Privacy Policy
Mae Fah Luang Foundation (the "Foundation") is the owner and the developer of www.changeagent.maefahluang.org (the“Platform”). By signing up and registering to be the user to use the service of the Platform (“User”), the User acknowledges and understands that the Foundation would need to process the personally identifiable information (the "PII") of such particular User. Thus, the Foundation announces this Privacy Policy to notify the User of the rights and obligations as well as the conditions for the collection, use, process and disclosure of the User's PII.
This Privacy Policy is only applicable to the use of the Platform and shall not apply to the PII process undertaken by other application or website developed and operated by any other third-party that the Foundation does not have any control over (the "Third Party") that being displayed or connected to the Platform. The User understand and agree that the User shall study and agree on the privacy policy announced by those Third Party that are separated from this Privacy Policy.
If the User does not accept this Privacy Policy and any amendment thereof, the Foundation reserves the rights to refrain from providing any services to those Users since the processing of the PII defined hereunder are critical for the provisions of the Platform services by the Foundation to the User. By continuing to use the Platform, the relevant User shall be deemed to always accept and agree to the Privacy Policy.
The Foundation may amend or revise this Privacy Policy at any time to assure the compliance with the relevant laws and regulations and to assure the updates in the Platform at any time; provided that the Foundation will communicate the amendments or revisions made on the Platform and the amendment or revisions shall become effective once communicating on the Platform.
PII being Processed by the Foundation for the performance of the Platform
In order to perform the required services and features defined on the Platform, the
Foundation would need to collect and process the following PII from the User:
1. Directly Identifiable PII, including without limitation name, age, nationality and date of birth
2. Contact information, including without limitation, address, phone number, and e-mail address
3. Payment information, including without limitation the payment transaction, bank account information and credit card information
4. Platform transactional data, including without limitation username, password, transaction number and history that the User transact on the Platform, including the gathered preference and interest from the Platform transactional behavior
5. Technical PII, including without limitation the IP address number, the Platform usage, setting, and web browser connection that have been connected to the Platform.
Objectives for PII Process
1. The Foundation would need to collect, restore and use the PII of the User in order to
perform any services or features of the Platform as defined under the Terms of Use, including without limitation (i) to verify the identity and eligibility of the User; (ii) to monitor the transaction undertaken on the Platform executed by the User; (iii) to contact the relevant User; and (iv) to display the relevant PII on the Platform interface in accordance with the scope of services provided under the Terms of User / Terms of Services;
2. The Foundation would need to collect and analyze the PII of the User in order to assess the User’s interest with an aim to provide customized and personalized privileges or service that would meet your interest and preference and to improve our customer’s experience with each relevant User;
3. The Foundation would need to collect and restore the User’s PII in order to assure the
appropriate after-sale service provided by the Foundation in various forms, including the satisfaction survey or the support and complaint redress function;
4. The User would need to collect and restore the User’s PII as obliged under the applicable laws and regulations, for instance, for the withholding tax payment purpose.
The Foundation would need to collect and store the PII of each relevant User for the defined purposes for as long as the User is still the registered User on the Platform and for 3 (three) years after the User termination, except the relevant laws and regulations defined otherwise.
The storage of the PII after the User termination would be necessary for the legitimate interest of the Foundation in the legal proceedings that the Foundation may have against the relevant User.
Disclosure of the PII
In order to assure the performance of the Platform as committed, the Foundation may need to disclose the User’s PII in the following circumstances:
1. To disclose the User’s PII to the outsourced service providers engaged in the performing direct service to the Platform, including without limitation the advisors and auditors as well as the logistic service provider; provided that the Foundation shall only disclose the User’s PII to the relevant recipient strictly on the need-to-know basis in strict compliance with the defined objectives for PII process defined;
2. To disclose the User’s PII in the usage of the storage service on cloud [Google Cloud Platform / Amazon AWS];
3. To disclose the User’ PII to third party in the legal proceedings to protect the Foundation’s legitimate rights or to detect and prevent any fraud on the Platform; provided that such disclosure shall be done on the limited and specific purposes as defined.
4. In case that the Foundation is obliged under the applicable laws, court judgment or
administrative order to disclose any PII of any particular users, the Compnay would need to do so only on the necessary basis.
Representation on the Privacy Security
The Foundation represents and guarantees that the Foundation shall use the most appropriate security measures to prevent the unauthorized access, amendment or disclosure of the PII in any form or in any circumstance by either internal or external persons and the Foundation commits to review those measures on the regular basis with the strong commitment to use the best industrial practice and to be in strict compliance with the applicable laws.
Data Subject Rights
The Foundation acknowledges and accepts the User’s rights as the data subject over their PII as defined under the applicable laws that include the following rights:
1. Right to access; to request for the copy of all the PII; and to rectify or update their own PII;
2. Right to request for the PII that the Foundation has processed in the readable forms by the tools or automatic mechanics and to request for the data portability to other data controller;
3. Right to object to the PII process being undertaken;
4. Right to request for the erasure or de-identification of any PII that does not have any necessary basis to process, i.e. after the consent withdrawal;
5. Right to request for the PII process suspension in case that request for erasure is being exercised or when such PII is not necessary;
6. Right to withdraw consent that has been given for the PII process for specific purpose.
The User can contact the Foundation in order to make the request to exercise any defined rights through the defined channel without any charge and the Foundation will consider and notify the User of the Foundation’s determination within 30 days after the receipt of the User’s valid request.
What are Cookies that the Foundation is using on the Platform?
Cookies are text files stored on the User’s computer browser directory or program data subfolder in order to keep data log of the User’s internet usage and the User’s behavior or interaction on the Platform. For the performance of the Platform, the Foundation need to use various types of Cookies for various purposes as defined below:
1. Functionality Cookies being used to record information about choices the User have made in the Platform such as personal settings, languages, and fonts so this would allow the Foundation to tailor our Platform features that would match the User’s preference setting;
2. Advertising Cookies being used to record the User’s on-site behavior and history of the Platform visited and this would allow the Foundation to provide the User the services and products that suit the User’s preferences and to assess the success of each function of the Platform.
3. Strictly Necessary Cookies are essential for the User to browse the Platform and use its features, such as accessing secure areas of the Platform.
Even though the use of Cookies would enhance the performance in providing services in any features of the Platform to the User, the User shall be entitled to disable the Cookies setting on the User’s browser at their own will; provided that the User shall acknowledge that the Cookies-disabled setting may impact the efficiency and the performance of the Platform as defined in details for each type of Cookies above.
Contact Us
Data Controller
Name: Mae Fah Luang Foundation under Royal Patronage
Address: Knowledge and Learning Centre (KLC)
Contact detail: 02-252-7114 ext 321
Email address: info.changeagent@doitung.org