Privacy policy

1. We process your personal data to because it is necessary for the performance of the contracts between you and us. We use your personal data in this regard to, for example, provide you with services and products, manage your account, make deliveries, proceed with accounting and financial matters, and give after sales services, process returns or refunds.
2. We process your personal data to because it is necessary for the purposes of the legitimate interests pursued by us or by a third party. Examples of why your personal data is processed in this regard are as follow:
   1. To manage, develop, and conduct our business operations which include administration and development of websites and applications, fraud prevention and detection, crime prevention, relationship management for current and potential customers, maintenance of information technology (IT) systems;
   2. To protect your security such as provision of security measures, protection of your personal data, access control and identity authentication when you log in to your user account;
   3. To conduct marketing research and data analysis which include to send news and privileges to you via emails, SMS, applications, social media, telephone, and direct mails, and to conduct questionnaires and interviews with you; and
   4. To inform information, news and services information as you inquired.
   5. To establish, exercise, or defend your or our legal claims.
3. We process your personal data because it is necessary in order to protect vital interests of you or of another person. We process your personal data to, for instance, make contact in case of emergency and control and prevent disease.
4. We process your personal data because it is necessary for compliance with a legal obligation to which we are subject.
5. We process your personal data because it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
6. With your consent, we process your personal data to:
   1. Enable us, the companies in our group, and our partners to send news and privileges to you via emails, SMS, applications, social media, telephone, and direct mails; and
   2. Conduct other activities which we might have to collect additional personal data about you in which case we will inform and request your new consent from time to time. You can find out more about consent in item 4 of this privacy notice.
   3. You can learn more about consent in Article 4.

1. When you leave a message on our website or contact us via email, line, message inbox (i.e. inbox on Facebook) or mobile; we collect the following personal data:
   1. First name and Last name
   2. Telephone number
   3. Email address
   4. Information related to purchase of products or services that you interested
   5. Convenient time to contact
   6. Message you have given to us when you contact us
2. When you sign contract or purchase our services and solution ;, we collect Information about your name, email address, mobile number, your organization, your work position, copy of ID card, partnership certificate or company certificate
3. When you visit our sites or premises; we collect, monitor, and process your images, video, and audio recorded by CCTV in these areas and this information can be used to identify you. However, we will display signage to notice you about the areas where CCTV are in operation.
4. When you contact us or participate in any activity with us, such as contacting the contact center, take part in a customer satisfaction survey, and participate in our loyalty activities; we collect the following personal data: 
   1. Personal information, such as name, date of birth, photograph, identification card number, passport number, airlines membership number e.g. Royal Orchid Plus, health information (food allergies); 
   2. Contact information such as name, telephone number, email, address; 
   3. Information about your participation in our activities, such as previous history of activities, photographs taken during your participation.
5. We may need to collect and process special categories of personal data, as defined by personal data protection law, to fulfill the objectives we set out in this privacy notice such as; In some cases, we may collect your special categories of personal data even if the product or service you received is not directly associated with information such information. For instance, we do not intend to collect information about your religious belief but we obtain such information when we collect an image of your identification card to confirm your identity or to comply with legal requirements; And where necessary, we will process your special categories personal data only when you give us explicit consent or for other purposes as required by law. We will ensure that we will try our best to provide adequate security measures to protect your special categories personal data.

We use cookies and similar technology to collect personal data as specified in our Cookies Notice.

1. You are entitled to withdraw your consent at any time but such withdrawal will not affect the validity of the processing made prior to the withdrawal of consent.
2. Your withdrawal of consent or refusal to provide certain information may result in us being unable to fulfill some or all of the objectives stated in this privacy notice.  
3. If you are under 20 years of age, you shall, prior to giving the consent, inform us of your parent or guardian so that we shall also be able to ask consent from them.

1. We will retain your personal data for the period necessary to meet the objectives unless the law requires longer retention periods. In the event that such period is unclear, we will retain the data for a customary expected period in accordance with retention standards (e.g. the prescriptive period of 10 years for general legal claims).
2. We have established an auditing system to delete or destroy your personal data when the retention period expires or when it becomes irrelevant or unnecessary for the purposes of collecting that personal data.
3. If your personal data is processed based on consent, we will stop the processing when you have withdrawn the consent. However, we may keep your personal data to record your withdrawn so we can respond to your request in the future.

1. We disclose and share your personal data with:
   1. Companies in The Siam Cement Public Company Limited (“affiliates”) as the list appears in the latest annual report published on the website https://scc-th.listedcompany.com/ar.html
   2. For running our business. Department of marketing, planning, data analysis, financial accounting, legal, audit, etc. may be affiliated with other companies that are our affiliates.
   3. In case you inquire information or consent to receive our services and solution information. We are obliged to disclose your contact information; such as your first name, last name, telephone number, e-mail address, information about your consent and the products or services that you have inquired to our affiliates that administer that product or service. To contact or send information back to you. Our affiliates operate in accordance with the privacy policy appeared on the website. https://scc-th.listedcompany.com/cg.html
   4. Individuals and entities which are not our affiliates (third parties) for the purpose of collecting and processing personal information as described in this privacy notice, such as our dealers, transport and logistics service providers, postal service providers, tour operators, event organizers, data processing service providers, marketing service providers (who might send messages to you to promote our products and services), contractors (who might perform tasks on our behalf), financial service providers (e.g. banks, payment companies, electronic payment service providers, credit providers), IT service providers (e.g. providers of cloud services, block chain systems, data analytics, SMS, or emails), IT developers, programmers, auditors, consultants, advisors, government agencies (e.g. the Revenue Department, the Anti-Money Laundering Office), insurers, legal advisors, third parties (in Thailand or anywhere else) that are related to subpoenas, court orders, or other legal processes or requirements under the laws or regulations of Thailand or laws and regulations of other jurisdictions that apply to us, our affiliates, or financial institutions to manage risks and to help detect and prevent illegal acts and fraud that may occur and other violations to our policies and agreements, and other persons who have to obtain your personal data to make us able to conduct business, provide products and services, and meet the purposes for the collection and processing of personal data as described in this privacy notice.
2. We will require persons receiving your personal data to take appropriate measures to protect your personal data, process the data properly and only as necessary, and prevent unauthorized use or disclosure of your personal data.

1. We may send or transfer your personal data to our affiliates or other persons in a foreign country if it is necessary in order for us to perform our obligations in the contract to which you are the counterparty or contract between us and third party for your benefit, to respond to your pre-contractual request; to protect your and third party’s life, body and health, to comply with laws or to the extent necessary for the public interest activities.
2. We may store your information on a computer, server, or cloud provided by a third party. And may use third-party programs, applications and platforms in processing your personal data. However, we will not allow unrelated parties to access to your personal data and will require such parties to have appropriate security protection measures.
3. In the event that your personal data is transferred to a foreign country, we will comply with applicable personal data protection laws and take appropriate measures to ensure that your personal data is protected and you can exercise your rights in accordance with the laws. Moreover, we will require those who receive the data to have appropriate protection measures for your personal data, to process such personal data only as necessary, and to take steps to prevent unauthorized use or disclosure of your personal data.

1. We have implemented appropriate technical and administrative standards to protect your personal data from loss, misuse, and unauthorized access use, disclose, or destruction. We use technology and security procedures, such as encryption and access restriction, to ensure that only authorized people shall have access to your personal data, and that they are trained about the importance of protecting personal data.
2. We provide appropriate security measures to prevent the loss, access, use, change, and disclosure of personal data from those who do not have rights or duties related to that personal data. We will review the above-mentioned measures when necessary or when the technology changes to ensure effective security. 

1. You have the rights under the personal data protection law summarized as follows:
   1. Withdraw the consent you have given to us;
   2. Request to view and copy your personal data or disclose the source where we obtain your personal data;
   3. Send or transfer personal data that is in an electronic form as required by personal data protection laws to other data controllers;
   4. Oppose the collection, use, or disclosure of personal information about you;
   5. Delete or destroy or make your personal data non-personally identifiable (anonymous) information;
   6. Suspend the use of your personal data;
   7. Correct your personal information to be current, complete, and not cause misunderstanding;
   8. Complain to the Personal Data Protection Committee in the event that we, our data processors, our employees, or our contractors violate or do not comply with personal data protection laws. In this regard, we will consider your request, notify the result of the consideration, and execute it (if appropriate) within 30 days from the date we receive the request. Your rights mentioned above will be in accordance with the personal data protection law.
2. You can exercise your legal rights at “Privacy settings and rights” according to the websites where you have informed personal information (www.ecoplantservices.com). If you didn’t provide information at that website. Please inquire about how to exercise your legal rights by contacting 03-628-9103 (the right can be exercised when the Personal Data Protection Act applies to the Data Controller).

In the event that this privacy notice is amended, we will announce a new privacy notice on our website, to which we recommend you to periodically visit. The new privacy notice will be effective immediately on the date of announcement.

1. Data controllers; Eco Plant Services Co., Ltd.1 Moo 9, Ban Krua, Ban Moh, Saraburi 18270 Thailand
2. In the event that you have a question regarding personal data protection, please call 080 079 3225 or send your message to e-mail: epsmkt@scg.com