Privacy Policy | Sup-Imm Unlock

1Personal Data

1.1 Nature of Personal Data in this Document

"Personal Data" means any information relating to an individual which enables the identification of such individual, whether directly or indirectly. This may include personal data of deceased persons and Sensitive Personal Data, which refers to personal data regarding race, lineage, political opinions, cults, religious or philosophical beliefs, sexual behavior, criminal records, health data, disability, trade union information, genetic data, biometric data (such as fingerprint scans, facial recognition, etc.), or any other information which affects the data subject in a similar manner as announced by the Personal Data Protection Committee.

1.2 Collected Personal Data

We may collect your personal data as follows:

(a) Personal Identification

Name and surname, date of birth, place of birth, status, information specified in ID cards and passports, copies of ID cards, or ID card numbers.

(b) Contact Information

Address, telephone number, Line ID, social media contact channels, and workplace.

(c) Professional Information

Job position, department, or organization.

(d) Electronic Usage Data

Email, IP Address, browser type, cookies, and chat history in various applications.

(e) Voluntarily Provided Data

Information you provide when contacting or participating in any activities with the company, etc.

2Respect for Privacy Rights

We respect the privacy rights of data subjects and recognize their desire for security regarding their information. Received personal data will be used only for purposes related to our services, such as preparing documents to verify prohibited person status (Blacklist check) with the Immigration Bureau. We have strict security measures in place to prevent unlawful use of personal data.

3Collection of Personal Data

In collecting personal data directly from the data subject, and in using or disclosing such data, we will request consent before or during collection if required by law. We will process personal data only to the extent necessary for the clearly specified purposes. We may also collect personal data from sources other than the data subject directly, such as from government systems, in cases of necessity and through methods prescribed by law.

4Purposes of Collection, Use, and Disclosure

We collect, use, and disclose your personal data for the following purposes:

To develop or improve products and various forms of service.
For financial and tax transactions related to contractual performance.
To create databases for analysis and to present services or products of the company, its distributors, agents, or affiliates.
To improve operational quality, services, and business-related processes.
To analyze and monitor website usage and for back-tracing purposes in case of technical issues.
For participation in our various activities.
To comply with laws or regulations applicable to our services, both present and future.

The personal data collected for the above purposes is necessary for contractual or legal compliance. Failure to provide such data may result in a violation of the law, and we may be unable to manage the contract or facilitate various operations for you. If the purposes for collection change later, we will notify you and proceed as required by law, including maintaining a record of such amendments.

5Retention Period

We will retain your personal data for as long as necessary to fulfill the purposes of collection, use, and disclosure specified in this notice. The criteria for determining the retention period include the duration of our relationship as a customer. We may continue to retain data for as long as necessary to comply with the law, legal prescription periods, for the establishment of legal claims, or for other reasons according to our internal policies.

If a specific retention period cannot be identified, we will retain the data for an expected period according to collection standards (e.g., the general maximum legal prescription of 10 years).

10

Years — General Maximum Retention

In accordance with Thai legal prescription standards.

6Security Measures

We have established appropriate and strict security measures in accordance with our Information Technology Security Policy to prevent loss, unauthorized access, destruction, use, transformation, or modification of personal data.

7Your Rights as a Data Subject

As a data subject, you have the rights specified under the Personal Data Protection Act B.E. 2562, including:

7.1 Right to Withdraw Consent

You may withdraw your consent for data processing unless restricted by law or a contract beneficial to you. Withdrawal does not affect prior lawful processing.

7.2 Right to Access

You may request access to and a copy of your personal data under our responsibility, including disclosure of how the data was obtained without your consent.

7.3 Right to Data Portability

You may request the transfer of your personal data to another party as prescribed by law.

7.4 Right to Object

You may object to the collection, use, or disclosure of your personal data as prescribed by law.

7.5 Right to Erasure

You may request the deletion, destruction, or anonymization of your personal data as prescribed by law.

7.6 Right to Restriction of Processing

You may request the suspension of your data usage as prescribed by law.

7.7 Right to Rectification

You may request that we correct or update your personal data to be accurate, current, complete, and not misleading.

7.8 Right to be Informed of Amendments

We may review and amend this notice periodically to ensure your data is appropriately protected.

7.9 Right to Lodge a Complaint

You may lodge a complaint with the competent authorities under the PDPA if we violate or fail to comply with the Act.

We will process requests within the period required by law. We reserve the right to deny requests if permitted by law. Choosing to limit the provision of certain data may result in an inability to receive full services or our inability to work with you.

8Disclosure to Third Parties or Agencies

We may need to disclose personal data to strategic partners (domestic and international), for the enforcement of terms and conditions, in the event of organizational restructuring, or to government agencies/authorities by law or court order. Personal data will be kept confidential in both physical and electronic forms during all stages of transmission. Any cross-border transfers will strictly comply with the PDPA.

9Use of Cookies

10Data Protection Officer (DPO)

We have complied with the PDPA by appointing a Data Protection Officer (DPO) to monitor our collection, use, and disclosure of personal data to ensure compliance with the law.

11Contact Information

If you have questions or require more details regarding your personal data protection, please contact us at:

SUP-IMM UNLOCK — Official Contact

supimmunlock@gmail.com

12Changes to Policy and Practices

We will review this policy from time to time to align with practices and relevant laws. Any changes will be notified through appropriate company announcements.