Privacy & Policy

Siam Okamura International Co., Ltd. (the “Company”) has established and published this Privacy Notice to explain how the Company collects, uses or discloses the Personal Data of the existing and prospective customers and vendors of the Company, contractors, lessor, sellers or service providers, contractors, consultants, auditors, including directors, representatives, attorneys, or persons acting on behalf of such persons, as well as the Company’s visitors and other third parties, who have provided the Personal Data to the Company, including how the Company protects the Personal Data and properly handle such Personal Data according to the Personal Data Protection Act B.E. 2562 (2019).

The Company regularly reviews and, if appropriate, updates this Privacy Notice from time to time to ensure that the Data Subjects’ Personal Data is properly protected. In case of any significant update to this Privacy Notice, the Company will inform the Data Subjects via appropriate channel(s).

1. Definitions

“Personal Data” means any information relating to a natural person, which enables the identification of such person, whether directly or indirectly, but not including the information of the deceased persons in particular.
“Sensitive Personal Data” means the Personal Data according to Section 26 of the Personal Data Protection Act B.E. 2562 (2019) consisting of data pertaining to racial, ethnic origin, political opinions, cult, religious or philosophical beliefs, sexual behavior, criminal records, health data, disability, trade union information, genetic data, biometric data, or of any of the data which may affect the Data Subject in the same manner as prescribed by the Personal Data Protection Committee.
“Data Subject” or “Data Subjects” means a natural person whose Personal Data are collected, used or disclosed by the Company.
“Data Controller” means a natural person or a juristic person having the power and duties to make decisions regarding the collection, use, or disclosure of the Personal Data.

2. Purposes of collection, use or disclosure of Personal Data

2.1 Lawful basis for collection, use or disclosure of Personal Data
The Company processes the Personal Data as it is necessary for the scope set out in this Privacy Notice as follows:

(1) Where the Company obtains consent from the Data Subject as required by law;
(2) To prevent or suppress a danger to a person’s life, body or health;
(3) Where it is necessary for performing contractual obligations between the Data Subject and the Company or taking steps at the Data Subject’s request prior to entering into a contract;
(4) Where it is necessary for legitimate interests of the Company or any other persons or juristic persons, except where such interests are overridden by fundamental rights of the Data Subject’s Personal Data;
(5) To comply with laws to which the Company is subjected.

In some cases, the Company may need to collect the Data Subject’s Sensitive Personal Data. In the case where the Company collects the Sensitive Personal Data, the Company shall always obtain explicit consent from the Data Subjects prior to the time of such collection of Sensitive Personal Data, unless the explicit consent is not required by the Personal Data Protection Act B.E. 2562 (2019).

2.2 Purposes of collection for use or disclosure of Personal Data
The Company collects the Data Subjects’ Personal Data for various purposes depending on relationship between the Data Subjects and the Company as follows:

2.2.1 For the existing and prospective customers of the Company, including directors, representatives, attorneys, or persons acting on behalf of such persons (the “Customer”)

1. For communication and coordination with the Customer for public relations and offering products to the Customer.
2. For entering into a contract and performance of obligations under the scope of the contract or the relevant agreement(s) or as requested by the Customer, for example, issuing quotations, transmitting or receiving work-related information or documents between the Customer and the Company, purchase order confirmation, customer registration in the Company’s database and system, debit-credit registration in the Company’s system, distributing products, issuing delivery notes, delivering and installing products, including issuing invoices, receipts, debit-credit notes, tax invoices, following up on the payment and other related communication and coordination.
3. For inspecting and resolving issues when the Company’s products have problems or are damaged, including providing other related after-sales services.

2.2.2 For the existing vendors and prospective vendors of the Company, contractors, lessor, sellers or service providers, contractors, consultants, auditors, including directors, representatives, attorneys, or persons acting on behalf of such persons (the “Vendor”)

1. For inspection of the qualifications of the Vendor and communication before entering into a contract or other relevant agreement(s), where the Data Subject is a direct contracting party or where the Data Subject is director, representative, attorney, or personnel who acts on behalf of such Vendor, including requesting for a quotation and detail of products and services.
2. For entering into a contract or other relevant agreement(s) with the Vendor, creating purchase orders of products or services, including contract review process, and obtaining approval for entering into such contract or agreement(s).
3. For performance under the scope of the contract or the relevant agreement(s) regarding the purchase of products and services from the Vendor, for example, communication and coordination with the Vendor, transmitting or receiving work-related information or documents between the Vendor and the Company, vendor registration in the Company’s database and accounting system, debit-credit registration in the Company’s system, coordinating in the delivery and installation of the products to the Customer, inspection of products, payment of products or services, withholding taxes, and the relevant internal coordination and administration of the Company.
4. For using as evidence for approval and payment of reimbursement to the Company’s employees.

2.2.3 For other relevant cases

1. For granting visitors an access to the Company’s internet (Wi-Fi) signal.
2. To coordinate and facilitate the Company’s operations, such as requesting permission to enter the area for delivering or installing products at the customer’s premises.
3. For conducting planning, reporting, evaluation and data analysis for the Company’s operations.
4. For management of risks, prevention and undertaking of audits, reporting and undertaking of internal administration as required by laws, internal instructions or regulations of the Company, including considering complaints of fraud or misconduct within the Company, for example, the Company’s internal audit, investigating and preventing fraud or other unlawful acts, etc.
5. For undertaking detection and investigation under legal procedures and other regulations, complying with laws, rules, orders, legal requirements and obligations under Thai and foreign laws of the Company, and reporting or disclosing information to government authorities as required by laws, for example, the Revenue Department, or upon receiving summons or writ of executions from police officers, courts, or other competent authorities, including for proceeding with the judicial process, establishment, compliance or exercise of the rights to legal claims or defending against the rights to legal claims.
6. For assignment of rights, obligations, and any benefits under a contract between you and the Company, such as merger or transfer of the contract which has been done legally.

In the case where the Personal Data collected by the Company as stated above is necessary for the Company’s compliance with applicable laws or performance of contract and if the Data Subjects do not provide the Company with such necessary Personal Data, the Company may be subject to legal liabilities and/or may not be able to manage or administer contract or facilitate the Data Subjects.

3. Collected Personal Data  

3.1 Personal Data the Company collects

The Company collects several types of Personal Data from the Data Subjects, including:

3.1.1 Information used for the Data Subject identification such as name, surname, date of birth, age, gender, photo, nationality, tax ID number, national ID number, photocopy of national ID card, photocopy of house registration, passport number, photocopy of passport, signature, car registration number;
3.1.2 Contact information such as the residential address, office address, telephone number, email, Line ID;
3.1.3 Financial or transaction information such as bank account number;
3.1.4 Information about working, qualifications, skills and other qualifications of the Data Subject such as job title, department, working unit, certified public accountant registration number, and other licenses information; and
3.1.5 Information regarding the use and access of the Company’s information systems, computer, work systems, website, applications, network systems, electronic devices, e-mail systems in order to comply with the Company’s information technology policy and related laws such as IP address, device ID, data that the Company collects through cookies or similar technologies, computer traffic information (log), etc.;

In some cases, the Company may collect the Sensitive Personal Data, for example, religion and/or blood type appeared on a photocopy of national ID card, upon obtaining explicit consent from the Data Subjects or when permitted by law.

3.2 Sources of Personal Data
The Company may collect the Data Subjects’ Personal Data from various sources as follows: 

3.2.1 Collect the Personal Data directly from the Data Subjects, for example, when the Data Subjects make inquiries with the Company, procedures for taking steps at the request prior to entering into a contract, signing contracts, attaching supporting documents to the contracts, filing any claims or request for exercising rights to the Company, communication with the Company via various channels (for example, telephone, e-mail, etc.).
3.2.2 Collect the Personal Data from other sources, for example, original affiliation of the Data Subjects, the Company’s customers, government documents or other publicly available sources (for example, information made available on the internet).

4. Personal Data retention period
The Company retains the Data Subjects’ Personal Data for as long as it is considered necessary for the purpose for which it was collected, used or disclosed as set out in this Privacy Notice. The criteria used to determine the Company’s retention period include: the Company retains the Personal Data for the duration the Company has an ongoing relationship with the Data Subjects; and the Company may retain the Personal Data for a longer period as necessary to comply with applicable laws, or to be in accordance with legal prescription, or to establish, comply with or exercise the rights to legal claims or defend against the rights to legal claims, or to comply with, for any other cause, the Company’s internal policies and regulations.

5. Personal Data of minors, incompetent persons and quasi-incompetent persons
In some cases, the Company may collect the Personal Data of minors, incompetent persons or quasi-incompetent persons. In the case where the Data Subjects are minors, incompetent persons or quasi-incompetent persons, the Company shall comply with the laws relating to collection, use or disclosure of Personal Data of minors, incompetent persons and quasi-incompetent persons, which include obtaining consent from the legal representative, the curator or the custodian as required by law where the Company has no legitimate grounds other than obtaining consent for the collection, use or disclosure of such information.

6. Disclosure of Personal Data

6.1 Categories of persons or entities to whom the Personal Data may be disclosed
The Company may disclose the Data Subjects’ Personal Data in certain circumstances for the purposes set out in this Privacy Notice to:

6.1.1 Agencies, service providers, contractors and/or sub-contractors for any operations for the Company, for example, logistics service providers, the customers’ building administrator, auditors, lawyers, legal and tax advisers, and any consultants.
6.1.2 Banks and financial institutions for making payments or receiving payments for products and services.
6.1.3 Customers and vendors of the Company
6.1.4 Government authorities, supervisory authorities, independent authorities or other authorities as stipulated by laws, including competent officials who have power or perform their obligation under the laws, for example, courts, police officers, the Royal Thai Police, the Office of the Personal Data Protection Committee, the Revenue Department, the Department of Business Development, Department of Employment, Immigration Bureau.

6.2 Transmission or transfer of Personal Data to foreign countries
In some cases, the Company may transmit or transfer the Personal Data to foreign countries. In such case, the Company shall ensure that the destination country or international organization that receives such Personal Data shall have adequate data protection standard, and the Company shall provide appropriate protection and security measures and comply with the Personal Data Protection Act B.E. 2562 (2019) including obtaining consent from the Data Subjects for the transmission or transfer of Personal Data to foreign countries as required by law.

7. Rights of Data Subjects
The Data Subjects have certain rights according to the Personal Data Protection Act B.E. 2562 (2019) including the following rights:  

7.1 Right to object to the processing of personal data
The Data Subjects have the right to withdraw consent given to the Company for collecting, using or disclosing the Data Subjects’ Personal Data at any time, unless there is a restriction of the withdrawal of consent by law or the contract which gives benefits to the Data Subjects.

However, the withdrawal of consent shall not affect the collection, use or disclosure of Personal Data that the Data Subjects have already given consent legally.

7.2 Right of access
The Data Subjects have the right to request access to and obtain copy of the Data Subjects’ Personal Data, which is under the Company’s responsibility, or to request the disclosure of the acquisition of the Personal Data obtained without the Data Subjects’ consent.

7.3 Right to data portability
Where the Company arranges the Data Subjects’ Personal Data to be in the format which is readable or commonly used by ways of automatic tools or equipment, and can be used or disclosed by automated means, the Data Subjects have the right to receive the Data Subjects’ Personal Data from the Company and request the Company to send or transfer the Data Subjects’ Personal Data in such formats to other Data Controller(s) as provided by the law.

7.4 Right to object to the processing of personal data
The Data Subjects have the right to object to the collection, use or disclosure of the Data Subjects’ Personal Data on grounds stipulated by law.

7.5 Right to request for erasure or destruction of personal data
The Data Subjects have the right to request the Company to erase, destroy or make the Data Subjects’ Personal Data become unidentifiable data under certain circumstances as provided by law.

7.6 Right to restriction the use of personal data
The Data Subjects have the right to request the Company to restrict the use of the Data Subjects’ Personal Data under certain circumstances as provided by law.

7.7 Right to rectification
The Data Subjects have the right to request the Company to modify the Data Subjects’ Personal Data to be accurate, up-to-date, complete, and not misleading.

7.8 Right to file a complaint
The Data Subjects have the right to file a complaint to an authorized officer appointed by the Personal Data Protection Act B.E. 2562 (2019) when the Company violates or does not comply with such law.

In the case where the Data Subjects request to exercise the rights according to the provisions of the Personal Data Protection Act B.E. 2562 (2019), upon receiving the request, the Company will proceed with such request within the period as stipulated by law. In this regard, the Company reserves the right to refuse or not process the request under certain circumstances as stipulated by law.

8. Security measures for Personal Data
The Company implements appropriate and strict security measures for protecting the security of Personal Data in order to prevent unauthorized or unlawful loss, access to, use, alteration, correction or disclosure of Personal Data.

In the case where the Company assigns third parties to process the Personal Data pursuant to the orders given by or on behalf of the Company, the Company shall appropriately supervise such third parties to ensure that they will maintain the security of the Data Subjects’ Personal Data according to the Personal Data Protection Act B.E. 2562 (2019).

9. Contact information
If the Data Subjects have any questions or inquiries about the Personal Data protection, collection, use or disclosure of the Data Subjects’ Personal Data, or exercise of the Data Subjects’ rights, or have any complaints, please contact us at:

Siam Okamura International Co., Ltd.
Address: No. 3199 Maleenont Tower Building, 19th Floor, Rama 4 Road, Khlong Tan Subdistrict, Khlong Toei District, Bangkok.
Tel: 0-2661-5474-9
E-mail: webcontact@th.okamura.com

[Published on 21/10/2025]