Privacy Policy

Effective date: January 1, 2026

1. Introduction

Thunder Venture Group Company Limited ("Company", "we", "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and protect your personal data in accordance with the Thailand Personal Data Protection Act B.E. 2562 (2019) (PDPA) and applicable regulations.

2. Data Controller

Thunder Venture Group Company Limited
Address: 288, 102-103 Phahonyothin Rd, Anusawari, Bang Khen, Bangkok 10220
Phone: +66 2 000 0000
LINE: @thundervg

3. Personal Data We Collect

We collect the following categories of personal data:

  • Data you provide directly: Name, email address, phone number, organisation/hospital name, and message content submitted through our contact form.
  • Usage data: IP address, browser type, pages visited, and visit timestamps (collected automatically via server logs).
  • Cookies: Essential cookies required for basic website functionality only (no tracking or advertising cookies).

4. Purposes of Collection and Use

We use your personal data for the following purposes:

  • Responding to your inquiries and quote requests
  • Providing product and service information you have requested
  • Improving our website and services
  • Complying with applicable laws and regulations

5. Lawful Basis for Processing

We process your personal data on the following legal bases:

  • Consent: When you submit the contact form, you consent to our collection and use of the data you provide.
  • Legitimate interest: Website improvement and service enhancement.
  • Legal obligation: When required by law to retain certain data.

6. Disclosure of Personal Data

We may disclose your personal data to:

  • Hosting provider: Netlify, Inc. (United States) for website hosting and form processing.
  • Equipment manufacturers: When necessary to forward quote requests or technical inquiries.
  • Government authorities: When required by law.

We do not sell your personal data to third parties.

7. International Data Transfers

Some data may be transferred to servers outside Thailand (Netlify CDN). We ensure appropriate data protection measures are in place as required by the PDPA.

8. Data Retention Period

  • Contact form data: 2 years from the date of submission, or until you request deletion.
  • Server logs: 90 days.

9. Your Rights as a Data Subject

Under the PDPA, you have the following rights:

  • Right of access: Request a copy of the personal data we hold about you.
  • Right to rectification: Request correction of inaccurate or incomplete data.
  • Right to erasure: Request deletion of your personal data.
  • Right to restriction: Request that we limit the processing of your data.
  • Right to object: Object to the processing of your personal data.
  • Right to data portability: Receive your data in a machine-readable format.
  • Right to withdraw consent: Withdraw any consent you have previously given, at any time.
  • Right to lodge a complaint: File a complaint with the Personal Data Protection Committee of Thailand.

To exercise any of these rights, please contact us using the details provided in the "Data Controller" section above.

10. Security Measures

  • SSL/TLS encryption for all data transmitted through the website
  • Access to personal data restricted to authorised personnel only
  • Security headers (CSP, HSTS, X-Frame-Options)
  • Regular review and improvement of security measures

11. Cookies

This website uses only essential cookies required for basic functionality. We do not use tracking cookies, advertising cookies, or third-party cookies. You may configure your browser to reject cookies, but this may affect some website functionality.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be announced on this website. We recommend reviewing this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact:

Thunder Venture Group Company Limited
Phone: +66 2 000 0000
LINE: @thundervg

14. Governing Law

This policy is governed by the laws of the Kingdom of Thailand, including the Personal Data Protection Act B.E. 2562 (2019) (PDPA). Any disputes shall be subject to the jurisdiction of Thai courts.