Privacy Notice

Introduction

Data Excellium Co., Ltd. (“Data Excellium”, “we”, “our”, or “us”) values your privacy and is committed to protecting your personal data. This Privacy Notice explains how we collect, use, disclose, and safeguard your personal data when you visit our website www.dataexcellium.com (the “Site”).

We process personal data in compliance with the Thailand Personal Data Protection Act B.E. 2562 (2019) (PDPA), the General Data Protection Regulation (GDPR), and the UK Data Protection Act 2018, as applicable.

Please read this Notice carefully to understand how we handle your personal data and your rights in relation to it.

1. Information About Us

  • Controller: Data Excellium Co., Ltd., a company registered in Thailand at 97/4 Ramkhamheang Street 112, Sapansoong, Sapansoong, 10240
  • Data Protection Officer:
       – Email: contact@dataexcellium.com

2. Scope of this Privacy Notice

This Privacy Notice applies only to your use of our Site. Our Site may contain links to third-party websites. We are not responsible for the privacy practices of other websites, and we encourage you to review their privacy notices before providing any personal data.

3. What is Personal Data?

Under Thailand’s PDPA, GDPR, and UK GDPR, “personal data” means any information relating to an identified or identifiable individual. This may include your name, contact details, identification numbers, online identifiers, or other information that can be linked to you.

4. Your Rights

Depending on the applicable law (PDPA, GDPR or UK GDPR), you may have the following rights:

  • Right to be informed – to know how your personal data is collected, used, and shared.
  • Right of access – to request confirmation and a copy of your personal data we hold.
  • Right to rectification – to request correction of inaccurate or incomplete personal data.
  • Right to erasure (“right to be forgotten”) – to request deletion of your personal data, subject to legal or contractual obligations.
  • Right to restrict processing – to request that we limit how we use your data.
  • Right to object – to object to certain types of processing, including direct marketing.
  • Right to data portability – to request a copy of your personal data in a structured, machine-readable format.
  • Right to withdraw consent – where we rely on your consent, you can withdraw it at any time.
  • Rights in relation to automated decision-making and profiling – we do not use your personal data for these purposes.

If you are based in Thailand, you may also have additional rights under the PDPA, including the right to complain to the Thai Personal Data Protection Committee (PDPC) at https://complaint.pdpc.or.th/.

You may exercise your rights by contacting us at contact@dataexcellium.com

5. Personal Data We Collect and How We Collect It

We generally do not collect personal data when you browse our Site. We do not use cookies for tracking, profiling, or analytics.

However, if you contact us via email or other means, we may collect:

  • Your name
  • Your email address
  • Any other information you choose to provide in your communication

We act as the data controller for such personal data.

6. Legal Basis for Processing

We process your personal data only when permitted by law, including:

  • Legitimate interests: e.g., responding to enquiries, ensuring proper operation of the Site.
  • Legal obligations: where required to comply with laws or regulatory requirements.
  • Consent: where you have given explicit consent (for example, if you subscribe to marketing communications).

7. How We Use Your Personal Data

We use your personal data to:

  • Respond to enquiries or requests you make;
  • Communicate with you regarding our services;
  • Comply with legal and regulatory requirements.

We only retain personal data for as long as necessary for the purposes for which it was collected, and in accordance with legal retention obligations.

8. Data Security and Storage

  • We implement appropriate technical and organisational measures to secure your personal data against loss, misuse, unauthorised access, alteration, or disclosure.
  • Your personal data is stored within Thailand. If transfer outside the Kingdom of Thailand is necessary, we will ensure adequate safeguards (such as Standard Contractual Clauses or PDPA-compliant transfer mechanisms) are in place.

9. Sharing of Personal Data

We do not sell or rent your personal data. We may share it only in the following circumstances:

  • With employees, contractors, or service providers who require access to provide services, under strict confidentiality obligations.
  • If we sell, transfer, or merge parts of our business, personal data may be transferred to the new owner under the same protections.
  • Where required by law, regulation, legal proceedings, or government authorities.

10. How to Exercise Your Rights / Contact Us

If you wish to exercise your rights or have any concerns about our handling of your personal data, please contact us at contact@dataexcellium.com

If you are not satisfied with our response, you may lodge a complaint with PDPC at https://complaint.pdpc.or.th/.

11. Consent

Where required under the PDPA or GDPR, we will request your explicit consent before collecting, using, or disclosing your personal data for purposes beyond the scope of this Privacy Notice (e.g., marketing, cross-border transfers). You may withdraw your consent at any time by contacting us at the details above. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

12. Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect legal, technical, or business changes. Updates will be posted on this Site, and the “last updated” date will be revised accordingly.

Last updated: 15 August 2025