This Privacy Policy explains how CHATHEEPAT GROUP(THAILAND) CO., LTD. collects, uses, discloses and protects your personal data when you visit www.chatheepat.com, in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA").
1. Who we are
The data controller responsible for your personal data is:
Company
CHATHEEPAT GROUP(THAILAND) CO., LTD.
Tax ID
0105564153749
Address
60, Moo 6, Bang Muang, Bang Yai District, Nonthaburi, Thailand 11140
Data you give us through the inquiry form: your name, email address, the business area you select, and the content of your message.
Data you give us by email, phone or LINE: the contact details and information you choose to share.
Data collected automatically: IP address, browser and device type, pages visited and time of visit, recorded in our web server logs. If you accept analytics cookies, usage information is also collected through Google Analytics (see section 8).
We do not ask for sensitive personal data (such as health, religion or biometric data). Please do not include it in your message.
Information you choose to share
You are responsible for the content of the messages you send us. If you include personal data of other people, you confirm that you have the right to share it with us. To the extent permitted by law, CHATHEEPAT GROUP(THAILAND) CO., LTD. is not responsible for personal data that you or other users disclose publicly or directly to third parties, including on social media and messaging platforms (such as LINE, Facebook, Instagram and YouTube), which are operated under those platforms' own privacy policies. This does not limit our own obligations under the PDPA for personal data we receive.
3. Purposes and legal basis
Purpose
Legal basis under the PDPA
Replying to your inquiry and discussing our products and services
Steps you request before entering into a contract; our legitimate interest in responding to inquiries
Keeping the website secure and preventing spam and abuse
Legitimate interest
Understanding how the website is used and improving it (analytics)
Your consent
Complying with laws, court orders and requests from authorities
Legal obligation
We do not sell your personal data and do not use it for automated decision-making.
4. Is providing data required?
Your name, email address, business area and message are needed to reply to your inquiry. If you do not provide them, we cannot respond through the form, but you can still contact us by phone or LINE. Accepting analytics cookies is optional and does not affect your use of the website.
5. Retention period
Inquiries and related correspondence: kept for 2 years from our last contact with you, then deleted, unless a longer period is required by law or needed to establish or defend legal claims. If the inquiry leads to a business relationship, the related records are kept for the period required by applicable law, such as accounting and tax laws.
Server logs: kept for up to 90 days, unless needed to investigate a security incident.
Analytics data: kept for up to 14 months.
6. Who we share data with
We share personal data only as needed for the purposes above, with:
Service providers that act on our behalf: our email provider (Google Workspace), our website hosting provider, and our analytics provider (Google Analytics, only if you consent). They may use the data only to provide their services to us.
Our business partners, such as iLAB (Korea) for the iMUSEUM Baiyoke Sky exhibition, only when your inquiry concerns their service and only to the extent needed to answer it.
Government authorities or courts, when required by law.
7. International transfers
Some of our service providers, including Google, may store or process personal data on servers outside Thailand. When personal data is transferred abroad, we make sure the transfer complies with the PDPA and its notifications on cross-border transfers, for example by relying on the providers' standard contractual clauses or other appropriate safeguards. If your inquiry concerns a partner in another country (such as South Korea), we share only the information needed to answer it.
8. Cookies and analytics
Cookies are small files stored in your browser. We use two kinds of storage:
Type
Purpose
Your choice
Strictly necessary
Remembering your cookie choice and basic site functions
Always active; they do not track you
Analytics (Google Analytics)
Counting visits and understanding which pages are useful, in aggregate
Only after you press Accept
When you first visit, a banner lets you accept or reject analytics cookies. Rejecting is as easy as accepting, and the website works fully either way. You can change your choice at any time through Cookie settings, or by deleting cookies in your browser.
Our pages also load fonts from Google Fonts, which means your browser connects to Google's servers and shares your IP address with Google for that purpose.
9. Security
We protect personal data with appropriate technical and organizational measures, including encrypted connections (HTTPS), restricted access to the inquiry mailbox, anti-spam controls on the form, and protection of configuration files on our server. No method of transmission over the internet is completely secure, but we work to keep your data safe.
10. Your rights
Under the PDPA, you have the right to:
withdraw consent at any time, without affecting processing done before withdrawal;
access and obtain a copy of your personal data, and ask how we obtained it;
receive your data in a commonly used machine-readable format, or have it sent to another controller, where technically possible;
object to the collection, use or disclosure of your data;
request deletion, destruction or anonymization of your data;
request that we restrict the use of your data;
request that we correct your data so it is accurate, up to date and complete;
file a complaint with the Office of the Personal Data Protection Committee (PDPC) of Thailand.
Some rights may be limited where the law allows, for example when we must keep data to comply with a legal obligation.
11. How to exercise your rights
Send your request to info@chatheepat.com with the subject "Personal data request". We may ask you to confirm your identity before acting on it. We will respond within 30 days of receiving your request, and will explain our reasons if we cannot fulfil it.
12. Data breaches
If a personal data breach occurs, we will notify the Office of the PDPC within 72 hours of becoming aware of it, unless it is unlikely to pose a risk to your rights and freedoms. If the breach is likely to pose a high risk, we will also inform you without undue delay, along with the steps we are taking.
13. Minors
This website is intended for adults. If you are under 20 years of age and not legally considered an adult, please ask your parent or guardian before sending us personal data. If we learn that we have collected personal data from a minor without the required consent, we will delete it.
14. Visitors from outside Thailand
We are based in Thailand and this policy follows Thai law. If you visit from another country, such as a member state of the European Union or South Korea, you may have additional rights under your local data protection law. We will respect those rights where they apply; please contact us using the details below.
15. Changes to this policy
We may update this policy when our services, the website or the law change. The updated version will be posted on this page with a new effective date. If a change significantly affects how we use your data, we will make it clearly visible on the website.
CHATHEEPAT GROUP(THAILAND) CO., LTD., 60, Moo 6, Bang Muang, Bang Yai District, Nonthaburi, Thailand 11140
Language
This policy is available in Thai and English. If the two versions differ, the Thai version applies to visitors who are Thai nationals or reside in Thailand, and the English version applies to all other visitors.
หน้าเว็บไซต์ของเราโหลดแบบอักษรจาก Google Fonts ซึ่งทำให้เบราว์เซอร์ของท่านเชื่อมต่อกับเซิร์ฟเวอร์ของ Google และส่งหมายเลข IP ของท่านให้ Google เพื่อวัตถุประสงค์ดังกล่าว
