Privacy Policy
Under Thailand’s Personal Data Protection Act B.E. 2562 (PDPA) · ฉบับภาษาไทย (authoritative)
1. Data Controller
“TeedinIQ” is currently operated by its developer as a sole proprietor; company registration is in progress. We will publish the registered entity name, registration number and office address here as soon as registration completes. In the meantime you can exercise every PDPA right through the contact channel below.
Data-protection contact: email [email protected].
Note: appointment of a Data Protection Officer is being assessed under s.41. Until then the address above is the channel for data subject requests, and we answer within the statutory timeframe.
2. Personal data we collect
- Account data: email and password (stored hashed), plus the searches / alerts you set up.
- Consented lead data: name and phone number (and chosen contact channel) — only when you submit the mortgage lead-form to have a partner bank contact you and tick the consent box.
- Usage data and cookies: technical data such as pages viewed, time spent, device type, and cookies (see §8).
- Payment data: handled by a licensed Thai payment provider (PromptPay / QR) — we do not store your card or bank account details on our systems.
3. Legal bases and purposes
- Account & service — necessity for performance of a contract (s.24(3)).
- Mortgage-lead / bank callback — your explicit consent (s.19 / s.24).
- Analytics / service improvement — legitimate interest (s.24(5)) or consent for non-essential cookies.
- Security, fraud prevention, legal compliance — legitimate interest and legal obligation.
4. Disclosure to third parties
- Payment provider (a licensed Thai payment gateway) — to process subscriptions.
- Partner banks / financial institutions — only the mortgage-lead data you explicitly consented to.
- Infrastructure / processors (e.g. email/SMS, LINE Official Account for alerts you subscribed to) — under a data processing agreement (DPA).
We do not sell your personal data.
5. Data retention
Account data is kept while you use the service and deleted when you close your account, and never kept longer than the purpose requires (unless a longer period is required by law, e.g. tax records). Mortgage-lead data is kept only as long as needed for the contact purpose; consent logs are retained as legally required.
6. Your rights as a data subject (s.30–36)
- Access / copy — download your data from the dashboard.
- Rectification of inaccurate data.
- Erasure — delete your account and data from the dashboard.
- Objection and restriction of processing.
- Data portability.
- Withdraw consent — e.g. mortgage-lead sharing or non-essential cookies, at any time (without affecting prior lawful processing).
Exercise your rights via the dashboard or by contacting [email protected].
7. International data transfers
We primarily store and process data on a VPS located in Thailand, so there is no cross-border transfer as a general matter. If we later use processors located abroad, we will apply appropriate safeguards under s.28/29 and inform you.
8. Cookies
We use essential cookies (e.g. login, language) on the legitimate-interest basis (s.24(5)), and non-essential cookies (e.g. usage analytics) only with your consent via the cookie banner — the default is to reject non-essential cookies. You can change this at any time.
9. Security & breach notification
We apply appropriate technical and organisational measures (e.g. password hashing, access control). In the event of a personal-data breach with risk, we will notify the Personal Data Protection Committee (PDPC) within 72 hours of becoming aware (s.37), and affected data subjects where there is a high risk.
10. Contact & complaints
Questions / rights requests: [email protected] · Content takedown: takedown form.
You may lodge a complaint with the Personal Data Protection Committee (PDPC), Thailand.
This policy may be updated; material changes will be announced on the site.
See also: Terms of Use