Privacy & Cookie Policy
Privacy Notice
This Privacy Notice is prepared by Thames Valley Khao Yai Hotel Co., Ltd., an affiliated company of Rende Development Co., Ltd., together with other affiliated companies[1] of Rende Development Co., Ltd. (collectively referred to as the “Company”).
The Company respects privacy rights and recognizes the importance of protecting customers’ personal data. This Privacy Notice explains how the Company collects, uses, and discloses your personal data, for what purposes, how such data is managed, and your legal rights under the Personal Data Protection Act B.E. 2562 (2019).
This Privacy Notice covers the Company’s services provided through websites, applications, social media, and other channels to customers and visitors. Your continued use of the Company’s services or provision of information constitutes acceptance of the practices described herein. The Company may revise this Privacy Notice from time to time to ensure relevance, efficiency, and legal compliance.
Before using this website or application, please read the terms, conditions, and privacy policy carefully. If you do not agree, please discontinue use immediately. Continued use constitutes consent to this policy.
- Sources of Personal Data Collection
1.1 Directly from you, such as registration details, account information, service applications, communications with the Company, service usage, website visits, surveys, seminars, and roadshows.
1.2 Tracking technologies when you use the Company’s website or applications.
1.3 Affiliated companies.
1.4 Third parties such as government agencies, financial institutions, agents, brokers, business partners, data providers, social media platforms, and advertising providers.
This is to keep your data updated and improve the quality and efficiency of the Company’s products and services.
- Cookies and Other Tracking Technologies
The Company uses cookies and tracking technologies such as Google Analytics and Facebook Conversion Tracking to collect browser type, time spent online, visited pages, referring URLs, language settings, and traffic data for security, convenience, analytics, and service improvement.
- Personal Data Collected by the Company
3.1 The Company may collect personal data received directly or indirectly as follows:
General Personal Data
(a) Personal details such as name, surname, age, date of birth, gender, nationality, place of birth, marital status, photograph, signature, ID card or passport details, and identification number.
(b) Contact details such as address, phone number, LINE ID, social media contact channels, workplace, postal code, email address, credit card, monthly income, and vehicle information.
(c) Security data such as CCTV footage, vehicle details, and registration numbers when entering Company premises.
(d) Employment-related data such as position, department, education history, work history, and training records.
(e) Financial data such as bank account details, financial transactions, and tax documents related to transactions with the Company.
(f) Electronic access data such as email, IP address, geolocation, browser type, log files, cookies, chat history, and online references to the Company.
(g) Information provided when contacting or participating in activities, including photos, audio recordings, comments, satisfaction, and suggestions.
Sensitive Personal Data
(h) Sensitive personal data such as health information, disability data, biometric data, and behavioral assessments.
The Company will obtain consent before collecting sensitive personal data unless otherwise permitted by law.
If identification documents contain sensitive data such as religion or blood type, please conceal such information before submission. If not concealed, the Company may do so for identification purposes only.
- Children
- The Company does not intentionally collect personal data from children below the legally permitted age.
- If you are a parent or guardian and believe a child has provided personal data, please contact the Company to exercise your rights.
- If a child requires the Company’s services, parental consent is required before providing personal data.
- Purposes of Collection / Use / Disclosure
4.1 To process transactions such as registrations, reservations, and requests for information or promotions.
4.2 To improve website and application performance, marketing plans, service evaluation, and product development.
4.3 To communicate information about products, services, benefits, promotions, and policy changes.
4.4 To perform contractual obligations, including service arrangements involving location data where applicable.
4.5 To comply with law, protect life, health, safety, and support research or statistics with safeguards.
4.6 For other purposes notified at the time of collection or related to the above purposes.
4.7 The Company will not use or disclose your data beyond necessity unless required by law or consented to by you.
- Persons Who May Receive Your Personal Data
5.1 Affiliated companies.
5.2 Business partners, vendors, and relevant employees.
5.3 Authorized representatives of the Company and their contractors.
5.4 Service providers supporting payments, documentation, technology systems, delivery, and research.
5.5 Government authorities, regulators, or persons to whom disclosure is legally required.
5.6 Data may be transferred internationally with appropriate safeguards in place.
- Data Security Measures
6.1 The Company uses Secure Socket Layer (SSL), encryption, and firewall protection to safeguard personal data and regularly reviews its systems.
6.2 External service providers engaged by the Company must also maintain confidentiality of personal data.
- Rights of Data Subjects
7.1 You have the right to access and obtain copies of your personal data, subject to legal limitations.
7.2 You may withdraw consent for data use or disclosure, though this may affect service availability.
7.3 You may request deletion, destruction, suspension, or anonymization where legally applicable.
7.4 Other legal rights include correction, restriction, and objection to processing.
7.5 Requests may be submitted to [email protected] and will be considered within 30 days.
- Marketing Communications
If you wish to withdraw consent for marketing communications, please contact [email protected]
- Exceptions to Personal Data Protection
The following shall not be considered a violation of this policy:
9.1 Data already publicly disclosed by you or lawfully made public.
9.2 Disclosure made with your written or other valid consent.
9.3 Disclosure required by law, regulation, court order, or government authority.
- Retention Period
The Company retains personal data only for as long as necessary to fulfill the stated purposes.
- Policy Updates / Contact Information
11.1 The Company may revise this policy in whole or in part and publish updates on its website.
11.2 Comments or inquiries may be sent to [email protected], and the Company’s discretion shall be final.
[1] Rende Development Co., Ltd., SC Office Park Co., Ltd., OAI Management Co., Ltd., SC Office Plaza Co., Ltd., P.T. Corporation Co., Ltd., SCK Estate Co., Ltd., B.B.D. Development Co., Ltd., Innovation Capital Co., Ltd., Thames Valley Khao Yai Hotel Co., Ltd., OAI Consultant and Management Co., Ltd., OAI Leasing Co., Ltd., Rende Ploenchit Hotel Co., Ltd., B.B.D. Property Co., Ltd., Pramaisuri Property Co., Ltd., Prominent Thalang Co., Ltd., P.D. Khao Yai Co., Ltd., P.D. Korat Co., Ltd., Live in the Present Co., Ltd., Bangkok Telecom Engineering Co., Ltd., Solid Asset Co., Ltd., Alpine Golf and Sports Club Co., Ltd., Alpine Garden Design Co., Ltd., Chiangmai Golf and Country Club Co., Ltd., Healthlink Co., Ltd., and Fortay (Thailand) Co., Ltd.