Privacy Policy

“Personal Data” means any information relating to an individual, which enables the identification of such individual, whether directly or indirectly, but not including the information of the deceased persons in particular, including, but not limited to name, address, date of birth, telephone number, e-mail address, etc.

“Sensitive Personal Data” means any Personal Data relating to racial, ethnic origin, political opinions, cult, religious or philosophical beliefs, sexual behavior, criminal records, health data, disability, trade union information, genetic data, biometric data, or of any data which may engender the unfair discrimination against the data subject or affect the data subject in the same manner as prescribed by data protection laws.

“Processing”, “Process”, or “Processed” means any collection, use, disclosure or other operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, alignment or combination, restriction, erasure or destruction.

“Legal Basis” means the justifiable ground to collect and use Personal Data as prescribed in the PDPA.

We may collect all or some of the following types of Personal Data from you:

Name, address, telephone number, e-mail address, business card, job position, signature, photo, bank account, car license number, copy of identification card (with no religion and/or blood type record), book bank, tax ID number, certified auditor number, action by CCTV, contact on smartphone application or social media program, and other information as necessary to achieve the Company’s purposes specified herein.

In case that the Company collects, uses, or discloses any of your Sensitive Personal Data, for instance, your health information, religion, blood type, and criminal record, etc., we shall inform and request for your written consent prior to the Processing of such Sensitive Personal Data.

The Company may collect your Personal Data directly from you or any other source, including, but not limited to the following:

• 1.
  1.
  Provided directly by you inherently when we establish a business relationship with you, including information obtained by business card exchange and submitted by you in various documents;
• 2.
  2.
  Provided indirectly from our business partners, supplier, service providers, etc.; and
• 3.
  3.
  Captured by a security system, such as a CCTV camera when you are entering into our office or an event venue.

In the event that you provide any Personal Data to the Company on behalf of other persons, it is your responsibility to confirm that such other persons have consented to the Processing and transfer of their Personal Data in accordance with this Privacy Policy (if necessary), and you shall be authorized to receive any privacy policy and other related information on their behalf. In the event that you provide a minor’s Personal Data, you shall obtain consent from his/her parent or legal guardian.

We do not knowingly collect Personal Data from minors under the age of 20 without the consent of parents or guardians. If we learn that Personal Data of any Customers less than 20 years of age has been collected, we will obtain the consent of parents or guardians, or take reasonable measures to promptly delete such data from our records.

The Company will collect Personal Data for the following purposes depending on relationship between you and the Company:

(i) To perform a contract management with you or your employer or to take steps at your request before entering a contract, including to:

• •
  Provide information regarding our services;
• •
  Assist you and answer your requests regarding our services;
• •
  Evaluate if we can offer you the services and under which conditions (e.g., our credit analysis process); and
• •
  Provide services to our corporate clients of whom you are an employee or representative.

(ii) To comply with legal obligations and to report or disclose information to government authorities as required by laws, including anti-money laundering and combating financing of terrorism, laws relating to vehicles, land transport and land traffic, laws relating to commission of offences relating to computers, foreign exchange control laws, tax laws, and PDPA;

(iii) To develop our services, to improve our risk management, and to defend and audit our legal rights, including:

• •
  Proof of transactions;
• •
  Fraud prevention;
• •
  IT management, including infrastructure management (e.g., shared platforms), business continuity and IT security;
• •
  Improving the quality of our services; and
• •
  Advertising services that match with your situation and profile.

(iv) To evaluate, improve and develop our services, marketing activities, and sales promotion, customer relationships and experiences;

(v) To survey your satisfaction with our Services including our sales personnel’s service quality and to analyze your preferences, market research and develop our products and services to meet your requirements;

(vi) To inform you about product or service information, special privileges, marketing campaign and activities, and sales promotion, to offer our products or services, and to send activity invitation;

(vii) To communicate with you in case of emergency and other notifications without marketing purpose;

(viii) To monitor security in our premises by using CCTV to collect images of those who contact us at our premises;

(ix) To manage the payment, fees, and charges;

(x) To receive, shipment, transfers, import and export our goods or services;

The Company will Process the Personal Data only within the scope of the purposes above.

In case of Processing of the Customers' Personal Data for other purposes than the purposes specified above, the Company will notify you in advance of such new purposes as required by the PDPA.

By manifesting their intention to consent for any Processing activity which relies on consent basis, Customers shall give their consent to the Processing of their Personal Data for any specific purposes as separately requested by the Company in writing, and the Company shall Process the Customers' Personal Data based on such consent; provided, however, that the Customers may withdraw its consent at any time. Even in that case, this will not affect any legitimate Processing performed pursuant to consent before the Customers' withdrawal thereof.

The Personal Data that the Customers are to provide is necessary in order for the Company to provide the services to the Customers and in some situations, to enable the Company to comply with applicable legal obligations, and there may be cases in which the Customers who have not provided such data will be unable to receive services.

Your Personal Data shall be Processed for the aforementioned purposes in accordance with the PDPA. In principle, the Company shall Processes your Personal Data by relying on the following Legal Basis:

• •
  The performance of a contract to which the Customers are a party or in order to take steps at the request of the Customers prior to entering into a contract;
• •
  The Processing is necessary for legitimate interests pursued by the Company as a data controller or interests of a third party other than the Customers, except where the fundamental rights and freedoms of the Customers regarding the protection of his or her Personal Data override these interests;
• •
  To comply with any legal obligations imposed upon the Company;
• •
  To prevent or suppress a danger to a person’s life, body, or health;
• •
  The performance of a task carried out in the public interest or in the exercise of official authority vested in the Company;
• •
  The achievement of purposes relating to the preparation of historical documents or archives for the public interest or for purposes relating to research or statistics in which suitable measures to safeguard the data subject’s rights and freedoms are taken; and/or
• •
  Processing based on the Customers’ consent. Before or at the time the Personal Data is collected, the Company shall inform the person concerned about the purpose for which consent is required, what Personal Data will be collected for Processing, the right to revoke consent, the possible consequences for the Customers in automated individual decision-making and profiling, and the possible transfer to third countries.

The Company will retain the Customers' Personal Data as long as the Company requires such data for achieving the purposes of use specified in this Privacy Policy and will promptly delete the same in the case that such data is no longer necessary.

We retain the Personal Data for the duration we have an ongoing relationship with you; or we may retain the Personal Data for a longer period as necessary to comply with applicable laws, or to be in accordance with legal prescription, or to establish, comply with or exercise the rights to legal claims or defend against the rights to legal claims, or to be comply with, for any other cause, our internal policies and regulations.

The Company may disclose your Personal Data in certain circumstances, for the purposes set out in this Privacy Policy, to the following third parties:

(i) Subsidiaries, affiliates and any related companies (i.e. (a) a company that holds shares in the Company and/or a company whose shares are held by the Company, and/or (b) a company whose shares are held by the company/companies indicated in (a) herein above whether directly or indirectly) for business purposes, internal management, fraud prevention and detection, and undertaking any other activity as set out in this Privacy Policy;

(ii) Government authorities, supervisory authorities or other authorities as stipulated by laws, including competent official, e.g., courts, police officers, revenue department, department of land transport, department of labor protection and welfare, immigration bureau, social security office, department of skill development and other competent authorities;

(iii) Agencies, contractors/sub-contractors, banks/financial institutions, and/or service providers in relation to operations of business of the Company, including:

• •
  Carriers, document storage and destruction service providers, printing house, marketing agency, IT development and maintenance companies.
• •
  Auditors, lawyers, tax and legal advisers and any consultants.
• •
  Call Center service companies.

(iv) Business partners of the Company or other third parties as per your consent or contractual requirements or legal requirements, as the case may be;

(v) Other third parties that are our service assignees necessary to the ordinary course of business;

The Company may provide the Customers' Personal Data to third parties such as the subsidiaries and affiliates of the Company, vendors and contractors of the Company, etc., which are located/resided outside Thailand (e.g., to Japan, Singapore, and Hong Kong, etc.), to Process and achieve the purposes of collection, use and disclosure specified herein. In such case, the Company shall comply with the requirements under the PDPA for the purpose of the transfer hereunder, including to ensure that the country of destination has an adequate data protection standard. However, please be aware that certain countries may not currently offer the same level of standard on data protection as in Thailand, in that regard, we will put in place any reasonable measures to ensure that your Personal Data is Processed securely and in accordance with this Privacy Policy.

Pursuant to the PDPA, you shall have the following rights towards your Personal Data:

• •
  Right to withdraw your consent;
• •
  Right to access Personal Data;
• •
  Right to correct Personal Data;
• •
  Right to erase, destroy, or anonymize Personal Data;
• •
  Right to restrict the use of Personal Data;
• •
  Right to request a data portability; and
• •
  Right to object the Processing of Personal Data.

The request for exercising the abovementioned rights of the data subject or for any general inquiries regarding the Processing of your Personal Data may be submitted to the Company via the contact information as provided in ‘(10) Contact’ below.

Please be informed that, in certain circumstances to the extent applicable under the PDPA, the Company may reserve the rights to refuse the Customers' requests. For instance, if the Company deems that there is no legitimate basis for such Customers' requests, or if such request is excessive, or the Customers could not verify himself/herself that he/she is the data subject who has those rights toward the Personal Data retained by the Company. You may lodge a complaint to the Personal Data Protection Committee of Thailand (PDPC) if you do not agree with the Company’s decision.

In the event of Customers having any questions or concerns regarding this Privacy Policy or the Processing of Personal Data by the Company, or having any requests for exercising its rights under the PDPA, please contact the Company via the following channels:

Ayvens MHC Mobility Services (Thailand) Company Limited 26F Asia Centre Tower, 173/35 South Sathorn Road, Thungmahek, Sathorn, Bangkok 10120 Tel: 02 033 4488 Email: clientenquiry.th@ayvens.com

The Company regularly reviews and, if appropriate, updates this Privacy Policy from time to time to ensure that Customers’ Personal Data is properly protected. In case of any update to this Privacy Policy, the Company will inform the Customers through this website, or other appropriate methods. Please visit https://www.ayvens.com/en-th from time to time for the updated Privacy Policy.

Established: Apr 04, 2024 Last Updated: May 02, 2025