy Policy

We periodically review this Privacy Policy to ensure it remains compliant with best practices, as well as applicable laws and regulations. Any updates or modifications to the policy will be communicated to you by publishing the revised version on our website at the earliest opportunity.

This Privacy Policy was last updated on [dd/mm/yy].

Contact Information

Data Controller Details

Name: [Thai and English Name (if applicable)]
Address: [Head Office Address / Place of Business of the Data Controller]
Contact Channels:
[Phone Number]
[Email Address]
[Website URL]
Other Channels / Social Media: [e.g., LINE, Facebook, Instagram, X (Twitter), or other Social Media platforms]

Authorized Representative Information (if any)

[Note: Applicable in cases where the data controller is an individual or a juristic person residing outside the Kingdom of Thailand, pursuant to Section 5, paragraph two of the Personal Data Protection Act B.E. 2562 (2019)]

Representative Name: [Thai and English Name (if applicable)]
Address: [Head Office Address / Place of Business of the Representative]
Contact Channels:
[Phone Number]
[[Email Address]
[Website URL]
Other Channels / Social Media: [e.g., LINE, Facebook, Instagram, X (Twitter), or other Social Media platforms]

Data Protection Officer (DPO) Information (if any)

DPO Name: [Thai and English Name (if applicable)]
Address: [Head Office Address / Place of Business of the Data Protection Officer]
Contact Channels:
[Phone Number]
[Email Address]

Supervisory Authority Details

If we, our employees, or our personnel breach or fail to comply with applicable personal data protection laws, you have the right to file a complaint with the supervisory authority, whose details are provided below:

Name: Office of the Personal Data Protection Commission (PDPC)
Address: [Address]
Contact Channels:
[Phone Number]
[Email Address]
Complaint Timeline: [Within … days from the date of knowing the violation or non-compliance]