Personal Data Privacy Policy
1 General Provisions
Neo Thai Asia Co., Ltd. (hereinafter referred to as the “Company”) plays a role in driving today’s advanced information society and communications by providing cost-effective and beneficial IT systems, as well as high-quality communications to various companies[cite: 1]. The rapid development of the information society has led to an era where vast amounts of diverse data are processed rapidly[cite: 1]. The protection of personal data is therefore a social issue of utmost importance[cite: 1]. We recognize that personal data collected from our business activities is one of our most valuable assets, and we declare our commitment to properly managing and protecting personal data according to the following policy[cite: 1]:
2 Collection of Personal Data
2.1 The personal data collected, used, and/or disclosed by the Company includes:
- First name, last name, date of birth, nationality, photograph, national ID card photo and number, passport details, and passwords[cite: 1].
- Contact details, address, email address, phone number[cite: 1].
- Service usage behavior data and other information related to service provision[cite: 1].
- Data used for service improvement, including cases where customers encounter usage issues[cite: 1].
- Data necessary for the Company to comply with legal obligations, including data for auditing and related actions in cases where terms of service or any laws are violated[cite: 1].
The Company needs to collect the above personal data for contract performance or fulfillment of legal duties[cite: 1]. If you do not provide such data, the Company may not be able to provide services or proceed with your requests[cite: 1].
2.2 Sensitive Personal Data
Refers to personal data specifically designated by law, such as data of visually or hearing-impaired individuals, and biometric data[cite: 1]. The Company may collect, use, and/or disclose sensitive personal data for the purpose of verifying and authenticating the user’s identity only after obtaining your explicit consent, or when necessary as required by law[cite: 1].
3 Sources of Personal Data
The Company collects your personal data from various sources as follows[cite: 1]:
- Data provided directly by you to the Company, such as service registration[cite: 1].
- Data received from business partners or service providers whose services you have previously used[cite: 1].
- Data from public sources, such as information published on public websites or social media platforms[cite: 1].
4 Purposes of Collection, Use, and Disclosure
- To provide services under the contract to which you are a party, or to fulfill requests prior to entering into a contract[cite: 1].
- To develop and improve services to increase efficiency[cite: 1].
- To manage data for submission to internal and external audit entities to prevent fraud[cite: 1].
- To analyze data for service provision, marketing planning, and marketing activities of the Company and its business partners under legal agreements or relationships[cite: 1].
- To comply with applicable laws and/or for any other legitimate interests of the Company[cite: 1].
- For any other purposes permitted by law to collect, use, and disclose data without obtaining prior consent from the data subject[cite: 1].
- To provide after-sales service or requested support, assist usage, provide information, respond, and resolve complaints[cite: 1].
5 Disclosure of Personal Data to Third Parties
The Company will not disclose your personal data to third parties outside of our corporate group (“Third Parties”), except where necessary to achieve the collection and processing purposes stated in this privacy notice[cite: 1]. The Company may disclose your personal data to third parties, including[cite: 1]:
- Company distributors, service providers, and technology service providers[cite: 1].
- Cloud service providers[cite: 1].
- Government agencies, law enforcement agencies, and regulatory bodies as authorized by law[cite: 1].
- Other necessary third parties enabling the Company to conduct business, provide services, and carry out actions according to the purposes stated in this Privacy Policy[cite: 1].
6 Personal Data Retention Period
6.1 The Company will retain your personal data for as long as necessary to fulfill the operational purposes of each service type, during the duration of the contract or active legal relationship between you and the Company, unless a longer retention period is permitted by law[cite: 1].
6.2 The Company will delete, destroy, or anonymize personal data in accordance with the Company’s data destruction standards upon the expiration of the retention period, or when the Company no longer has the legal right or ground to process your personal data[cite: 1].
7 Overseas Transfer of Personal Data
The Company may need to transfer your data to affiliated companies, business partners with whom the Company has contracts or legal relationships, or cloud platform providers[cite: 1]. This is carried out for your benefit or overall business operations, and such data will be protected under standard personal data protection guidelines[cite: 1].
8 Your Rights as a Data Subject
You may request to exercise your rights under legal requirements and current policies, as well as future amendments and rules designated by the Company[cite: 1].
8.1 Right to Withdraw Consent
Once consent is granted to the Company for specific purposes, you have the right to withdraw your consent at any time, unless restricted by law or related to a contract beneficial to you[cite: 1]. Consent withdrawal may impact your rights and benefits; please review and inquire about consequences before proceeding[cite: 1]. If withdrawing consent prevents the Company from providing certain products or services, you will be notified accordingly[cite: 1].
You may contact Company staff to submit a request along with verification documents via designated channels to establish verifiable ownership of the personal data[cite: 1].
The Company reserves the right to reject requests made in bad faith, unreasonable/impracticable requests, or requests non-compliant with legal criteria[cite: 1].
8.2 Right to Access and Obtain a Copy
You have the right to request access to and obtain a copy of your personal data[cite: 1]. The Company may decline your request as permitted by law or court order[cite: 1].
8.3 Right to Data Portability
You have the right to receive your personal data if the Company renders it into a format readable or usable by automated tools, and capable of being used or disclosed by automated means[cite: 1].
8.4 Right to Object
You have the right to object to the collection, use, or disclosure of your personal data[cite: 1]. However, exercising this right may prevent the Company from serving you if processing is required by law or contract obligations[cite: 1]. The Company may retain, use, or disclose certain portions of personal data if allowed under legal exemptions, such as fraud prevention, claims, or legal obligations[cite: 1].
8.5 Right to Restriction of Processing
You have the right to request temporary restriction of personal data usage during data correction or objection verification, or when data must be erased under relevant laws but you request usage restriction instead[cite: 1].
8.6 Right to Erasure or Destruction
You have the right to request deletion, destruction, or anonymization of your data, except where contract fulfillment or legitimate legal grounds permit the rejection of your request[cite: 1].
8.7 Right to Rectification
You have the right to request corrections or updates to inaccurate or incomplete personal data to keep it accurate and up to date, subject to applicable legal requirements[cite: 1].
9 Security Measures and Data Quality
9.1 The Company recognizes the importance of personal data security and maintains appropriate safety protocols compliant with data confidentiality standards to prevent unauthorized access, loss, destruction, alteration, or disclosure, as well as unauthorized misuse[cite: 1].
9.2 Personal data received that identifies you will be kept accurate, current, and used solely in accordance with operational goals, while enforcing appropriate safeguards to protect data subject rights[cite: 1].
10 Marketing and Promotional Activities
During service usage, the Company may send news and promotional information regarding marketing, products, and services that may interest you[cite: 1]. You may cancel consent for promotional news at any time via designated channels[cite: 1].
11 Refusal to Provide Personal Data
The Company is required to collect personal data by law or for contract execution[cite: 1]. Refusing to provide personal data may result in the Company being unable to deliver services[cite: 1]. If processing relies on contractual or legal performance and consent for full data usage is withheld, you may still use services, though convenience may be reduced due to partial data utilization[cite: 1].
12 Data Protection Officer
The Company complies with the Personal Data Protection Act B.E. 2562 (2019) and has established regulations and instructions for personnel to ensure smooth and effective execution of this Privacy Policy[cite: 1].
13 Company Contact Information
Neo Thai Asia Co., Ltd.
Head Office: 252/93 Muang Thai-Phatra Complex Tower B, 17th Floor, Room 93 (A), Ratchadaphisek Road, Huai Khwang Subdistrict, Huai Khwang District, Bangkok 10310
