Legal · PDPA notice
Privacy policy
This notice explains how CHON Chemical Co., Ltd. collects, uses, shares and protects personal data when you visit chonchemical.com or contact us, and how to use your rights under Thailand's Personal Data Protection Act B.E. 2562 (2019), the PDPA.
It covers visitors to this website, people who send us an enquiry, and the people we deal with at our customers, suppliers and partners. Effective from . Last updated .
Summary
The short version
The full notice follows; this is the heart of it.
- We collect what you send us through the contact form, by e-mail or by phone, and the basic technical data every website needs to run.
- We use it to answer you, to supply you if you go ahead, to meet our legal duties, and to keep the website working and secure.
- We do not sell personal data, and we do not use it for advertising.
- You can ask to see, correct or delete your data, or object to how we use it, at any time: contact@chonchemical.com.
Data controller
Who is responsible for your personal data
CHON Chemical Co., Ltd. is the data controller: we decide why and how your personal data is used, and we answer for it.
- Data controller
- CHON Chemical Co., Ltd. (บริษัท ซีเอชโอเอ็น เคมีคอล จำกัด)
- Company registration no.
- 0105567046897
- Head office
- 207 Ratchamontri Road, Bang Duan, Phasi Charoen, Bangkok 10160, Thailand
- contact@chonchemical.com (for personal data requests, put “Personal data request” in the subject line)
- Phone
- +66 2 448 6244 · +66 95 264 5626
- Who handles requests
- Personal data requests are handled at our head office. Write to the e-mail address or the head office address above.
Scope
Who this notice covers
This notice applies to personal data about:
- visitors to chonchemical.com, in English and in Thai;
- people who contact us through the website's contact form, by e-mail or by phone, for example to request a trial or a quote, to send a synthesis enquiry, or to ask about becoming a distributor;
- the people we deal with at our customers, suppliers, distributors and research partners, including the people who take part in a trial with us.
Personal data means any information that identifies you, directly or indirectly: your name, e-mail address, phone number or IP address, for example. Information about a company alone is not personal data.
Other websites we link to, such as the National Innovation Agency's AGROWTH page or the journal articles we cite, have their own privacy policies. This notice does not cover them.
The data
What personal data we collect
We collect only what we need for the purposes in the next section. Most of it comes from you; the rest is created when your browser loads our pages.
Details you send us
When you use the contact form, e-mail us or call us: your name, job title, company, e-mail address, phone number, country, the topic of your enquiry and your message, plus anything you choose to include, such as the crop, storage or shipping route you want to try FreshTrap on, or files you attach. On the contact form we need your name, e-mail address and message in order to reply, and your company when you ask for a trial, a quote or to become a distributor; everything else is optional.
Records when we do business
If an enquiry leads to a quote, samples, a trial or an order: the names and contact details of the people we work with, delivery addresses, what we supplied and when, the trial set-up and the results we share with you, and the billing details the law requires on a tax invoice (for an individual buyer, this includes the tax identification number).
Technical data from your visit
Our web server records each request automatically: your IP address, the date and time, the page requested, the page you came from, and your browser and device type.
What we do not collect
We do not ask for sensitive personal data, such as information about health, religion, biometrics or criminal records. Please do not send it. Visitors do not need an account, and the website takes no card payments.
Purposes
Why we use it, and on what legal basis
The PDPA lets us use personal data only for a stated purpose and on a legal basis. These are ours. Where we rely on our legitimate interests, you can object at any time (see your rights).
Answering your enquiry
Replying to you, preparing a quote, arranging samples or a monitored trial on your crop, and following up on your request.
Legal basis: taking the steps you asked for before a contract (PDPA section 24(3)). When you write on behalf of your company, our legitimate interest in answering business enquiries (section 24(5)).
Supplying products and services
Delivering FreshTrap or other work you order, invoicing, technical and after-sales support, and handling complaints.
Legal basis: performing our contract with you or your company (section 24(3)).
Accounting, tax and other legal duties
Keeping accounting and tax records, and answering lawful requests from authorities.
Legal basis: complying with the law (section 24(6)).
Running and protecting the website
Serving pages, keeping the site secure, stopping spam and abuse of the contact form, and fixing faults.
Legal basis: our legitimate interest in a working, secure website (section 24(5)).
Protecting our legal rights
Establishing, exercising or defending legal claims.
Legal basis: our legitimate interest (section 24(5)) or complying with the law (section 24(6)).
What we do not do
We do not send marketing e-mails, and we do not add enquiries to a mailing list. If we ever offer news by e-mail, we will ask for your consent before we do. We make no decisions about you by automated means alone.
Cookies
Cookies and similar technology
The public pages work without cookies. We use no advertising or cross-site tracking cookies, no social-media plug-ins and no embedded third-party videos or maps.
Fonts
The typefaces on our pages (Figtree and Prompt) are served from our own web server. Loading them sends nothing to a third party, and no other outside service is contacted when you read our pages.
Sharing
Who we share it with
We do not sell personal data, and we do not share it with anyone for their own marketing. We share it only where a purpose above needs it:
Service providers who work for us
Our website-hosting and e-mail provider (the contact form keeps your message on our website server, where only our team can open it, and delivers it to our company mailbox) and our IT support. They act on our instructions under contract and may not use your data for their own purposes.
WhatsApp (Meta)
If you message us on WhatsApp, we receive your WhatsApp name, number and messages, and the chat runs on WhatsApp, which Meta operates under its own privacy policy and may process outside Thailand. The chat button on our pages is a plain link: nothing loads from WhatsApp until you press it.
LINE (LY Corporation)
If you add us on LINE or message us there, we receive your LINE display name and messages, and the chat runs on LINE, which LY Corporation operates under its own privacy policy and may process outside Thailand. The LINE button on our pages is a plain link: nothing loads from LINE until you press it.
Couriers and logistics companies
To deliver samples, trial kits and orders to the addresses you give us.
Professional advisers
Our accountants, auditors and legal advisers, who are bound by confidentiality.
Authorities
Government agencies, regulators, courts or the police, when the law requires it or to protect our legal rights.
A new owner of the business
If CHON Chemical is ever merged, restructured or sold, personal data may pass to the new owner, who must keep protecting it as this notice describes.
International transfers
Transfers outside Thailand
Some personal data may be processed outside Thailand. If we send samples or orders abroad, we share the delivery details with carriers in other countries.
When personal data leaves Thailand, we make sure the transfer meets the PDPA's rules (sections 28 and 29): the destination has adequate data-protection standards, the recipient gives appropriate safeguards such as contract terms, or another basis the law allows applies, such as the need to carry out a contract with you or your consent.
Retention
How long we keep it
We keep personal data only as long as its purpose needs it, or as long as the law requires. After that we delete it or make it anonymous.
Enquiries that do not lead to business
5 years from our last contact, so that we can pick up a conversation where it left off.
Customer, supplier, partner and trial records
For as long as we work together, then 5 years after the relationship ends.
Accounting and tax documents
At least 5 years from the close of the accounting period, as the Accounting Act B.E. 2543 (2000) requires, and longer where tax law requires it.
Web server logs
Up to 90 days, unless we need them for longer to investigate a security incident.
Records of your requests
3 years after we close the request, so that we can show how we handled it.
Security
How we protect it
We use technical and organisational measures that suit the data we hold:
- Every page and the contact form are served over an encrypted connection (HTTPS).
- Only the staff who need personal data for their work can see it, and they must keep it confidential.
- Our service providers must protect it under contract, to a standard at least equal to ours.
- We review who has access, and how, whenever our systems change.
- If a personal data breach is likely to put your rights and freedoms at risk, we will report it to the Office of the Personal Data Protection Committee within 72 hours of becoming aware of it, and tell you without delay if the risk is high, as section 37 of the PDPA requires.
No system is perfectly secure, so please do not send passwords or payment details by e-mail or through the contact form.
Your rights
Your rights under the PDPA
You have the rights below. Some depend on the legal basis we use, and the law allows some exceptions; if one applies, we will explain it.
- Be informed about how we use your personal data. This notice does that.
- See and get a copy of your personal data, and ask how we obtained any data you did not give us yourself (section 30).
- Receive or transfer the data you gave us in a commonly used electronic format, where that is technically possible (section 31).
- Object to our use of your data where we rely on our legitimate interests (section 32).
- Have it deleted, destroyed or made anonymous when we no longer need it, when you withdraw consent, or when it was used unlawfully (section 33).
- Restrict its use while we check a correction or an objection (section 34).
- Correct it so that it is accurate, complete and up to date (sections 35 and 36).
- Withdraw your consent at any time. This does not affect what we did before you withdrew it (section 19).
- Complain to the Personal Data Protection Committee through its Office (section 73). If something has gone wrong, please tell us too, so that we can put it right.
Using your rights
How to make a request
Three steps, free of charge.
Write to us
E-mail contact@chonchemical.com with “Personal data request” in the subject line, or send a letter to our head office marked “Personal data”. Say which right you want to use and what the request covers.
We confirm it is you
Before we act, we may ask you to confirm your identity, usually by replying from an e-mail address or phone number we already hold. We ask only for what we need.
We reply within 30 days
We act on your request within 30 days of receiving it. If we cannot agree to all of it, for example because the law requires us to keep tax records, we will tell you why in writing.
If you are not satisfied with our answer, tell us and we will look at it again. You can also complain to the Office of the Personal Data Protection Committee (สำนักงานคณะกรรมการคุ้มครองข้อมูลส่วนบุคคล, PDPC) at pdpc.or.th.
Also worth knowing
Children, sensitive data and other points
Children
Our website and products are for businesses. We do not knowingly collect personal data from anyone under 20 (a minor under Thai law) without the consent of a parent or guardian. If you believe a minor has sent us personal data, contact us and we will delete it.
Sensitive data
We do not ask for sensitive personal data as defined in section 26 of the PDPA. If it reaches us unasked, we delete what we do not need.
If you do not give us your data
Giving us personal data is voluntary. Without a way to reach you, we cannot answer an enquiry; without delivery and billing details, we cannot supply an order.
Writing from outside Thailand
We handle every enquiry under this notice and the PDPA, wherever you write from. If the law of your country gives you further rights, contact us and we will help you use them.
Updates
Changes to this notice
We update this notice when our website, our services or the law change, for example if we add a new tool that uses personal data. The date at the top of the page shows the current version. If a change affects data you have already given us in a significant way, we will tell you directly where we can.
This notice is published in English and in Thai; use the language switch at the top of the page. If the two versions differ, the Thai version prevails.
Questions
Privacy: short answers
Does CHON Chemical sell or share my personal data?
We do not sell personal data, and we do not share it with anyone for their own marketing. We share it only with the service providers and advisers who help us run the business, with couriers who deliver your samples or orders, and with authorities when the law requires it.
Will you add me to a mailing list if I send an enquiry?
No. We use your details to answer the enquiry and, if you go ahead, to supply you. We would send news by e-mail only if you asked for it.
How do I ask you to delete my personal data?
E-mail contact@chonchemical.com with “Personal data request” in the subject line. We reply within 30 days. Records the law requires us to keep, such as tax invoices, stay until their legal period ends; we will tell you which ones.
Where can I complain about how my data is handled in Thailand?
Tell us, so that we can put it right. You can also complain to the Office of the Personal Data Protection Committee (PDPC), the regulator under Thailand's Personal Data Protection Act.
Contact
Questions about your personal data?
Write or call. We answer every personal data request within 30 days.
contact@chonchemical.com · +66 2 448 6244 · CHON Chemical Co., Ltd., 207 Ratchamontri Road, Bang Duan, Phasi Charoen, Bangkok 10160, Thailand
For anything else, see how to contact us.
