Privacy Policy

This Privacy Policy (“Policy”) describes how PDPA Pro (“Endathoth Company Limited” or “we”) collects, uses and discloses personal information. (“Personal Information”) that you (“User” or “you”) provide for your use of the PDPA Pro Website and such products or services. (collectively referred to as the “Website” or “Services”) to comply with the Personal Data Protection Act 2019 (“PDPA”).

This includes explaining your choices regarding our use of your personal information and how you can access or keep your information current. This Policy does not apply to the operations of companies that we do not maintain or individuals that we do not employ or manage.

Information we collect automatically

When you visit the PDPA Pro website, our servers automatically record information that your browser sends. Such information may include the IP Address of your device. Browser type and version Operating system type and version The language you chose to use or the website page you visited before entering the PDPA Pro website The pages of our PDPA Pro website that you visited the length of time those websites are visited Information you search for on our PDPA Pro website, date and time of visits, and other statistics.

ข้อมูลที่ถูกรวบรวมโดยอัตโนมัติจะใช้เพื่อระบุการละเมิดที่อาจเกิดขึ้นและสร้างข้อมูลทางสถิติเกี่ยวกับการใช้งานเว็บไซต์ PDPA Pro โดยข้อมูลทางสถิตินี้จะไม่ถูกรวบรวมในลักษณะที่ทำให้ระบุผู้ใช้รายใดรายหนึ่งของระบบได้

Collection of personal information

You can visit the PDPA Pro website without telling us who you are or revealing any information that would allow others to specifically identify you. However, you will be asked to provide certain personal information (such as your name, and your email address) If you wish to use certain features of the PDPA Pro website, we receive and store any information you provide to us that you acknowledge when you create your user account. Announcement of content Make an order or fill out forms on the PDPA Pro website when necessary. Such information may include the following:

  • Personal information such as first name, last name, age, date of birth National identification number/passport
  • Contact information such as email, address, telephone number
  • Account information such as username Unique User ID Password
  • Proof of identity, such as a copy of your national ID card Copy of passport
  • Transactional and financial information such as credit card details, bank accounts, order history
  • Other information that you consent to send to us, such as articles, pictures, animations, suggestions, and any other information that is considered personal information according to personal data protection laws, etc.

You can choose not to provide us with your personal information. However, you will not be able to conveniently use some functions of the PDPA Pro website and services. Users who are not sure what personal information is required can contact us to inquire.

Personal information management

You can delete the personal information we have collected about you. The personal information that you can delete will change according to changes to the PDPA Pro website or services. However, once you have deleted your personal information, We may retain an unaltered copy of personal information in our records for the period necessary to perform our duties to our affiliate or partners. and the objectives are specified below. If you wish to delete your personal information or permanently delete your account on the PDPA Pro website. You can do this by going to the settings page of your account on the PDPA Pro website or by contacting us at your convenience.

Storage of personal information

We will retain your personal data for the period necessary to comply with our legal obligations, resolve disputes, and to enforce our contracts and terms and conditions. Unless it is necessary to continue collecting or as required by law. We may use aggregated information obtained from your personal data to update or delete it, but we will not use it in any way that would identify you personally. When the storage period expires Personal data will be deleted. Therefore, the right to request access, the right to request deletion, the right to request correction. Right to request data portability It will become unenforceable once the storage period has expired.

Your personal data will be sent outside the Kingdom of Thailand as our infrastructure is based in Singapore.

Use and Processing of Personal Data Collected

To make the PDPA Pro website and services available to you or to comply with legal obligations. Therefore, we need to collect some of your personal information. If you do not allow us to collect the information we request. We may not be able to provide you with the product or service you have requested. Some of the information we collect is obtained directly from you through the PDPA Pro website. However, we may collect your personal information from other sources. Including but not limited to Activities for introducing new buyers of Endathoth Company Limited, social media, email. The personal information we have collected from you may be used for the following purposes.

  • To create and manage user accounts
  • to make and manage orders
  • to deliver products or services
  • To improve products or services
  • To send administrative information
  • To send marketing communications or promotional information.
  • To respond to inquiries and offer assistance
  • To solicit feedback from users
  • To improve the user experience even further
  • To post or publicize your satisfaction with our products and services.
  • To enforce our terms and conditions and policies
  • To protect from unwanted and dangerous users
  • to respond to legal claims and avoid damages
  • To operate and manage the PDPA Pro website and services.
  • To participate in any other activities related to the PDPA Pro website and services.

The processing of your personal data depends on how you use the PDPA Pro website, where you are located. and if one of the following actions: (1) you have given consent for one or more specific purposes; however, this action will not apply if the personal data is subject to the Personal Data Protection Law of Thailand; (PDPA) (2) The information is necessary for the performance of the contract between you. and/or for performance before entering into a contract; (3) the processing of data is necessary for compliance with the law to which you are subject; (4) the processing of data is related to the performance of tasks in the public interest of us. or performing duties in the exercise of state power granted to us; (5) the processing of data is necessary for our legitimate interests; or of another person or legal entity.

The processing of your personal data depends on how you use the PDPA Pro website, where you are located. and if one of the following actions: (1) you have given consent for one or more specific purposes; however, this action will not apply if the personal data is subject to the Personal Data Protection Law of Thailand; (PDPA) (2) The information is necessary for the performance of the contract between you. and/or for performance before entering into a contract; (3) the processing of data is necessary for compliance with the law to which you are subject; (4) the processing of data is related to the performance of tasks in the public interest of us. or performing duties in the exercise of state power granted to us; (5) the processing of data is necessary for our legitimate interests; or of another person or legal entity.

We never sell your information to anyone. We use the services of external data processors as follows:

  • Amazon Web Services (Infrastructure and Services/Email Web Hosting) [Singapore]
  • Slack [United States]
  • Crisp [United States]
  • Hotjar [United States]
  • Howuku [United States]
  • Pipedrive [United States]
  • Google Workspace [USA/Singapore/Worldwide]
  • Google Analytics [USA/Singapore/Worldwide]
  • Stripe [United States/Japan]
  • Facebook Pixel [United States]
  • SurveySensum [United States]
  • Typeform [USA/EU]
  • Wiser Notify [United States]
  • Cookie Wow [Singapore/Thailand]
  • PDPA Form [Singapore/Thailand]
  • Primal [Thailand]

 

Sending or transferring personal information abroad

Depending on your location, transmission or transfer of data may involve transferring and storing data to countries other than your own. If any data is sent or transferred You can check the relevant sections of this document or inquire with us using the information we provide in the contact section.

Your usage data is stored securely in Singapore. PDPA Pro hosts its core infrastructure in Singapore. We have complied with the Personal Data Protection Act of Thailand B.E. 2019 (2019) and have given us the right to request as required by law.

Although we host some personal information outside of Thailand, We maintain appropriate data protection measures and employ data centers that meet the highest standards of protection and availability. This is because we cannot find any data center in Thailand that meets the standards. We are therefore required to host our core infrastructure in Singapore for a disaster recovery facility, while some personal data used for billing is stored and processed in Thailand.

User rights

You can exercise certain rights you have regarding your data processed by us. especially You have the following rights: (1) You have the right to revoke the consent you previously gave to the processing of your data. However, revoking such consent will not affect the collection, use, or disclosure. Personal information to which you have previously given consent in accordance with the law. (2) You have the right to object to the collection, use, or disclosure of your personal information at any time. unless the collection, use, or disclosure of your personal data is done for necessary operations under our legitimate interests or those of other persons or legal entities. or for carrying out missions for the public benefit and that the collection, use, or disclosure of personal information does not exceed the extent that you can reasonably expect. (3) You have the right to know your information that has been processed by us. received from disclosure related to data processing and request that we make a copy of it for you; (4) you have the right to confirm the accuracy of your information and request that we Correct your personal information to keep it accurate and current. (5) You have the right to suspend the processing of your information. In such case We will not process your information other than simply storing it. (6) You have the right in some cases to request that we delete your personal information from our storage. (7) You have the right to request Your personal data in a format that can be read or used by a working tool or device and (where possible) allow us to transmit or transfer your personal data in such format to another data controller when This can be done using the above method. This right can only be achieved if your data is processed in an automated and consent-based manner. the basis of the contract to which you are a party or before entering into the contract; and (8) you have the right to file a complaint with the relevant legal authority. If you believe that the collection, use or disclosure of your personal information It is an act in a manner that violates or fails to comply with relevant laws.

Sending Do Not Track Signals

Some browsers may include a Do Not Track feature that signals to websites you visit that you do not want your online activities to be tracked. Tracking is not the same as using or collecting website-related information. For these purposes, tracking means collecting personally identifiable information from consumers who use or visit a website or online service as they move across websites. Over time, the PDPA Pro website does not track its visitors over time and across third-party websites. However, some third-party websites may track your browsing activity when they serve their content. You, which allows them to customize what they present to you.

Maintaining the security of personal information

We secure the information you provide on controlled computer servers. safe environment Protected from unauthorized access, use or disclosure. We maintain reasonable administrative, technical, and physical safeguards to protect against unauthorized access, use, alteration, and disclosure of personal information under our control and supervision. However, we cannot guarantee transmission of information over the Internet. or wireless networks, so while we try to protect your personal information You acknowledge that (1) there are security and privacy limitations of the Internet that are beyond our control; (2) the security, integrity, and privacy of any and all information exchanged between you and the Website; Our data and information may not be guaranteed and (3) such information and data may be viewed or altered by third parties during transmission despite our best efforts.

Ndatathoth is certified by ISO27001:2013

information leakage

In the event that we determine that the security of the PDPA Pro website has been compromised or users' personal information has been disclosed to unrelated third parties as a result of external activities. This includes but is not limited to Security attacks or fraud We reserve the right to take appropriate measures. This includes but is not limited to Investigation and reporting, as well as notification and cooperation with law enforcement agencies, within 72 hours of becoming aware of a data breach. In the event of a data leak We will use reasonable efforts to notify affected individuals if we believe there may be a reasonable risk of harm to users as a result of a leak or if notification is required by law. Let me know Once we are finished, we will post an announcement on the PDPA Pro website and email it to you.

Amendments and Changes to Privacy Policy

We may change this policy from time to time at our discretion and will notify you of any material changes to the way we treat personal information. When changes are made, we will revise the updated date at the bottom of this page. We may notify you by other means at our discretion, such as through contact information you have provided. Any changes to this policy will be effective immediately upon publication of the revised policy. unless otherwise specified Your continued use of the Website or Services after the effective date of the revised Policy. (or any other action specified at that time) will be considered as your consent to those changes. However, we will not use your personal information in a manner that is different from what was stated at the time it was collected. your personal information without your consent