Privacy Policy

Pay Solutions Co., Ltd. respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and disclose your personal data in accordance with the Thailand's Personal Data Protection Act BE 2562 (PDPA).

Please read and understand this Privacy Policy before clicking the “Consent” button.

1. Definitions

“Personal Data” means information about an individual that can identify the individual directly or indirectly, but does not include information about the deceased specifically.

“Sensitive Personal Data” means personal data that relates to race, ethnicity, political opinions, beliefs in a religion or philosophy, sexual behavior, criminal history, health data, disability, trade union data, genetic data, biometric data, or other data that may affect the data subject in a similar manner as prescribed by the Personal Data Protection Committee.

“Biometric Data” means personal data derived from unique physical or behavioral characteristics of an individual, such as facial features, fingerprints, iris patterns, or voice patterns, which can be used for identification or authentication purposes.

2. Types of Users and Personal Data Under This Policy

The Company may collect, use, or disclose the personal data of users differently depending on the relationship between you and the Company. The details are as follows.

1. Online Merchant

Personal Information such as, Title, Name, Gender, Age, Nationality, Date of birth, National ID number or passport number or identification number in a government-issued identity document and Photo.

Contact Information: Address as per your ID card or household registration, current address, Phone number, Social media account ID, such as LINE ID, Facebook.
Financial Information: Name and account number of bank, Bank branch, Bank account information.
Work Information: Occupation, Job title, Details about the establishment, Map showing the location of the establishment.
Other Information: Records of conversations and communications between you and the Company's customer service representatives in any form or method, including telephone, website, email, chat messages, and social media communications Information that you provide to the Company through any channel CCTV footage from the Company's office building.

2. Customer

Personal Information: Title, Name, Gender, Age, Date of birth, Photo.
Contact Information: Billing address and/or shipping address, phone number, social media account ID, such as LINE ID, Facebook
Other Information: Product search information, transactional information about your product orders and payments, records of conversations and communications between you and the Company's customer service representatives in any form or method, including telephone, website, email, chat messages, and social media communications and information that you provide to the Company through any channel.

3. Website Visitor

The Company may collect information from website visitors, such as: Website usage behavior data (Cookies Usage), Internet Protocol (IP) address, information about your device, pages that led you to the Company's website, pages that you exited from the Company's website, date and time of clicks
This information will be used for statistical purposes in an anonymous manner to help the Company understand website usage behavior.

3. Purpose and Basis for Collecting Personal Data

The Company will collect, use, or disclose your personal data only if it is necessary or has a legal basis for collecting, using, or disclosing personal data. This includes collecting, using, or disclosing your personal data to comply with a contract that the Company has entered into with you, for legitimate interests, to fulfill legal obligations, to act in accordance with your consent, and/or under other legal bases. The Company may rely on one or more of the following bases for processing personal data:

Processing under the basis of contract (Contract)

The Company will collect, use, or disclose your personal data to process your request before you register to use the Company's services and/or to comply with a contract to which you are a party. This includes, but is not limited to, the following purposes:
- To consider your qualifications, screening, and risk assessment before entering into a contract.
- To consider, approve, provide assistance, or answer your questions.
- To verify and confirm your identity before registering to use the services.
- To consider and process information to provide services to you.
- To notify you of transactions, issue payment receipts, and issue withholding tax documents.
- To collect payments/debt.

Processing under the basis of legitimate interest (Legitimate Interest)

The Company will collect, use, or disclose your personal data under the basis of the Company's or other persons' legitimate interests. These interests must not be less than your fundamental rights, interests, and freedoms in your personal data, and must not exceed the scope that you can reasonably expect. This includes, but is not limited to, the following purposes:
- Company's business management, such as risk assessment, investigation, prevention, and monitoring of corruption, money laundering, terrorism, misconduct, or other crimes. This includes, but is not limited to, the verification of the reliability of any person related to the Company's corporate customers.
- Managing the relationship between the Company and you, such as handling complaints.
- Security measures, such as exchanging cards and/or recording photographs or videos through closed-circuit television (CCTV) of persons who come to visit before entering the Company's building.
- In the case of a corporate user, the Company will collect, use, and disclose personal data of directors, authorized representatives, or agents.

Processing under the basis of legal obligation (Legal Obligation)

The Company may collect, use, or disclose your personal data to comply with any applicable laws and regulations, and/or to comply with regulations and rules issued by regulatory agencies, and/or the orders of competent authorities, which the Company is required to comply with.

Processing under the basis of consent (Consent)

In some cases, the Company may request your consent before collecting, using, or disclosing your personal data to provide you with the best possible benefits and/or to enable the Company to provide services that meet your needs. This includes, but is not limited to, the following purposes:
- To process, research, and analyze your behavior or preferences to improve and develop services that truly meet your needs, and/or to present information about the Company's promotional services that you may be interested in, and/or to offer you specific benefits.
- To manage the website, facilitate, improve the efficiency of website access, and assess the number of website visitors and the popularity of different parts of the website.

4. Disclosure of Your Personal Data

The Company will not disclose the data collected above to third parties, except in the following cases only:
- When the Company entrusts the recipient of such data to store and/or process such data on behalf of the Company for the purpose of security in storage, data backup, data retrieval services, and for the convenience of service.
- When the Company is required to disclose such data to comply with the law or when the Company is requested to disclose such data to government agencies or regulatory agencies that have legal authority.
- Buyers or sellers with whom you have contacted or transacted through the Company's service channels.
- When the disclosure of such data is necessary for the Company's services, by disclosing to business partners and other legal entities, including but not limited to: transportation companies, payment service providers for goods and/or services, financial transaction service providers, business partners that jointly produce products, and other sponsors.
- When you have clearly consented to the disclosure of such data to the Company from time to time.
In this regard, the Company will ensure that the recipient of such data keeps your personal data confidential, does not use it for any purpose other than that set by the Company, and will comply with this Privacy Policy and the relevant laws strictly.

5. Data Retention Period

The Company will collect your personal data for as long as necessary to achieve the purposes stated in this Policy. The Company will keep your personal data for the entire period that you are using the services or have a relationship with the Company, and may continue for a period of 10 (ten) years from the date of termination of the relationship with you, unless for the purposes of complying with the law, establishing legal rights, or exercising legal claims. When the data retention period for your personal data ends, the Company will immediately delete or destroy such personal data, or make it anonymous.

6. Transfer of Your Data to Abroad

If the Company transfers your personal data to a foreign country, such as when the Company stores your personal data on a cloud platform or server located outside Thailand for the purpose of information technology cooperation, if the country has data protection standards lower than Thailand, the Company will take measures that it deems necessary to ensure that the transferred personal data is adequately protected.

7. Security Standards

To prevent the loss, access, use, alteration, modification, or disclosure of personal data collected without authority or improperly, the Company has implemented both organizational management and technical security measures appropriate to protect your personal data, such as limiting access to your personal data to only relevant persons and requiring those persons to keep your personal data confidential. Software is used to prevent and monitor access to personal data stored in databases without permission, etc.

8. Collection of Data of Persons with Limited Capacity

The Company would like to inform you that the Company does not intend to collect, use, or disclose personal data of persons with limited capacity under the law, which includes minors (persons under the age of 20 or persons who have not reached the age of majority by marriage under the law), persons who have been ordered by the court to be a person with legal capacity, or persons with legal disability. The Company would like to request that legal guardians please take care not to allow persons with limited capacity under your legal guardianship to provide personal data to the Company. If there is a case where a person with limited capacity provides personal data to the Company, the Company will consider that you have agreed to allow the Company to possess the data and agree to be bound by the terms and conditions set forth in this Policy. However, if the Company learns that personal data has been collected from a person with limited capacity, the Company will take steps to suspend, stop, and delete the personal data of the person without the consent of the legal guardian as prescribed by law.

9. Connection to Third-Party Websites

The Company's services may be connected to third-party websites. These linked websites have separate and independent privacy policy announcements. The Company recommends that you study the privacy policy of the website in detail before using it. The Company is not involved and has no control over the privacy protection measures of such websites and cannot be held responsible for the content of the policy, damage, or actions caused by third-party websites.

10. Persons Authorized to Access Personal Data

Only Company officials who have duties and/or responsibilities related to the above-mentioned data usage purposes have the right to access your data. In cases where the Company appoints a third party to store and/or process data, the Company will ensure that only the officials of the appointed person who have duties and/or responsibilities related to the storage and/or processing of data can access your data.

11. Data Subject Rights

The Personal Data Protection Act is intended to give you more control over your personal data. You can exercise your rights under the Personal Data Protection Act, which are as follows:

(1) The right to access and request a copy of your personal data that you have provided to the Company, including requesting the Company to disclose the acquisition of personal data that you have not consented to collect.
(2) The right to request that the Company correct your personal data that is inaccurate or incomplete for the duration of your data with the Company.
(3) The right to request that the Company delete or destroy your data or make your data in a format that cannot identify you.
(4) The right to request that the Company suspend the use of your personal data.
(5) The right to object to the collection, use, or disclosure of your personal data.
(6) The right to request that the Company send or transfer your personal data, unless the Company cannot do so by technical condition or the Company has a reason to refuse your request by law.
(7) The right to withdraw consent. You have the right to withdraw your consent that you have given to the Company for the duration of your data with the Company, unless it is impossible to withdraw consent. However, withdrawing your consent will not affect the collection, use, or disclosure of your personal data that you have given consent to properly before withdrawing such consent.
(8) The right to file a complaint with the relevant competent authority, such as the Committee/Personal Data Protection Office, in the event that you believe that the Company has violated or failed to comply with the Personal Data Protection Act.

The above-mentioned rights requests must be made in writing in the format specified by the Company to consider whether the requester is the one who has the right to access personal data. The Company will use its best efforts to fulfill your request within 30 days. However, the Company would like to inform you that your rights may be excluded under the relevant law or there may be a necessary reason that the Company cannot fulfill your request for the right to use, such as an unfair use or may affect the rights or freedoms of other persons. In this case, the Company will notify the reason for refusal.

12. Changes to the Privacy Policy

The Company may change the Privacy Policy to comply with changes in the legal framework. When the contents of the Privacy Policy have been changed, the Company will notify you appropriately through the Company's website or other communication channels, and it is deemed that you agree to the change. If you do not wish to continue using the service under the new agreement, you may cancel the service as you wish.

13. Governing Law

This Privacy Policy shall be interpreted in accordance with Thai law. You agree to submit to the jurisdiction of the Thai courts to resolve any disputes arising under the terms and conditions.

14. Contact Information

If you have any suggestions or questions about the Privacy Policy, wish to request to amend your personal data, or wish to take any action related to exercising your rights as a data subject, you can contact the Company at:

Pay Solution Co., Ltd.
Address : 90 CW Tower Building B, Floor 25, Unit B2502, Ratchadaphisek Road, Huay Kwang Sub-district, Huay Kwang District, Bangkok 10310
Website : https://www.paysolutions.asia/
Online report : pdpasupport@tarad.com
Telephone : 02-821-6163 or 085-584-5668