Thailand Personal Data Protection Act (PDPA) Compliance
This Cookie Policy is designed to comply with Thailand's Personal Data Protection Act B.E. 2562 (2019). We are committed to protecting your personal data and ensuring transparency in how we collect and process information through cookies.
Data Controller
Data ControllerAs the data controller, we determine the purposes and means of processing your personal data collected through cookies.
What Are Cookies?
Cookies are small text files that are stored on your device when you visit a website. They are widely used to make websites work more efficiently and provide information to website owners.
At TamQR, we use cookies to improve your browsing experience, analyze how our website is used, and personalize content. This policy explains what cookies we use, why we use them, and your rights under Thailand's PDPA.
Legal Basis for Processing
Under the PDPA, we process personal data collected through cookies based on the following legal grounds:
- Consent (Section 19): For analytics and marketing cookies, we obtain your explicit consent before processing. You can withdraw consent at any time.
- Legitimate Interest (Section 24): For essential cookies that are strictly necessary for website functionality and security.
- Contract Performance (Section 24): For cookies necessary to provide services you have requested.
Types of Cookies We Use
Essential Cookies
These cookies are necessary for the website to function properly. They enable core functionality such as security, authentication, and session management. Under PDPA, these are processed based on legitimate interest as they are strictly necessary for service provision.
| Cookie | Purpose | Data Collected | Duration |
|---|---|---|---|
| session_token | Maintains your login session | Session ID | Session |
| csrf_token | Protects against cross-site request forgery | Security token | Session |
| tamqr_cookie_consent | Stores your cookie preferences | Consent preferences | 1 year |
Analytics Cookies
These cookies help us understand how visitors interact with our website by collecting and reporting information. Under PDPA, we require your explicit consent before using these cookies.
| Cookie | Purpose | Data Collected | Duration |
|---|---|---|---|
| analytics_session | Tracks page views and user behavior | Page visits, click patterns | 30 days |
| device_id | Identifies unique visitors for analytics | Anonymized device identifier | 1 year |
Marketing Cookies
These cookies are used to track visitors across websites to display relevant advertisements. Under PDPA, we require your explicit consent before using these cookies.
| Cookie | Purpose | Data Collected | Duration |
|---|---|---|---|
| ad_preferences | Stores advertising preferences | Ad interaction data | 90 days |
| referral_source | Tracks how you found our website | Referral URL | 30 days |
Third-Party Cookies & Data Processors
We use third-party services that may set cookies on your device. Under PDPA, these third parties act as data processors on our behalf:
Stripe (Payment Processing)
Stripe may set cookies for fraud prevention and payment authentication. This is necessary to process payments securely.
Legal Basis: Contract Performance | Data Transfer: USA (Standard Contractual Clauses)
Google OAuth (Optional Authentication)
If you sign in with Google, Google may set cookies for authentication purposes.
Legal Basis: Consent | Data Transfer: USA (Standard Contractual Clauses)
Your Rights Under PDPA
Under Thailand's Personal Data Protection Act, you have the following rights regarding your personal data:
Right to Access
You can request access to your personal data we hold about you.
Right to Rectification
You can request correction of inaccurate or incomplete personal data.
Right to Erasure
You can request deletion of your personal data in certain circumstances.
Right to Data Portability
You can request a copy of your data in a structured, machine-readable format.
Right to Object
You can object to processing of your personal data for certain purposes.
Right to Withdraw Consent
You can withdraw your consent at any time where processing is based on consent.
Right to Restrict Processing
You can request restriction of processing in certain circumstances.
Right to Lodge a Complaint
You can lodge a complaint with the Personal Data Protection Committee (PDPC).
Managing Your Cookie Preferences
Using Our Consent Banner
When you first visit our website, you will see a cookie consent banner that allows you to:
- Accept All: Enable all cookies
- Reject Non-Essential: Only enable essential cookies
- Manage Preferences: Choose which cookie categories to enable
Withdrawing Consent
You can withdraw your consent at any time by clearing your browser cookies for this website. The consent banner will appear again on your next visit. Under PDPA, withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Browser Settings
You can also control cookies through your browser settings. Most browsers allow you to view, delete, and block cookies.
Note: Blocking essential cookies may affect your experience on our website and prevent certain features from working.
Data Retention
Cookie data is retained only for as long as necessary to fulfill the purposes outlined in this policy. Retention periods vary by cookie type:
- Session cookies: Deleted when you close your browser
- Persistent cookies: Retained for up to 1 year
- We regularly review and delete data that is no longer necessary
Cross-Border Data Transfers
Some of our third-party service providers may transfer your data outside of Thailand. In accordance with PDPA Section 28-29, we ensure that:
- The destination country has adequate data protection standards, or
- Appropriate safeguards are in place (e.g., Standard Contractual Clauses)
- You have provided consent for the transfer
Updates to This Policy
We may update this Cookie Policy to reflect changes in our practices or for legal compliance. Material changes will be communicated through our website. We encourage you to review this policy periodically.
Contact Us & Complaints
To exercise your rights or for any questions about this policy:
If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Committee (PDPC):
Personal Data Protection Committee (PDPC)
www.pdpc.or.th