ACTIONCITY (THAILAND) COMPANY LIMITED (hereinafter referred to as the "Company" or "We" or “Us”), places great importance on the protection of Personal Data. As the Data Controller under the Personal Data Protection Act of 2019 ("PDPA"), we are obligated by law to provide you with this document to inform you of the reasons and methods by which we collect, use, or disclose your Personal Data. This includes notifying you of your rights as the Data Subject.

This Privacy Policy sets out the fundamental principles by which ACTIONCITY (THAILAND) COMPANY LIMITED may collect, use, disclose, or process the Personal Data of our customers when they use our services through the following channels:

• Registering as a member and logging in via the Company’s website (registration through Google, Facebook, mobile number, and email)
• Communicating with the Company via telephone
• Communicating with the Company via email
• Communicating with the Company via postal mail
• Communicating with the Company via LINE Official Account
• Collecting data from other sources, such as search engines, social media, public websites, third parties, and references
  
  
  

This Privacy Policy ("Policy") explains and contains essential information, including:

(a) Personal Data collected from you,

(b) Sources of Personal Data,

(c) Purposes for collecting, using, and disclosing Personal Data,

(d) Disclosure or sharing of Personal Data,

(e) Duration of Personal Data retention,

(f) Measures for the collection, retention, and processing of Personal Data and 

(g) Rights of the Data Subject.

Please be advised that this Privacy Policy may be subject to periodic changes to align with legal requirements. Any changes will be published on our website.
 
We recommend that you regularly review this Privacy Policy accordingly.

We will collect Personal Data either directly or indirectly, including information you provide directly through registration and/or use of our website and/or LINE Official Account, as well as other data we automatically receive from your experience using our services (as previously mentioned).

The Personal Data we collect from you can be categorized as follows:

3.1 Personal Data Provided Directly by You through Our Services

3.1.1 General Personal Data

• Identity Information: Such as Name, surname, age, date of birth, nationality, ID number, passport.
• Contact Information: Such as Address, phone number, email, LINE ID, Facebook name.
• Financial Data: Information related to Bank account number, bank book page.
• Statistical Data: Non-personal information and website traffic.
• Website Usage Data (Technical Data): Such as computer IP address, browser type, cookie information, operating system, platform, and device technology used to access the website. 
• Identity Verification Documents: Such as  photos, videos, and/or recorded images or video data.

3.2 Personal Data Automatically Collected through Your Use of Our Website

• Information about your browser, including the type of browser you use, browser language, browser settings, IP address, and cookie data
• Analytics data, such as Google Analytics, which collects Tracker and Usage Data
• Tag management data, such as Google Tag Manager, which collects Tracker and Usage Data

We collect your Personal Data directly from you, either through self-entry or online channels, including:

• Information you provide by filling out details on our website for usage
• Information from your contact with us to inquire about our services
• Information from you as a service user or registered user
• Information from you as a contractual party with us

5.1 Regarding Our Services

We will process your Personal Data within the scope defined by the Personal Data Protection Act and collect only the necessary information for the specified purposes. Additionally, we may use, collect, and process your Personal Data for various purposes as outlined below (" Purposes "). We have summarized the use of your Personal Data and explained the legal basis of processing as follows:

5.2 Regarding the Use of Services Through Our Website

We will not disclose your Personal Data to third parties unless required by law for necessary operational purposes. In such cases, we may disclose Personal Data in the following circumstances:

6.1 Disclosing Personal Data to government agencies, authorized agencies, or any person when required by law or authorized to do so, including compliance with court orders.

6.2 Disclosing Personal Data to individuals or legal entities when necessary to fulfill contracts for your benefits as the Data Subject, as well as to improve and develop our services for your and others' benefits

6.3 Disclosing Personal Data for national security, law enforcement, compliance with court orders, judicial processes, or other supervisory agencies.

6.4  We may store Personal Data in a cloud processing system (Cloud Computing) by using third-party services, whether located in Thailand or abroad, and/or with server providers in Thailand and/or overseas. We have entered into agreements with these parties with caution, taking into consideration the security systems provided by these service providers to safeguard Personal Data in compliance with data protection regulations.

We specify that external individuals or legal entities to whom we disclose or share your Personal Data as mentioned above must maintain confidentiality and protect your Personal Data in accordance with the standards set by the Personal Data Protection Act of 2019. They are allowed to use your Personal Data only for the specified purposes agreed upon between us and the external individuals or legal entities to prevent unauthorized disclosure and use of Personal Data information beyond the agreed-upon purposes.

7.1 We retain your Personal Data for the necessary period to carry out the purposes of providing services, in accordance with the timeframes set by accounting standards, legal standards, and other relevant regulations.

7.2 When determining the retention period for Data, we consider factors such as quantity, nature of usage, service objectives, sensitivity of Personal Data, and potential risks arising from unauthorized data usage. The timeframe is also set in compliance with applicable laws.

7.3 Personal Data obtained through cookies when you use the website will be retained for no longer than 13 months or as required by relevant laws.

7.4 In cases where we are required to comply with the law, court orders, or establish legal rights to resolve any disputes, we may retain Personal Data for the legal retention period or until the resolution of such disputes, as applicable.

8.1 Right of Access and Copy Request: You have the right to request access to, or receive a copy of, your Personal Data held within our responsibility. You may also request that we provide a copy of how we obtained your Personal Data.

8.2 Right to Data Portability: You have the right to request access to your Personal Data when we have processed it in a format that can be read or used by automated tools or devices. Additionally, you have the right to request that we send or transfer your Personal Data in such a format to another Data Controller when it can be done automatically.

8.3 Right to Object: You have the right to object to the collection, use, or disclosure of your Personal Data at any time, especially if you suspect that it interferes with the purposes or necessary operations according to our legally compliant interests, or for public interest.

8.4 Right to Erasure or Anonymization: You have the right to request the deletion or anonymization of your Personal Data if you believe that your Personal Data has been collected, used, and/or disclosed without legal authorization or if you think that we no longer need to retain it for the purposes outlined in this Policy. You also have this right if you have exercised your right to withdraw consent or objected to the processing, as indicated above.

8.5 Right to Suspend Data Usage: You have the right to temporarily suspend the use of your Personal Data in cases where we are in the process of verifying your request to exercise rights to correct Personal Data or to object to its use, or in other cases where it is unnecessary, and you wish us to suspend instead of delete.

8.6 Right to Correct Data: You have the right to correct your Personal Data to be accurate, up-to-date, and complete.

8.7 Right to File a Complaint: You have the right to file a complaint with the relevant legal authority if you believe that the collection, use, and/or disclosure of your Personal Data is done in a manner contrary to or not in compliance with the relevant laws.

8.8 Right to Withdraw Consent: You have the right to withdraw your consent at any time during the period when your Personal Data is with us, unless restricted by law or if there is a contract that benefits you. The exercise of these rights may be subject to legal limitations, and in some cases, we may refuse or be unable to comply with your requests, such as to comply with the law or court orders, for public benefit, or when it may infringe on the rights or freedoms of others. If we refuse any of the above requests, we will inform you of the reasons for such refusal.

9.1 We will safeguard your Personal Data through technical safeguards, administrative safeguards, and physical safeguards to maintain the confidentiality, accuracy, and availability of your Personal Data. These measures are implemented to prevent unauthorized access, collection, modification, alteration, use, and/or disclosure of Personal Data, in accordance with applicable laws.

9.2 We have monitoring systems in place to manage the destruction of unnecessary Personal Data in our operations.

9.3 In the case of sensitive Personal Data, we will implement security measures to control access and usage. This includes having operational systems, backup systems, and emergency plans in place, along with regular assessments of system risks to ensure continuous security.

However, despite our best efforts to protect your Personal Data, we cannot guarantee the security of any data transmitted over online channels. Therefore, the transmission of data remains at your own risk.

To enhance your user experience and improve efficiency, we use cookies to identify and track users of our website and their access to our site. This helps us develop access to products or services that are more tailored to your usage.

Cookies are text files stored on your computer that collect log details of your internet usage or your behavior when visiting websites. We use cookies to store information about your visits to our website, which allows us to provide better, faster, and more secure services when you use our website. We use cookies in the following situations:

Functionality Cookies: These cookies help us remember your device or browser, enabling us to quickly tailor content to your personal interests, making our services and platform more convenient and beneficial for you. You can disable these cookies by configuring your device settings and following the instructions provided by your browser or device.

Analytic Cookies: We use cookies for analysis provided by third parties to collect data on how visitors use our website. We anonymize all visitor data (Anonymization) and pass it to external parties who may use or disclose this data to others who process the information as permitted by law. Third parties will not combine your data collected from our website with any data they already possess. You can choose to disable this type of cookie on our website.

To safeguard your Personal Data from unauthorized access, collection, use, disclosure, alteration, destruction, or similar risks without permission, we recommend suitable physical and technical security measures. These measures include regularly updating virus protection, encryption, and disclosure of Personal Data internally and to authorized third parties only as necessary.

We may review and make changes to the Personal Data Protection Policy in the future to enhance data protection. Whenever there are modifications to this policy, we will notify you. Your continued use of our services after the announcement of any modifications or additions will be considered an acceptance of each respective change.

If you have suggestions, inquiries, or need information regarding the details of data collection, usage, and/or disclosure, including the exercise of rights according to this policy, you can contact us through the following channels:   

Contact Channels:

Email: cs@actioncity.co.th