Privacy Policy

MOUNTAIN PLYWOOD recognizes the importance of protecting your personal data. We are committed to safeguarding the privacy of all our customers. This Privacy Protection Policy explains the types of data we collect and how we handle your personal information, including collection, storage, use, disclosure, and your various rights. To ensure you are aware of our privacy protection policies, we hereby announce the following Privacy Policy.

General Details

This Privacy Protection Policy is established to clarify details and serve as a guideline for the correct, appropriate, and secure collection, storage, use, and disclosure of personal data. Its purpose is to protect the rights of data subjects, including customers, service users, employees, or other stakeholders who provide personal data directly to the company or through the company's information systems, and to comply with the requirements of the Personal Data Protection Act B.E. 2562 (PDPA).

What are Cookies?

Cookies are small text files that are installed or saved on your computer or electronic device when you visit a website. Cookies remember your website usage information. In this context, we also refer to other technologies that perform similar functions as cookies.

Respect for the Privacy Rights of Data Subjects

MOUNTAIN PLYWOOD respects and prioritizes the right to personal data and its protection. We understand that data subjects desire security when using services. Personal data received by the company—such as name, age, address, and phone number, which can identify the data subject—will be complete, accurate, current, and high-quality. This data will be used solely for the company's operational purposes. We implement strict security measures and prevent unauthorized use of personal data without prior consent from the owner. Additionally, the company will immediately notify the data subject of any personal data breach upon its occurrence.

Collection of Personal Data

เรามีการเก็บรวบรวมข้อมูลส่วนบุคคล ได้แก่ ข้อมูลติดต่อส่วนบุคคล เช่น ชื่อ นามสกุล เบอร์โทร ที่อยู่ อีเมล และข้อมูลอื่นๆ ซึ่งปรากฎอยู่ในแบบฟอร์มในการกรอกข้อมูลรวมถึงเอกสารที่ใช้ประกอบแบบฟอร์มเราทำการจัดเก็บข้อมูลส่วนบุคคลดังกล่าวเพื่อดำเนินการตามวัตถุประสงค์การดำเนินงานของเรา อันชอบด้วยกฎหมาย และเพื่อปรับปรุงการดำเนินงานของบริษัทฯ ให้มีประสิทธิภาพมากยิ่งขึ้น โดยเราจะจัดเก็บข้อมูลส่วนบุคคลเฉพาะข้อมูลที่จำเป็นต่อการดำเนินงานเท่านั้น อาทิ

  • 1. To perform transactions/activities related to the company's business operations.
  • 2. For research, study, and statistical purposes.
  • 3. To develop services, conduct marketing, advertising, public relations, and send newsletters about products and promotions related to the company's goods and services.
  • 4. To improve, develop, and increase the efficiency of the company's operations.
  • 5. To receive complaints, suggestions, feedback, or comments.
  • 6. To contact the data subject through any channel to inquire, notify, verify, or confirm information about the data subject, or to conduct surveys as necessary.
  • 7. To verify information for orderliness and compliance with relevant laws and regulations currently in force or as they may be amended or added to in the future.

If there is a subsequent change in the purpose of collecting personal data, the company will notify or publicize this to the data subject without delay. In collecting such personal data, the company will only do so with the consent of the data subject or stakeholders. To ensure smooth business operations or to perform duties owed to customers, the company may disclose personal data to third-party service providers, agents, subsidiaries, or related companies located within or outside Thailand for one or more of the specified purposes. Furthermore, the company may disclose personal data to government officials or agencies to comply with laws, rules, guidelines, regulations, or management systems applicable to the company. The company will require third-party entities to maintain confidentiality and security of personal data and prohibit its use for purposes other than those specified by the company. Examples of third parties to whom the company may disclose personal data include:

  • 1. Data entry service providers.
  • 2. Professional advisors, consultants, and/or external auditors.
  • 3. Third-party service providers such as those providing administrative or operational services related to the company's business (e.g., telecommunications, IT, logistics, shipping, assembly, installation, printing, postal services, or marketing and promotional activities).
  • 4. Relevant government officials or agencies.
  • 5. Third parties the company does business with, who have the right to use your personal data only as specified in contracts made with the company. These contracts require such individuals to comply with laws and any policies set by the company, and they must use appropriate measures to ensure your personal data is protected and secure.

The company will store personal data for a period appropriate to its use, with clearly defined Retention Periods for various types of data. Upon completion of such periods, the company will immediately delete the personal data.

Use or Disclosure of Personal Data

  • 1. The company guarantees that it will not use the personal data collected from customers, service users, or stakeholders for purposes other than lawful purposes or for the company's business operations.
  • 2. The company will not sell, transfer, or disseminate such information to external parties unless consent is obtained from the data subject.
  • 3. The company may disclose personal data if it is information already lawfully disclosed to the public, or to comply with court orders or requests from government agencies for the benefit of investigation by legal officials or court proceedings.

Rights of the Data Subject to Control Personal Data

The data subject has the following rights:

  • 1. To request access to, deletion, correction, or inspection of their own personal data.
  • 2. To request not to receive any marketing communication from the company.
  • 3. To request the company to send or transfer their personal data to another personal data controller when possible through automated means. Data subjects can notify their request and identify themselves in writing to the company. Upon receiving such a request, the company will notify the data subject of the existence or details of the data within a reasonable period.

Requests according to the rights of the data subject will be considered and recorded. The company will act on the request of the data subject only after verifying that it does not conflict with any legal requirements that the company must follow.

Security of Personal Data Storage

To ensure personal data management is secure and appropriate, the company has implemented various security measures to prevent loss, unauthorized access, use, change, modification, or disclosure of personal data. If a personal data breach occurs that directly causes damage to the data subject, the company will notify the data subject of the breach as quickly as possible to mitigate damage and will investigate the cause and determine appropriate remedy measures for the affected party.

Review of the Privacy Protection Policy

The company may update this policy to reflect changes in the company's operations, respond to suggestions or comments from data subjects, or to improve compliance with legal requirements. If this policy is amended, the company will clearly announce the changes to relevant data subjects before implementing them, or may send notification alerts directly to data subjects.

Enforcement of the Privacy Protection Policy

The data subject agrees and acknowledges that this Privacy Protection Policy apply to all personal data collected by the company and agrees that the company has the right to store and use personal data already collected (if any), as well as personal data currently stored and to be stored in the future, or disclose it to other parties within the scope specified in this Privacy Protection Policy.