Privacy Policy
Privacy Policy and Personal Data Protection (PDPA/GDPR)
Privacy Policy
Effective Date: July 1, 2024
Introduction
Our company is committed to protecting your personal data in accordance with the Personal Data Protection Act (PDPA), B.E. 2562 (2019). This policy explains how we collect, use, and safeguard your information.
1. Information We Collect
We collect personal data that you voluntarily provide through our Quotation Request Form, including:
- Full name
- Phone number
- Email address
- Installation location/address
- Property type (residential / commercial)
- Estimated monthly electricity bill
2. Purpose of Data Usage
We use your personal data for the following purposes:
2.1 To Contact You and Prepare Quotations
Legal Basis: Performance of contract or pre-contractual measures (PDPA Section 6.1)
2.2 To Provide Solar Installation and Maintenance Services
Legal Basis: Performance of contract (PDPA Section 6.1)
2.3 To Improve Our Services and Website Experience
Legal Basis: Legitimate interest of the data controller (PDPA Section 6.2)
2.4 To Comply with Legal Requirements
Legal Basis: Legal obligation (PDPA Section 6.3)
3. Data Retention Period
We retain your personal data in accordance with the following retention schedules:
- Quotation form data: 1 year from the date the quotation is closed
- Contract and service data: As required by law (currently 5 years)
- After the retention period expires, data will be securely deleted or anonymized, including from backup systems
4. Disclosure to Third Parties
We:
- Will NOT disclose your data to third parties without your explicit consent
- May disclose data when required by law (e.g., government investigations)
- Share data with Data Processors, such as:
- Hosting providers
- Email service providers
- CRM service providers
- Payment processors
We have signed Data Processing Agreements (DPA) to protect your information.
5. Data Security Measures
We protect your data using appropriate technical and organizational measures, including:
- Encryption (HTTPS + SSL/TLS) for data transmitted through our website
- Access Control restricting access to authorized personnel only
- Firewall systems and continuous security monitoring
- Regular password rotation and security updates
6. Your Rights
Under the Personal Data Protection Act, B.E. 2562, you have the following rights:
1. Right to Access
Request to view a copy of all your personal data
2. Right to Correction
Request to correct inaccurate or incomplete data
3. Right to Deletion (Right to be Forgotten)
Request to delete your personal data when no longer necessary
4. Right to Restrict Processing
Request to suspend processing of your data temporarily
5. Right to Object
Object to the collection, use, or disclosure of your data
Note: Exercising these rights may affect our ability to provide services. Please contact us to discuss further details.
7. Cookies
Our website uses cookies for the following purposes:
- Language and preference settings to remember your choices
- Security verification to prevent attacks (Google reCAPTCHA v3)
- Website analytics to improve user experience (Google Analytics)
Cookie Management
You can configure your browser to reject cookies, but this may affect some website features:
- Language preference settings may not work
- Forms may require re-entry of information
- Security features (reCAPTCHA) may have issues
8. Contact Information
If you have questions or concerns about this privacy policy or your personal data, please contact us:
Data Protection Officer
| Information | Details |
|---|---|
[email protected] | |
| Phone | 092-536-4156 |
Response Timeline
- Access Request: Within 30 days
- Correction Request: Within 30 days
- Deletion Request: Within 30 days
Right to Complaint with PDPC
If you are unsatisfied with our response, you have the right to lodge a complaint with the Office of the Personal Data Protection Committee (PDPC)
- Website: https://www.pdpc.or.th
- Contact: 02 111 8800
9. Policy Changes
We reserve the right to modify this privacy policy without prior notice.
Effective Date: When published on this website
If we make material changes, we will attempt to notify you by email or publish a notice on the website.
10. Additional Information
Terminology and Definitions
| Term | Definition |
|---|---|
| Data Subject | You (the individual) |
| Data Controller | Our company |
| Data Processor | Third-party companies processing data |
| Personal Data | Information about you |
| Processing | Collection, storage, use of data |
| Legal Basis | Legal reason for data collection |
| Data Retention | How long we keep data |
| DPA | Data Processing Agreement |
| PDPC | Office of Personal Data Protection Committee |
| PDPA | Personal Data Protection Act, B.E. 2562 |
Frequently Asked Questions (FAQ)
Q: How will my data be used?
A: Your data will be used only to contact you, prepare quotations, and provide services. We do not sell data to third parties.
Q: Can I request to delete my data?
A: Yes, you have the right to request deletion under the PDPA. Please contact our Data Protection Officer.
Q: What are cookies?
A: Cookies are small files stored on your device to remember settings and improve your experience.
Q: Is my data safe?
A: Yes, we use encryption and security measures to protect your information.
Q: How long do you keep my data?
A: Quotation data: 1 year. Contract data: 5 years.
Q: What if I don't provide all the information?
A: Some fields are required (marked with *) to provide our services. Optional fields can be left blank.
Q: Can you share my data with partners?
A: Only with your explicit consent and after signing a Data Processing Agreement.
Q: When should I review this policy?
A: We recommend reviewing annually. Updates will be published on this website.
Summary
This document was prepared in accordance with the requirements of the Personal Data Protection Act, B.E. 2562 (2019) and is designed to ensure fair and transparent handling of personal data.
Thank you for trusting our company 🙏
© 2026 Solar Einstein-16 and Consultant Co.,Ltd. All rights reserved.