Privacy Policy

Nusasiri Public Company Limited and affiliated companies, as well as joint venture entities (hereinafter referred to as the “Company”), recognize the critical importance of personal data protection. Accordingly, the Company has established this Personal Data Protection Policy to elucidate our data management practices and to assure data subjects that we handle personal data in compliance with the Personal Data Protection Act B.E. 2562 (2019). This policy is hereby formally announced as follows:

  1. Definitions
    • “Personal Data Protection Law” refers to the Personal Data Protection Act B.E. 2562 (2019) and any subsequent amendments, as well as related laws, regulations, and directives.
    • “Personal Data (General)” refers to information about a living individual that can identify the person directly or indirectly, such as name, surname, address, email address, and national ID number.
    • “Sensitive Personal Data” encompasses personal data that necessitates special protection and careful handling, including data related to race, ethnicity, political opinions, religious or philosophical beliefs, sexual behavior, criminal records, health information, disability, labor union affiliation, genetic and biometric data.
    • “Measures” denotes the security protocols implemented to safeguard personal data.
    • “Company” pertains to Nusasiri Public Company Limited and its subsidiaries, including joint venture entities.
    • “Data Subject” refers to customers or users of the Company’s website or applications.
  2. Collection of Personal Data

    The Company collects personal data solely as required to deliver services, facilitate inquiries, and conduct business in alignment with data subjects’ reasonable expectations. The Company may collect, use, or disclose various categories of personal data, detailed as follows:

    1. General Personal Data:
      • Personal Information: including name, surname, gender, age, date of birth, marital status, address, and occupation.
      • Contact Information: including residential address, workplace, telephone number, Line ID, and email address.
      • Location Data: When utilizing the website with GPS enabled, data subjects consent to the collection and processing of location data. Data subjects may disable GPS or install software to prevent location tracking.
      • Device Information: including:
        • Cookies: small files sent from the website to the device, which assist in recognizing the device on subsequent visits.
        • IP Address
        • Web Browser Type
        • Visited Web Pages
        • Referring Websites
        • Connection Information
      • Service Usage Data: based on activities on the website, such as registration for newsletters, reporting or complaints, job applications, and other interactions.
      • Additional Data: including audio, images, videos, photographs, and CCTV recordings.
      • Other Personal Data as defined under applicable personal data protection laws.
    2. Sensitive Personal Data:

      Includes religious beliefs, health data, racial information, criminal records, facial recognition data, fingerprint data, etc. The Company does not collect sensitive personal data unless explicitly consented to by the data subject or as otherwise required by this policy or applicable laws.

  3. Purposes for Collecting, Using, and Disclosing Personal Data

    The Company processes personal data for the following purposes:

    • To provide updates, promotions, special offers, or invitations to participate in activities.
    • To enhance operational systems, technology, policies, and business strategies.
    • To communicate with financial institutions for loan processing.
    • To execute contracts related to real estate transactions.
    • To gather feedback, suggestions, and handle complaints.
    • To maintain a contact database for communication through various channels.
    • To verify data accuracy as mandated by law.
  4. Disclosure or Transfer of Personal Data

    The Company may disclose or share personal data with:

    • Subsidiaries and joint venture entities.
    • Online advertising platforms.
    • Regulatory bodies, including the Office of the Personal Data Protection Commission.
    • Business or professional advisors.

    The Company ensures that third parties receiving personal data adhere to confidentiality and protection standards as per Thai data protection laws and use the data solely for the intended purposes.

    In compliance with legal requirements, the Company may disclose personal data to relevant authorities to fulfill legal obligations, prevent threats to life or physical harm, enforce laws, protect legal rights, or prevent fraud.

  5. Retention Period of Personal Data

    The Company retains personal data only for as long as necessary to fulfill the stated purposes, or until we receive a request from the data subject to withdraw consent, or as required by law.

  6. Rights of Data Subjects

    Data subjects are entitled to the following rights:

    1. Right to Withdraw Consent: To withdraw consent previously provided for processing personal data. Withdrawal will not affect processing undertaken prior to the withdrawal.
    2. Right to Access and Copy Personal Data: To access and request copies of personal data, including details on data collection methods not based on consent.
    3. Right to Rectify Personal Data: To correct any inaccuracies in personal data.
    4. Right to Erase Personal Data: To request the deletion of personal data.
    5. Right to Restrict Processing: To request limitations on the use of personal data.
    6. Right to Data Portability: To request the transfer of personal data.
    7. Right to Object: To object to the processing of personal data.

    Data subjects may exercise these rights by submitting a written request or email using the form provided by the Company via the “Contact Channels” listed below. The Company will review and respond to the request within 30 days of receipt. The Company may refuse to exercise certain rights where legally permissible.

  7. Use of Cookies

    Cookies are small files downloaded and stored on your device when visiting a website. Cookies help the website recognize your device and tailor services accordingly.

    The Company may use cookies and similar technologies when interacting with its products, services, or websites. Cookies assist in remembering preferences and improving service delivery. The Company may utilize cookies for various purposes including basic functionality, understanding website usage, enhancing online experiences, and ensuring relevant advertising.

  8. Review and Modification of Privacy Policy

    The Company will periodically review the effectiveness of this privacy policy. Any updates will be announced on the website www.nusasiri.com or other Company platforms.

  9. Contact Details

    For inquiries regarding personal data rights or if you have any questions concerning personal data under this policy, please contact the Company’s Data Protection Officer at:

Nusasiri Public Company Limited

Address: 2922/209 Chan Issara Tower 2, 13th Floor (12A), Petchaburi New Road, Bangkapi, Huai Khwang, Bangkok 10310

Phone: 0-2030-1399

Email: [email protected]

Website: www.nusasiri.com