PRIVACY POLICY A blue triangle logo with textDescription automatically generated

Effective Date: November 1st, 2024 
Last Revised: October 22nd, 2024 

 

1. Introduction 

This Privacy Policy explains how Movaci Co., Ltd. and its affiliates (collectively referred to as "Movaci," "we," "us," or "our") collect, use, and disclose your personal data in accordance with Thailand’s Personal Data Protection Act (2019) (PDPA) and other applicable global data protection laws, such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). Movaci is committed to protecting your privacy and ensuring your personal data is handled securely. 

This Privacy Policy applies to both current clients and individuals who interact with Movaci, including but not limited to corporate clients, visitors, and prospective clients. 

2. Scope of This Privacy Policy 

This Privacy Policy applies to: 

  • Individual clients or associated persons (authorized directors, representatives, or contacts of corporate clients).
  • Prospective clients: Individuals who contact us for inquiries, attend our events, or subscribe to our communications.
  • Visitors: Individuals visiting our office premises or using our services, including interactions via social media.

By engaging with Movaci or using our services, you consent to the processing of your personal data as described in this Privacy Policy. 

3. Personal Data Collected 

Movaci may collect various types of personal data, including but not limited to: 

(a) For Clients and Associated Persons: 

  • Full name, contact information (home address, email, phone number), job title, business information, national identification card (including sensitive data such as religion or blood type), passport, and signature.

(b) For Prospective Clients: 

  • Contact information (full name, email address, phone number), job title, and any personal data you provide when making inquiries or attending Movaci events.

(c) For Visitors: 

  • Name, place of work, contact details, car license plate number, and CCTV footage recorded on our premises.

(d) Social Media Interactions: 

  • Information provided via social media platforms when interacting with Movaci, although we are not responsible for the data privacy practices of those platforms.

(e) Family Members: 

  • In certain cases, personal data of family members (e.g., spouse, children under 20) for services related to family law, immigration, or other personal legal matters.

4. Purpose and Legal Basis for Processing Personal Data 

Movaci processes your personal data for the following purposes and relies on various legal bases: 

(a) Consent: 

  • For sending newsletters, updates, or event invitations to prospective clients.
  • For processing sensitive personal data (e.g., national ID or minors’ data) as required by law.
  • Consent can be withdrawn at any time without affecting prior lawful processing.

(b) Contractual Necessity: 

  • To fulfill service requests and perform our contractual obligations, including billing, tax processing, and service provision.
  • Failure to provide necessary personal data may prevent Movaci from fulfilling its obligations.

(c) Legal Obligation: 

  • To comply with applicable Thai and international laws, such as data protection regulations, court orders, or requests from regulatory authorities.

(d) Legitimate Interests: 

  • To ensure identity verification, protect the security of Movaci’s systems and premises, perform conflict-of-interest reviews, and for business operation needs such as IT system management and fraud prevention.

(e) Legal Claims: 

  • To establish, exercise, or defend legal claims.

5. Collection Methods for Personal Data 

Movaci collects personal data through the following means: 

  • Directly from You: When you engage with Movaci by email, phone, or in person for service inquiries or event registration.
  • Referring Persons: From third parties, such as business partners or referring clients.
  • Public Sources: From publicly available resources, such as government or business websites.
  • Employers: For corporate clients, personal data may be provided by your employer or you directly to manage service relationships.

6. Disclosure of Personal Data 

Movaci may disclose your personal data to the following third parties: 

  • Affiliates: For managing client relationships and providing services.
  • Service Providers: External vendors or outsourced providers supporting service delivery.
  • Business Partners and Associations: Relevant partners assisting in delivering our services.
  • Government Agencies: Regulatory bodies such as the Ministry of Commerce, Revenue Department, Immigration Department, and other agencies in compliance with legal requirements.
  • Change of Ownership: In the event of a merger, acquisition, or sale of Movaci assets.
  • Legal Disclosure: To comply with court orders, legal proceedings, or law enforcement requests.

7. Data Transfers Outside Thailand 

Movaci may transfer your personal data to affiliates or service providers located outside Thailand, including in regions with differing data protection laws, such as the United States and Europe. In such cases, Movaci ensures that appropriate safeguards, including Standard Contractual Clauses (SCCs) or other legal mechanisms, are in place to protect your data in compliance with the PDPA and other relevant laws. 

8. Data Retention 

Movaci retains personal data only for as long as necessary to fulfill contractual obligations, comply with legal requirements, or protect legal rights. Typically, data is retained for 10 years after the end of the service relationship unless a longer retention period is required by law or agreed upon in writing. 

Data processed based on consent will be deleted or anonymized once consent is withdrawn or its purpose is fulfilled, in accordance with applicable laws. 

9. Your Rights Regarding Personal Data 

Under applicable data protection laws, you have the following rights: 

  • Access: Request access to and obtain a copy of your personal data.
  • Portability: Receive your personal data in a machine-readable format and transmit it to another data controller.
  • Erasure: Request the deletion or de-identification of your personal data.
  • Objection: Object to the processing of your personal data, particularly for direct marketing purposes.
  • Restriction: Request the restriction of the processing of your personal data.
  • Correction: Request corrections or updates to your personal data.
  • Withdraw Consent: Withdraw consent for the processing of your personal data, provided no other legal grounds justify continued processing.
  • File Complaints: Lodge complaints with the relevant data protection authority.

Please note that these rights may be subject to legal limitations, and Movaci may be required to refuse requests under certain circumstances. 

10. Security Measures 

Movaci employs industry-standard security measures, including encryption and access controls, to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Regular audits and system checks are conducted to ensure data integrity. 

11. Updates to This Privacy Policy 

Movaci may update this Privacy Policy from time to time to reflect changes in the law or our business practices. Significant updates will be communicated to you via official channels, and where necessary, we will obtain your consent before implementing substantial changes that affect how your data is processed. 

12. Contact Information 

For questions, concerns, or to exercise your data protection rights, you can contact Movaci at: 

Movaci Customer Service 
Address: 420/11-13 Changklan Road, T. Changklan, A. Muang, Chiang Mai 50100 Thailand 
Phone: +66 (053) 920 555 
Email: [email protected] 

Movaci Data Protection Officer (DPO) 
Address: 420/11-13 Changklan Road, T. Changklan, A. Muang, Chiang Mai 50100 Thailand 
Email: [email protected]