LEGAL NOTICE
Privacy Notice
Notice on the collection, use and disclosure of personal data
This Notice explains the collection, use and disclosure of personal data in connection with the website https://www.alufence-th.com and communications with the operator of the website under the trade name Alufence.
It is issued under Thailand’s Personal Data Protection Act B.E. 2562 (2019) and related laws, subordinate legislation, notifications and guidelines, insofar as they require notice before or at the time of collection, a lawful basis for processing, and the exercise of data-subject rights.
Use of the website, submission of the contact form, or communication through the channels stated in this Notice means you have been informed of this Notice. Being so informed does not waive your statutory rights and is not consent where the law requires a separate consent.
1 Data controller
The data controller under this Notice is the operator of the website under the trade name Alufence. Contact: showroom 64/161 Ratchaphruek Rd, Om Kret, Pak Kret, Nonthaburi 11120; email alufence.th@gmail.com; telephone 095-116-9889.
As at the effective date of this Notice, the controller has not appointed a data protection officer under section 41 of the Personal Data Protection Act B.E. 2562, unless later required by law. If an officer is appointed, the contact details will appear in a revised Notice.
Questions about this Notice, the processing of personal data, or the exercise of data-subject rights should be sent to the controller by the channels above or through the website’s contact page.
2 Scope of this Notice
This Notice applies to personal-data processing arising from use of the website, the contact form, telephone, email, LINE, Facebook or other channels published on the website, and showroom visits connected with an enquiry or appointment made through the website.
It does not generally govern processing of employees, job applicants, procurement counterparties, or processing under a separate written sale, hire-of-work or installation contract, except where that processing began through the website and remains within the scope of this Notice.
Third-party websites, including map, video, social-network and measurement providers, issue their own notices. When you leave this website for another site, that processing is outside the controller’s control under this Notice.
3 Definitions
In this Notice, “personal data”, “data subject”, “data controller”, “data processor” and “Personal Data Protection Committee” have the meanings given in the Personal Data Protection Act B.E. 2562.
“Website” means the site at https://www.alufence-th.com, including English pages under the /en path and pages linked within the same domain.
“Processing” means the collection, use or disclosure of personal data.
“Consent” means consent of the data subject under section 19 of the Personal Data Protection Act B.E. 2562, which must be unambiguous, freely given, informed of necessary particulars, and withdrawable.
5 Sources of personal data
The controller collects personal data from the following sources.
- Directly from you when you complete the contact form, telephone, email, contact via LINE or Facebook, visit the showroom, or send drawings, photographs or project details.
- From your device, browser or browsing environment when you visit the website, including technical data that website hosting systems may record automatically, and data from cookies or similar technologies as described in the Cookie Notice.
- From a person you instruct or allow to contact us on your behalf, such as an architect, contractor or family member who sends your data to request product information or an appointment.
- From third-party providers, to the extent you have consented or the law permits, such as analytics or marketing tools when you grant the relevant category.
6 Categories of personal data collected
The controller collects only personal data necessary for the purposes in this Notice. The categories depend on the channel you choose. You need not provide every category, except data required to act on your request.
The controller does not require a copy of a national identity card, a national identification number, credit-card financial data, or sensitive personal data through the website as a condition of browsing or sending an enquiry.
| Category | Examples | When collected |
|---|---|---|
| Identity data | Name or the name you give | Contact form, telephone, LINE, Facebook and the showroom |
| Contact data | Telephone number, email, LINE account | The contact form and the channel you use |
| Project data | Site location, size, drawings, photographs and your description | Messages you send and documents you attach or later supply |
| Communication data | Message content, date and time, and correspondence history | Each channel you use |
| Technical data | IP address, browser type, pages viewed, system logs | On visiting the website; hosting systems may record this automatically |
| Consent records | The alufence_consent cookie value | When you set cookie preferences |
| Analytics and marketing identifiers | Identifiers set by analytics or advertising providers | Only if you grant the matching category and the tool identifier is installed |
The table illustrates ordinary use of the website. Not every category is collected from every visitor.
7 Purposes and legal bases
The controller processes personal data for the following purposes and on the following legal bases, relying on section 24 of the Personal Data Protection Act B.E. 2562 for ordinary personal data and on sections 19 and 21 where the law requires consent.
The controller will not use personal data for a materially different purpose without taking the steps required by law, including a fresh notice or fresh consent where a statute so provides.
| Purpose | Legal basis | Approximate retention |
|---|---|---|
| Responding to enquiries, supplying product information and taking pre-contractual steps | Necessary to act on the data subject’s request before entering a contract, section 24(3) | For as long as needed to reply and follow up; if no relationship arises, ordinarily not more than two years from last contact unless needed for legal claims |
| Showroom appointments and project coordination | Pre-contractual steps, or legitimate interests under section 24(5) | As for enquiries, or for the life of the appointment |
| Performing a sale, hire-of-work or installation contract and any warranty | Contractual necessity, section 24(3), and legal obligation, section 24(6) | For the contract term, warranty period and any statutory retention, including limitation periods |
| Operating the website, remembering consent choices and maintaining security | Necessary to provide the requested service, and legitimate interests in security under section 24(5) | The alufence_consent cookie is retained for 180 days. Technical logs are kept only as needed for security and fault diagnosis |
| Measuring website use in aggregate | Consent under section 19 | As set by the tool provider, and until you withdraw consent |
| Measuring advertising and conversions | Consent under section 19 | As set by the tool provider, and until you withdraw consent |
| Establishing, exercising or defending legal claims | Legitimate interests under section 24(5) and legal obligation under section 24(6) | For as long as a claim or legal duty subsists |
Section numbers refer to the Personal Data Protection Act B.E. 2562. If that Act is amended, the controller will apply the provisions then in force.
8 Sensitive personal data
The controller does not intend to collect sensitive personal data under section 26 of the Personal Data Protection Act B.E. 2562 through the website, including data on racial or ethnic origin, political opinions, cult, religious or philosophical beliefs, sexual behaviour, criminal records, health, disability, trade-union information, genetic data, biometric data, or other data prescribed by the Committee.
If you include such data in an unsolicited message, the controller will process it only as needed to respond to your enquiry, or will erase or destroy it when it is no longer needed. If the law requires explicit consent or another exception under section 26, the controller will satisfy that requirement before further processing.
9 Data of minors
The website is intended to inform homeowners, architects, contractors and persons interested in a project about architectural aluminium products. It is not directed at children.
If the controller learns that it has collected a minor’s personal data without valid consent under section 22 of the Personal Data Protection Act B.E. 2562 and the Civil and Commercial Code, it will erase or destroy that data unless another legal basis permits retention.
10 Disclosure of personal data
The controller discloses personal data only as necessary for the purposes in this Notice and only to the following persons.
- Staff and contractors of the controller who need the data to reply, make an appointment, quote or provide a service.
- Website hosting and content-delivery providers, including those who make the website available on the internet.
- The electronic-mail provider for alufence.th@gmail.com, which is presently a Google service.
- LINE, for the accounts @alufence and @alufence-service, when you contact us via https://lin.ee/XIFIToZ.
- Meta, when you contact us via https://www.facebook.com/alufence.th.
- Google, when the showroom map is displayed, when YouTube videos are shown on product pages, when you allow analytics or marketing tools, and in connection with Google Tag Manager and Google Search Console as described in the Cookie Notice.
- Microsoft Clarity, if the tool identifier is installed and you have granted analytics consent.
- Professional advisers, such as lawyers, auditors or tax advisers, to the extent necessary.
- Public authorities, courts or persons authorised by law, where disclosure is legally required.
11 Cross-border transfers
Some providers listed in clause 10 are established or host data outside Thailand, including in countries whose data-protection laws differ from Thai law. Use of those services may be a transfer of personal data abroad under sections 28 and 29 of the Personal Data Protection Act B.E. 2562.
If the destination country does not have an adequate level of protection as prescribed by the Committee, the controller will transfer data only where a statutory exception applies, such as your consent after being informed of the inadequate standard, necessity to perform a contract to which you are party or to take steps at your request before entering a contract, necessity for legitimate interests on the conditions prescribed by law, or appropriate safeguards required by law.
Collection, use and disclosure by third-party providers are governed by their own policies. The controller takes reasonable steps to withhold non-essential tools until consent is obtained, but cannot warrant the operations of those providers.
12 Retention
The controller retains personal data only as long as necessary for the stated purposes and for legal duties. When that need ends, the data will be erased, destroyed or rendered non-identifiable, unless the law permits or requires further retention.
Approximate periods appear in clause 7. If a specific statute, such as accounting or tax law, prescribes a longer period, that period applies.
Cookies and similar technologies last for the periods in the Cookie Notice. You may delete cookies from your browser at any time.
13 Security measures
The controller maintains security measures appropriate in the circumstances to prevent loss of, unauthorised or unlawful access to, use, alteration or disclosure of personal data, under section 37 of the Personal Data Protection Act B.E. 2562. These include access limited by role, encrypted transport where that is a standard feature of the website, and reasonable review of third-party providers.
Even with those measures, electronic communication cannot be guaranteed completely secure. You should consider what you send through the contact form, email, LINE or Facebook, especially sensitive or commercially confidential information.
The website contact form opens the mail application on your device to send a message to alufence.th@gmail.com. That message travels through your mail system and the recipient’s. It is not stored as a database on the website.
14 Data-subject rights
Subject to the Personal Data Protection Act B.E. 2562 and legal exceptions, you have the following rights.
- The right to be informed under section 23 before or at the time of collection.
- The right to withdraw consent under section 21. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
- The right of access and to obtain a copy under section 30, including to be informed of the source of data collected without your consent.
- The right to obtain personal data in a commonly usable electronic format and to have it transmitted to another controller under section 31, where the statutory conditions are met.
- The right to object to collection, use or disclosure under section 32.
- The right to request erasure, destruction or anonymisation under section 33.
- The right to request restriction of use under section 34.
- The right to request rectification so that data are accurate, up-to-date, complete and not misleading, under section 35.
- The right to lodge a complaint with the Expert Committee under section 73 if the controller or a processor violates or fails to comply with the Act or a notification issued under it.
15 Exercise of rights
Requests should be sent to the controller at alufence.th@gmail.com, telephone 095-116-9889, or through the website’s contact page, stating your name, a return channel, the right you wish to exercise, and enough information to verify your identity.
The controller will act on the request within the time prescribed by law and may ask for further information to verify identity or clarify the request. A request that is unfounded, excessive or that the law permits to be refused may be refused with reasons.
Some rights may be limited where a statute so provides, where compliance would affect the rights and freedoms of others, where it would prevent compliance with law or a contract, or where the request is not made in good faith.
Consent for non-essential cookies may be withdrawn at any time through the website’s cookie settings, without prejudice to the other rights in this clause.
16 Consequences of not providing personal data
You may use the principal content of the website without giving a name, telephone number or project details.
If you do not provide data needed to reply, the controller may be unable to answer an enquiry, make an appointment, prepare a quotation or act on your request.
Refusing non-essential cookies does not prevent you from using the principal content of the website, including product videos embedded from YouTube, except for functions that depend on analytics or marketing tools.
17 Automated decision-making
The controller does not use solely automated decision-making, without human involvement, that produces legal effects concerning you or similarly significantly affects you, from data collected through the website.
Analytics and marketing tools that you allow may group visitors in aggregate to measure campaigns. They are not used to refuse a service or to set product prices automatically on the website.
19 Changes to this Notice
The controller may amend this Notice when processing, contact channels, applicable law or business needs change. An amendment takes effect when the revised Notice is published on the website, with the effective date and version stated at the head of the Notice.
If a change would collect, use or disclose personal data in a materially different way and the law requires fresh consent, the controller will enable you to give that consent.
20 Contact
To exercise your rights, make a complaint or ask about this Notice, contact the controller at alufence.th@gmail.com, telephone 095-116-9889, showroom 64/161 Ratchaphruek Rd, Om Kret, Pak Kret, Nonthaburi 11120, or through the website’s contact page.
If there is any conflict between the Thai and English texts, the Thai text prevails.