Privacy
Notice.
How Digital Identity Co., Ltd. collects, uses, discloses, and otherwise processes your personal data when you visit our website or interact with us through our online channels, in accordance with the Personal Data Protection Act, B.E. 2562 (2019).
Introduction
Digital Identity Co., Ltd. (hereinafter referred to as "the Company", "we", "our", or "us") is committed to protecting your personal data in accordance with applicable data protection laws, including the Personal Data Protection Act, B.E. 2562 (2019) of Thailand (the "PDPA") and any other regulations issued thereunder.
This Privacy Notice (the "Notice") describes how the Company collects, uses, discloses, and otherwise processes your personal data when you visit our website, submit information through our contact or lead generation forms, or otherwise interact with us through our online channels.
For the purposes of this Notice, "personal data" shall mean any information relating to an identified or identifiable natural person, whether directly or indirectly, but excluding information of deceased persons in particular.
Acknowledgement. By submitting personal data through our contact form or otherwise interacting with our website, you confirm that you have read, understood, and accepted the practices described in this Notice.
Scope of application
This Privacy Notice applies to all natural persons who access or use the Company's website, as well as those who contact the Company through the website, including, but not limited to, the submission of personal data via the online contact form, lead generation form, or any other communication channel made available on the website.
This Notice does not apply to any other products, services, platforms, or activities of the Company that are governed by separate privacy notices or contractual arrangements. In the event of any inconsistency between this Notice and a separate privacy notice or contractual term applicable to a specific service, the terms of that separate notice or contract shall prevail with respect to that service.
Collection of personal data
In the course of your interaction with the Company, we may collect personal data that you voluntarily provide directly to us, including, in particular, when you submit information through our online contact or lead generation form. Such personal data may include, without limitation:
- Your full name;
- The name of your organization or company;
- Your email address;
- Your areas of interest in respect of the Company's services; and
- Any additional information that you voluntarily provide to us in the body of your message or inquiry.
In addition, the Company may automatically collect certain technical data when you access the website, including your IP address, browser type and version, device information, operating system, referring URLs, pages visited, and usage data, through cookies and similar technologies, as further described in Section 9 below.
Purposes of processing and legal basis
The Company processes your personal data for purposes that are specific, explicit, and proportionate to our business operations. The principal purposes for which your personal data is processed, together with the corresponding legal bases under the PDPA, are set out below.
(a) Responding to inquiries and providing information
Where you submit personal data through the contact form or other communication channels on the website, the Company processes such data for the purpose of responding to your inquiries, communicating with you, and providing information relating to the Company's services and solutions. The Company relies on your consent as the legal basis for such processing.
(b) Website analytics and improvement
Where applicable, the Company may process your personal data, including technical and usage data, in order to analyze website traffic, evaluate user behavior, and improve the performance, functionality, and content of the website, including through the use of analytics services such as Google Analytics. Such processing is subject to your consent, which you may grant or withdraw through our cookie consent mechanism.
(c) Legal and regulatory compliance
In certain circumstances, the Company may process your personal data as necessary to comply with applicable legal obligations, including obligations to respond to lawful requests from competent public authorities, to enforce or defend legal rights, or to comply with regulatory requirements applicable to the Company.
Disclosure of personal data
The Company may disclose your personal data to third parties only to the extent necessary for the purposes described in this Notice and subject to appropriate contractual and technical safeguards. Such third parties may include, in particular:
- Authorized service providers engaged to support the Company's operations, including providers of website hosting, information technology services, cloud infrastructure, customer relationship management, and analytics services;
- Professional advisors, including legal counsel, auditors, and consultants, where reasonably required in connection with the Company's business; and
- Competent public authorities, regulators, or courts, where the Company is legally required to make such disclosure under applicable law.
In all cases where personal data is disclosed to a third party, the Company shall implement appropriate organizational and technical safeguards, including the imposition of confidentiality and data protection obligations on such third parties, to ensure that your personal data continues to be protected in accordance with this Notice and applicable law.
No sale of personal data. The Company does not, and will not, sell, rent, or trade your personal data to any third party for monetary or other valuable consideration.
International data transfers
In the course of providing our services and operating the website, your personal data may be transferred to, stored in, or processed in jurisdictions outside the Kingdom of Thailand, including through the engagement of third-party service providers such as Google Analytics whose infrastructure may be located in other countries.
Where such international transfers take place, the Company shall ensure that appropriate safeguards are in place to protect your personal data in accordance with the requirements of the PDPA and other applicable laws. Such safeguards may include, where applicable, the use of standard contractual clauses, the engagement of service providers in jurisdictions recognized as providing an adequate level of protection, or reliance on other lawful transfer mechanisms permitted under applicable law.
Data retention
The Company shall retain your personal data only for such period as is reasonably necessary to fulfill the purposes for which such data was collected, as set out in this Notice, or as otherwise required or permitted under applicable law.
In general, personal data collected through the website, including data submitted through the online contact form, shall be retained for a period not exceeding twelve (12) to twenty-four (24) months from the date of your last interaction with the Company, unless a longer retention period is required or permitted by law, is necessary to establish, exercise, or defend legal claims, or is required for the performance of a contract to which you are a party.
Secure deletion. Upon expiry of the applicable retention period, the Company shall delete, destroy, or anonymize your personal data in accordance with its internal data retention and disposal policies, in such a manner that the data can no longer be associated with an identified or identifiable individual.
Your rights as a data subject
Subject to the conditions and limitations set forth under the PDPA and other applicable laws, you, as a data subject, may exercise the following rights in relation to your personal data:
Right of Access
To request access to and a copy of the personal data that the Company holds about you.
Right to Rectification
To request that inaccurate, outdated, or incomplete personal data be corrected or updated.
Right to Erasure
To request the deletion or de-identification of your personal data, where legal grounds apply.
Right to Restriction
To request the suspension or restriction of processing in certain circumstances permitted by law.
Right to Object
To object to the processing of your personal data on grounds set out under applicable law.
Right to Data Portability
To receive your personal data in a structured, commonly used, and machine-readable format.
Right to Withdraw Consent
To withdraw, at any time, any consent previously given, without affecting the lawfulness of prior processing.
Right to Lodge a Complaint
To lodge a complaint with the competent supervisory authority, namely the Personal Data Protection Committee of Thailand.
Any request to exercise the foregoing rights may be submitted to the Company using the contact details set forth in Section 10 below. The Company shall respond to such requests within the timeframes prescribed by applicable law.
Cookies and similar technologies
The Company uses cookies and other similar tracking technologies to ensure the proper functioning of the website, to remember your preferences, and, where applicable, to analyze website usage and improve user experience.
The use of strictly necessary cookies, which are required for the operation of the website, does not require your consent. The use of non-essential cookies, including those associated with analytics services such as Google Analytics, shall be subject to your prior consent, which you may grant or withdraw at any time through our cookie consent banner or settings panel.
Contact information
If you have any questions, comments, or concerns regarding this Privacy Notice or the Company's processing of your personal data, or if you wish to exercise any of the rights described in Section 8 above, you may contact the Company using the following details:
Email: hello@di.co.th
Changes to this notice
The Company may, from time to time, amend, update, or otherwise revise this Privacy Notice in order to reflect changes in applicable laws and regulations, technological developments, business practices, or operational requirements.
Any such amendments shall take effect as of the revised effective date indicated at the top of this Notice. The Company will publish the updated version of this Notice on this page, and, where the changes are material, the Company will use reasonable efforts to provide additional notice through the website or other appropriate means. Your continued use of the website following the publication of any updated Privacy Notice shall constitute your acknowledgement of such changes, to the extent permitted by applicable law.