Privacy Policy

Privacy Notice for Customers, Partners, and Visitors

PM 80 Co., Ltd., including individuals involved in the processing of personal data as instructed or on behalf of PM 80 Co., Ltd., hereinafter referred to collectively as "the Company," is committed to protecting the privacy of customers, service users, partners, business associates, and visitors.

The collection, use, and/or disclosure (collectively referred to as data processing) are in accordance with the Personal Data Protection Act B.E. 2562 (2019). The Company has issued this notice to inform you about your rights and responsibilities, as well as the conditions regarding the collection, use, and disclosure of personal data.

Personal Data “Personal Data” refers to information relating to an individual that enables the identification of that person, whether directly or indirectly. This does not include data of deceased persons.

1. Personal Data Collected by the Company In collecting and retaining personal data, the Company will use lawful methods and limit the collection to what is necessary for its operational purposes. This includes:

Personal Information such as name, surname, date of birth, age, nationality, ID number, signature.
Contact Information such as address, phone number, email.
Government Documents such as copies of ID cards, house registration, passport, or other government-issued documents that can identify an individual.
Financial Information such as bank account copies, credit card numbers.
Information collected by the Company or automatically from the Company's devices such as IP address, cookies, service usage behavior, purchase history, photographs, images and/or video from CCTV.

The Company will collect personal data only after obtaining consent from the data subject, except in the following cases:

To fulfill a contract: When the collection, use, or disclosure of personal data is necessary for the provision of services or to comply with a contract between the data subject and the Company.
To prevent or mitigate harm: When it is necessary to prevent or stop danger to life, body, or health.
To comply with the law: When the collection, use, or disclosure is required by law.
For the legitimate interests of the Company: When it is necessary for the Company’s legitimate interests, with consideration of the data subject’s rights, such as preventing fraud, ensuring network security, and protecting the rights, freedoms, and benefits of the data subject.
For research or statistical purposes: When the processing of data is for public interest or historical research or statistics, provided that appropriate measures are in place to protect the rights and freedoms of the data subject.
To perform a task of the state: When it is necessary to carry out tasks in the public interest or the exercise of official authority assigned to the Company.

2. Sources of Data

Directly from the data subject: Information you have provided through various activities, such as participating in promotional events, signing up for membership, subscribing to newsletters, participating in marketing activities, or providing contact information for office or factory visits.
From automated systems: Such as images and/or video footage from CCTV.
From other sources: Such as public information, partner agencies, or affiliated companies.

Purposes of Personal Data Processing

The Company may use personal data for the following purposes or other purposes specified at the time of data collection or to which you have given consent after the data has been collected:

To enter into or perform contracts between the Company and the data subject, or to fulfill contracts between the Company and third parties for the benefit of the data subject.
To respond to inquiries and provide assistance to the data subject.
To develop and improve the Company's products and services to better meet the needs of the data subject.
To provide information and recommend products, services, marketing promotions, or benefits through contact channels obtained from the data subject, as consented to by the data subject.
To conduct surveys, analyze data, conduct research, and create statistical data for marketing purposes or for the development and improvement of the Company's operations, as consented to by the data subject.
For the Company's legitimate interests in managing or conducting necessary internal operations.
To monitor, supervise, and ensure security in the Company's buildings or premises.
To comply with laws related to the Company's operations, such as withholding tax.
To provide information to government agencies with legal authority, as requested by such agencies, such as the Royal Thai Police, Anti-Money Laundering Office, Revenue Department, and courts.
To conduct any accounting and financial activities, such as auditing, billing, and collection, exercising rights to benefits, taxes, and documenting transactions required by law.
For the Company’s legitimate interests, such as recording complaint calls via the Call Center system or recording images through CCTV.
To use the data in investigations and compliance with the Company's legal obligations, regulations, and legal duties.
To use data for customer identity verification.
For other purposes for which explicit consent has been given.

3. Disclosure and Transfer of Personal Data

The Company will not disclose or transfer your personal data to external parties without your explicit consent, except in the following cases:

To fulfill the purposes outlined in this privacy notice, the Company may need to disclose or share personal data, limited to what is necessary, with partners, service providers, or external agencies. This includes IT services, data recording services, auditing services, payment services, postal services, parcel delivery services, printing services, insurance services, data analysis services, research services, marketing services, or other services that may benefit you or are related to the Company's business operations. The Company will establish data processing agreements in accordance with legal requirements.
The Company may disclose or share personal data with affiliated companies, where data processing is conducted only for the purposes outlined in this privacy notice.
When laws or legal processes require disclosure, or when disclosure is made to officials, government authorities, or agencies with legal authority, in order to comply with lawful orders or requests.

4. Transfer or Transmission of Data Abroad

The Company may send or transfer personal data to foreign countries, ensuring that the destination country or agency has adequate personal data protection standards.

5. Protection of Personal Data

The Company will implement appropriate technical and management measures to protect and secure your personal data. This includes encryption for data transmission over the internet and access controls, limiting personal data access to authorized personnel only, both for physical and electronic data storage.

6. Data Retention Period

The Company will retain your personal data for as long as necessary to process the data according to the purposes outlined in this notice, unless it is necessary to retain the data for other reasons, such as compliance with legal requirements or dispute resolution. In such cases, the Company may need to retain the data for a longer period than specified.

7. Changes to the Privacy Notice

The Company may amend this privacy notice and will announce any changes on the Company's website at www.p80thailand.com and through other channels, indicating the date of the latest amendment. The Company recommends that you regularly review this notice. Your continued use of the Company's products or services after changes to this privacy notice will be considered acceptance of the changes.

8. Rights of Data Subjects

You have the right to exercise the following rights as provided by law and outlined in this notice:

Right of Access: The right to request access to and receive a copy of your personal data or to request disclosure of the sources of personal data.
Right to Rectification: The right to request that your personal data be updated and corrected.
Right to Data Portability: The right to receive your personal data or to request that it be transferred to another data controller, provided that the data is in a format that can be used or disclosed automatically.
Right to Erasure: The right to request the deletion, destruction, or anonymization of personal data when it is no longer necessary or when consent has been withdrawn.
Right to Restriction of Processing: The right to request the suspension of personal data processing when the data is to be deleted or is no longer necessary.
Right to Withdraw Consent: The right to withdraw consent to the processing of personal data previously given.
Right to Object: The right to object to the collection, use, or disclosure of personal data at any time.
Right to Lodge Complaint: If you have concerns or questions regarding the Company’s handling of your personal data, please contact the Company using the contact details provided in Section 9 of this notice. If you believe the Company has violated or failed to comply with data protection laws, you have the right to file a complaint with the Personal Data Protection Committee as prescribed by law.

The Company reserves the right to consider and respond to your requests in accordance with the applicable data protection laws.

9. Contact Information for Data Protection Officer

PM 80 Co., Ltd.
111 Jarasmuang Road, Rongmuang, Pathumwan, Bangkok 10330
Contact: Phone: 080 800 0000, www.p80thailand.com

If you have any questions, or if you wish to amend, delete your data, exercise your rights, or contact us regarding any other data-related issues, please contact us through the channels below:

PM 80 Co., Ltd.
111 Jarasmuang Road, Rongmuang, Pathumwan, Bangkok 10330
Phone: 080 800 0000, www.p80thailand.com