1. Introduction
Welcome to Crestrado ("Company", "we", "us", "our"). We are committed to protecting the privacy of individuals who visit our website (the "Site") and interact with our services. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our Site, including any other media form, media channel, mobile website, or mobile application related or connected thereto.
Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.
We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Last Updated" date of this Privacy Policy. Any changes or modifications will be effective immediately upon posting the updated Privacy Policy on the Site, and you waive the right to receive specific notice of each such change or modification.
2. Collection of Your Information
We may collect information about you in a variety of ways. The information we may collect on the Site includes:
Personal Data: Personally identifiable information, such as your name, email address, telephone number, and demographic information, such as your age, gender, hometown, and interests, that you voluntarily give to us when you register with the Site or when you choose to participate in various activities related to the Site, such as online chat and message boards or submitting inquiries via our contact form.
Derivative Data: Information our servers automatically collect when you access the Site, such as your IP address, your browser type, your operating system, your access times, and the pages you have viewed directly before and after accessing the Site.
Data From Contact Forms: Information you provide when you contact us via our contact form, including your name, email address, phone number (optional), area of interest, and the content of your message.
3. Use of Your Information
Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Site to:
- Respond to your inquiries and provide customer support.
- Email you regarding your account or order.
- Improve the efficiency and operation of the Site.
- Monitor and analyze usage and trends to improve your experience with the Site.
- Notify you of updates to the Site.
- Compile anonymous statistical data and analysis for use internally or with third parties.
- Comply with legal and regulatory requirements.
- To enforce our terms, conditions, and policies.
4. Disclosure of Your Information
We may share information we have collected about you in certain situations. Your information may be disclosed as follows:
By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation.
Third-Party Service Providers: We may share your information with third parties that perform services for us or on our behalf, including data analysis, email delivery, hosting services, customer service, and marketing assistance (e.g., Google Analytics, Mailchimp). We require all such third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
International Data Transfers: Your information, including personal data, may be transferred to — and maintained on — computers or servers located outside of Thailand where the data protection laws may differ. For example, services like Google Analytics or Mailchimp may process data in the United States or other countries. We will take appropriate steps to ensure that your data is treated securely and in accordance with this Privacy Policy and that adequate safeguards are in place for such transfers, as required by applicable law (such as Thailand's PDPA). This may include relying on adequacy decisions, standard contractual clauses approved by relevant authorities, or other legally permitted transfer mechanisms.
5. Tracking Technologies
Cookies and Web Beacons: We may use cookies, web beacons, tracking pixels, and other tracking technologies on the Site to help customize the Site and improve your experience. Initially, non-personally identifiable information may be collected through tracking technology. This information may become associated with you if you subsequently provide personal information to the Site, have an active account, or if cookies link to your identifiable information over time. Most browsers are set to accept cookies by default. You can remove or reject cookies, but be aware that such action could affect the availability and functionality of the Site.
Website Analytics: We may partner with selected third-party vendors, such as Google Analytics, to allow tracking technologies and remarketing services on the Site through the use of first-party cookies and third-party cookies, to, among other things, analyze and track users’ use of the Site, determine the popularity of certain content and better understand online activity.
6. Security of Your Information
We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.
7. Policy for Children
We do not knowingly solicit information from or market to children under the age of 13 (or other applicable age in your jurisdiction, such as 10 years old under Thailand's PDPA unless parental consent is provided for specific processing). If you become aware of any data we have collected from children under the applicable age without necessary consents, please contact us using the contact information provided below.
8. Controls for Do-Not-Track Features
Most web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online Browse activities monitored and collected. No uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.
9. Your Privacy Rights
Depending on your location, you may have certain rights regarding your personal information, such as the right to access, correct, delete, or restrict the processing of your data. For example, residents of Thailand have rights under the Personal Data Protection Act B.E. 2562 (2019) (PDPA). Residents of the European Economic Area (EEA) or California (USA) also have specific rights under GDPR and CCPA, respectively. To exercise these rights, please contact us using the contact information below.
Legal Basis for Processing Your Information
We process your personal data based on one or more of the following legal grounds, as applicable under relevant laws such as Thailand's Personal Data Protection Act (PDPA):
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., for optional cookies, or if you subscribe to marketing communications for which we require consent).
- Contract: Where the processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract (e.g., to create and manage your account, or to respond to your direct inquiries for services).
- Legal Obligation: Where the processing is necessary for us to comply with the law (not including contractual obligations).
- Legitimate Interests: Where the processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests (e.g., for website analytics to improve our site, for security monitoring, for responding to general inquiries not directly leading to a contract, or for internal administration).
Data Retention
We will only retain your personal information for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements (including any statutory limitation periods).
10. Contact Us
If you have questions or comments about this Privacy Policy, or if you wish to exercise your privacy rights, please contact us at:
Crestrado
[email protected]
This content is for informational purposes only and does not constitute legal advice. Consult with a qualified legal professional in Thailand to ensure your Privacy Policy fully complies with all applicable laws and regulations, including the Personal Data Protection Act B.E. 2562 (2019).