Privacy Notice

Introduction

This “Privacy Policy” of ENEX Co., Ltd. (the “Company” or “we”) outlines the purposes for collecting personal data, methods of data collection, disclosure or sharing of personal data, data subject rights, the use of personal data for marketing purposes, and the use of cookies whether obtained directly or indirectly. The Company assures that your personal data will be processed in compliance with applicable data protection laws, including the Personal Data Protection Act B.E. 2562 (2019) (the “PDPA”). Your collected personal data will be securely stored at all times.

The Company recognizes its responsibility regarding the collection and disclosure of personal data. The provision of such data is based on your voluntary consent. We will not collect any personally identifiable information through this website unless and until you voluntarily register for an account to purchase products or services or to receive information from the Company.

By accessing and registering on this website, you acknowledge and accept the practices and policies regarding personal data as described in this Privacy Policy. If you do not agree with any part of this Policy, please refrain from providing your personal data through this website.

Purposes of Personal Data Collection

We collect, use, disclose, transfer, or process your personal data legally and only to the extent necessary to fulfill the Company’s legitimate purposes. Legal bases may include but are not limited to:

To contact and communicate with you regarding news or promotional activities.
For marketing activities related to our products, services, affiliates, or partners.
To comply with legal obligations, regulations, or binding requirements of government or regulatory authorities.

By providing your personal data, you consent to the collection and processing of such data for the purposes specified under legal requirements. The Company implements security measures, IT security protocols, and threat monitoring systems to prevent unauthorized access, disclosure, deletion, or misuse of your personal data.

Methods and Duration of Data Collection

We collect and use personal data provided by you through various channels. The Company may collect personal or related data for as long as necessary to fulfill the stated purposes and as permitted by law. Types of data include but are not limited to:

Identifying information: full name, gender, date of birth.
Contact information: telephone number, email address, physical address.
Login credentials: username and password.
Transaction data or records of product/service orders.
Technical data: IP address, device type, log files.
Data from cookies or other tracking technologies.
Social media data (if login is done via such platforms).

We may also collect information about your computer or other devices used to access our website via third-party social media services, subject to the respective platforms’ privacy policies and settings. Access to such information may be limited or restricted based on your personal privacy settings. The Company may update this Privacy Policy as necessary. Notifications of such updates will be announced via our website or other appropriate communication channels to keep you informed.

Disclosure or Sharing of Personal Data

All personal data is kept confidential and will be disclosed or shared only for the purposes for which it was collected. We will not disclose your personal data without prior or concurrent consent, unless such disclosure is legally required or falls under the following circumstances:

To affiliates or group companies, including directors, executives, employees, and staff.
To commercial banks.
To authorized agents offering products or services on behalf of the Company.
To marketing agencies engaged in activities related to the Company’s products or services.
To authorized business partners, service providers, contractors, agents, or third parties engaged for business operations and service delivery.
To government or regulatory agencies, judicial bodies, or any parties to whom disclosure is legally required.

When personal data is disclosed to third parties, the Company will implement appropriate safeguards to ensure the data is processed securely and in accordance with applicable laws.

Collaboration with External Parties

The Company may collaborate with third-party service providers or affiliated companies whose services may involve the processing of your personal data. Such processing will be subject to the respective third parties’ privacy policies. Examples include but are not limited to:

Facebook
Google Play Services
Google Analytics for Firebase

Your Data Subject Rights

The Company respects the rights of personal data subjects, which include:

Right to Withdraw Consent: You have the right to withdraw your consent at any time while your personal data is still held by the Company.
Right of Access: You have the right to access your personal data and request a copy, as well as to request disclosure of how the data was obtained.
Right to Data Portability: You may request to receive or transfer your personal data to another data controller.
Right to Object: You may object to the collection, use, or disclosure of your data if it is deemed inappropriate, inaccurate, or unfair.
Right to Rectification: You may request the Company to correct or update your personal data.
Right to Erasure: You may request that the Company delete, destroy, or anonymize your personal data if it is no longer necessary or was unlawfully collected.
Right to Restriction of Processing: You may request the suspension of the use of your data when it is under review or no longer required.

Contact Information of Data Protection Officer

If you have questions or wish to exercise your data subject rights, please contact our Data Protection Officer via:

Email: sales@enex.co.th
Address: 754/52 Soi Phatthanakan 38, Phatthanakan Road, Suan Luang Subdistrict, Suan Luang District, Bangkok 10250
Phone: +6683-596-3654