Privacy Notice

Privacy Notice

Softdebut Co., Ltd. and its affiliated companies (collectively referred to as “the Company”) respect your privacy rights and are committed to protecting your personal data. This privacy notice has been prepared to inform you about how the Company collects, uses, and discloses your personal data, the purposes for which such data is processed, how the data is managed, and your legal rights under the Personal Data Protection Act (PDPA).

This Privacy Policy applies to the Company’s services provided through websites, applications, social media, and other channels for customers and visitors. It does not apply to employees or job applicants. By using the Company’s services or providing your information, you acknowledge and accept the Company’s practices described in this Privacy Policy. The Company continually updates and improves its services in accordance with governance principles and applicable laws. Therefore, this Privacy Policy may be revised from time to time. You are advised to review this Policy periodically to stay informed of the latest version.

  1. Sources of Personal Data Collection
  • Directly from you: e.g., information you provide when registering, subscribing to services, account information, data you update, or communications with the Company or its representatives; use of Company products/services, participation in activities, surveys, seminars, or roadshows.
  • Tracking technologies used on Company websites and applications.
  • Company affiliates.
  • Third parties such as:
    • Government agencies
    • Financial institutions
    • Agents, brokers, intermediaries
    • Business partners
    • Data providers
    • Social media and advertising platforms

This information helps keep your data up to date and improves the quality and efficiency of products and services.

  1. Use of Cookies and Tracking Technologies

The Company uses cookies and technologies such as Google Analytics and Facebook Conversion Tracking to collect data (e.g., browser type, time spent, visited pages, language settings, traffic data) for security, user convenience, performance optimization, statistical analysis, and personalized user experiences. Cookies may also be used for advertising and marketing emails.
Please see our Cookies Policy for more details.

  1. Types of Personal Data Collected

Collected directly or indirectly (e.g., through business partners) based on your communication and use of products/services, including but not limited to:

  • Personal Identification Data: Name, age, birthdate, nationality, gender, marital status, education, work history, address, workplace, phone, email, Line/Facebook accounts, CCTV footage, call recordings, photos, signatures.
  • Government-issued Identifiers: National ID, passport number, tax ID, social security number, copies of official documents.
  • Financial Information: Bank account number, PromptPay ID, financial history, asset lists, account statements.
  • Transaction Data: Purchase history, spending behavior, preferences, interests, and searches.
  • Device and Technical Data: IP address, web beacon, log files, device ID, GPS location, device/network information, SSO login data, browser types and versions, plugin data, OS, platform, and other access-related information.
  • Sensitive Data (collected only with explicit consent or legal necessity): race, religion, health data, disabilities, biometric data, criminal history, etc.
  1. Retention Period of Personal Data

Your data will be retained only as long as necessary to fulfill the purposes described, or longer if required/permitted by law (e.g., 5–10 years or longer for litigation or regulatory compliance).

  1. Purpose of Data Collection
  • To provide services that meet your needs, based on your contract or request. Refusal to provide data may prevent us from offering services.
  • To comply with legal obligations, including financial, tax, anti-money laundering, and cybersecurity laws.
  • To protect legitimate interests of the Company or others:
    • Security measures (CCTV, call recordings)
    • Customer relationship management
    • Internal audits, risk management, fraud prevention, data anonymization
    • Business analysis, marketing, event recordings
      Refusal may reduce service efficiency.
  • With your consent, for better product offerings, promotions, exclusive benefits, participation in events, etc.
  1. Data Sharing

The Company does not share your personal data without your consent except when necessary for service or legal compliance. Data may be disclosed to:

  • Company affiliates:
    1. Softdebut Co., Ltd.
    2. SD eBusiness Co., Ltd.
    3. VK Netservice Co., Ltd.
    4. Gzy Cloud Service Co., Ltd.
  • Business partners
  • Data processors (domestic/international)
  • Legal authorities

The Company ensures that recipients maintain confidentiality and use the data only within specified purposes. Data may be stored in data centers or servers both in Thailand and abroad for security, backup, or service purposes. Providing your data implies consent to cross-border transfers and storage.

If you believe your data has been misused beyond the stated purposes, you can contact the Company for investigation.

The Company may also disclose data to comply with legal obligations (e.g., government agencies, regulatory bodies, legal proceedings, or in the event of mergers or restructuring).

  1. Your Rights Regarding Personal Data
  • Edit or delete data: You may submit a "Personal Data Request Form" to edit/delete your data via:
    • Email: [email protected]
    • Phone: 02-861-4600
      (Note: deletion may affect service availability or quality.)
  • Access, data portability, restriction: You may request data access, copies, transfers, or restriction of use.
  • Withdraw consent: You may revoke consent at any time by contacting the Company.
  • Opt-out of marketing communications:
    • Phone: Contact us directly
    • Email: Click "Unsubscribe" in received emails
  • File complaints: You may file a complaint with the Data Protection Committee if your rights are violated.
  1. Contact Information

To ensure effective implementation of this policy, the Company has appointed a Data Protection Officer (DPO) who can assist with personal data issues.
For inquiries or suggestions, contact:

Contact Center:
Email: [email protected]
Phone: 02-861-4600