Privacy Policy
Effective date: January 1, 2026
1. Introduction
Thunder Venture Group Company Limited ("Company", "we", "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and protect your personal data in accordance with the Thailand Personal Data Protection Act B.E. 2562 (2019) (PDPA) and applicable regulations.
2. Data Controller
Thunder Venture Group Company Limited
Address: 288, 102-103 Phahonyothin Rd, Anusawari, Bang Khen, Bangkok 10220
Phone: +66 2 000 0000
LINE: @thundervg
3. Personal Data We Collect
We collect the following categories of personal data:
- Data you provide directly: Name, email address, phone number, organisation/hospital name, and message content submitted through our contact form.
- Usage data: IP address, browser type, pages visited, and visit timestamps (collected automatically via server logs).
- Cookies: Essential cookies required for basic website functionality only (no tracking or advertising cookies).
4. Purposes of Collection and Use
We use your personal data for the following purposes:
- Responding to your inquiries and quote requests
- Providing product and service information you have requested
- Improving our website and services
- Complying with applicable laws and regulations
5. Lawful Basis for Processing
We process your personal data on the following legal bases:
- Consent: When you submit the contact form, you consent to our collection and use of the data you provide.
- Legitimate interest: Website improvement and service enhancement.
- Legal obligation: When required by law to retain certain data.
6. Disclosure of Personal Data
We may disclose your personal data to:
- Hosting provider: Netlify, Inc. (United States) for website hosting and form processing.
- Equipment manufacturers: When necessary to forward quote requests or technical inquiries.
- Government authorities: When required by law.
We do not sell your personal data to third parties.
7. International Data Transfers
Some data may be transferred to servers outside Thailand (Netlify CDN). We ensure appropriate data protection measures are in place as required by the PDPA.
8. Data Retention Period
- Contact form data: 2 years from the date of submission, or until you request deletion.
- Server logs: 90 days.
9. Your Rights as a Data Subject
Under the PDPA, you have the following rights:
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure: Request deletion of your personal data.
- Right to restriction: Request that we limit the processing of your data.
- Right to object: Object to the processing of your personal data.
- Right to data portability: Receive your data in a machine-readable format.
- Right to withdraw consent: Withdraw any consent you have previously given, at any time.
- Right to lodge a complaint: File a complaint with the Personal Data Protection Committee of Thailand.
To exercise any of these rights, please contact us using the details provided in the "Data Controller" section above.
10. Security Measures
- SSL/TLS encryption for all data transmitted through the website
- Access to personal data restricted to authorised personnel only
- Security headers (CSP, HSTS, X-Frame-Options)
- Regular review and improvement of security measures
11. Cookies
This website uses only essential cookies required for basic functionality. We do not use tracking cookies, advertising cookies, or third-party cookies. You may configure your browser to reject cookies, but this may affect some website functionality.
12. Changes to This Policy
We may update this policy from time to time. Material changes will be announced on this website. We recommend reviewing this policy periodically.
13. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact:
Thunder Venture Group Company Limited
Phone: +66 2 000 0000
LINE: @thundervg
14. Governing Law
This policy is governed by the laws of the Kingdom of Thailand, including the Personal Data Protection Act B.E. 2562 (2019) (PDPA). Any disputes shall be subject to the jurisdiction of Thai courts.