Privacy Policy

 

Privacy Policy

 

 

 

Kia Sales (Thailand) Co., Ltd.’s Privacy Policy

At Kia Sales (Thailand) Co., Ltd., we realize the importance of personal data protection, as it is our responsibility to society and the foundation of good business relations with customers, partner and staff. With this in mind, we comply with the personal data protection law and all other regulations related thereto. This Privacy Policy sets out the objectives and details of our collection, use and disclosure of personal data, and your legal rights related to personal data. We collect, use and disclose your personal data for the purpose of selling products, providing services, proposing products, services and promotions, and other operations related thereto. We are aware of and prioritize the rights and privacy of customers, clients, partners, visitors, persons making contact, and other persons concerned. We protect personal data and will not allow it to be used without the prior consent of the data subject. We collect, use and disclose personal data only for the specified purposes and with the consent of the data subject, and in accordance with the laws and international standards.

 

 

1. Terms

* Unless otherwise stated herein, “you” means the data subject

 

 

2. Personal data collected, used and disclosed by the company:

 

2.1 Personal data in general

 

We will collect the following personal data (including sensitive data set forth in Personal Data Protection Act and by the Committee) which are given to us by the data subject or which we obtain from operations and the provision of services:

 

(a) Name, surname, ID card number, date of birth, age, occupation, sex, marital status, photo, fixed line telephone number, mobile phone number, address shown on house registration, mailing address, passport number, email address, Line ID, credit card number, IP address, financial information related to the use of the service and purchase of products from the company, contents in which you are interested, purchase and service purchase orders and other data related thereto.

 

(b) Non-personal data on searches collected from browsers, domain names, web address and application logs for customer support

 

(c) System information, specifically cookies, beacons, logged-in files, scripts (see more details in our policy on cookies), IP address, type of browser, domain name, history of visits, time of use, referenced websites, records of your searches and use of applications while visiting our website

 

(d) Location information means data from GPS, Wi-Fi, compass, accelerometer, IP address and public posts indicating location information

 

2.2 Sensitive Data

 

In the sale of products and the provision of services, we may collect sensitive data, including data on ethnicity, religion, philosophy, sexuality, disabilities, labor union membership, biodata and health, for use in operations to attain our objectives, with the prior consent of the data subject.

 

If we do not want to use any sensitive data, e.g. copy of ID card, we will ask you to delete it, or we will delete it.

 

(Unless otherwise specifically stated herein, personal data and sensitive data shall be collectively referred to as “personal data”.)

 

 

3. Collection of Personal Data

We collect the following personal data:

 

3.1 The following personal data on product purchases, visits, contacts or dealings with us is directly collected from data subject:

 

(a) Verbal and written data on the purchase of products or the use of services (“products” or “services”), joining membership, registrations, communications and documents and applications therefor, irrespective of which party makes the first contact.

 

(b) Data on your contact with any member of staff, customer service provider, salesperson, agent, broker, contractor, trading partner, attorney-in-fact, other persons or divisions of our company; use of our media, website, applications, or social media; contact by telephone, email, meeting, interviews, SMSs, fax, postal mail or other methods for the purchase of products or services, complaints or other purposes.

 

(c) Personal data sent by the data subject to us to participate in marketing campaigns, competitions, draws and events held by us, our staff or trading partners.

 

 

3.2 Personal data collected by us from other sources:

 

Personal data collected by us from state agencies, finance companies and groups, financial service providers, business alliances, the credit bureau and information service providers, subject to your prior consent as required by law, unless it is otherwise necessary to collect, use or disclose such personal data as required by law, including the personal data from:

 

(a) group of companies

 

(b) third parties, e.g., representatives, dealers, shops, data collection service providers, trading partners and business alliances

 

(c) public and non-public records legally available

 

(d) visits to websites, e.g., data on Internet service provider, IP address, date and time of visit, pages opened, MAC address, cookies, ID, IMEI

 

(e) logs of application usage

 

(f) state and regulatory agencies

 

We usually collect personal data directly from you, but sometimes, with your prior consent, may collect personal data from other sources; if necessary, we may collect, use and disclose such personal data as required by law.

 

We collect, use, disclose and process the personal data of minors as required by law.

 

 

4. We collect, use and disclose personal data for the following purposes:

 

4.1 sale of products and services, provision of post-sale services, improvement of our present and future products and services, maintenance and other related activities

 

4.2 making transactions, visiting website or use of our mobile application as required by you

 

4.3 making transactions related to our products and services, e.g., registering for membership, payment, engaging in activities and lodging complaints

 

4.4 maintaining the relationship between you and the company

 

4.5 identifying subject of personal data at the time of using services or contact with us

 

4.6 notifications and communications with us and receiving information on changes from us

 

4.7 carrying out instructions of subjects of personal data

 

4.8 introducing products, services, sales promotions, rights and benefits; making transactions related to our services

 

4.9 data analysis, audit, product development, revision of services, service analysis, survey of sales promotion, assessment of our performance and expansion of our business

 

4.10 taking any actions necessary and appropriate for auditing and prevention of violations of the law, as requested by states or governments, including those in the countries where subjects of personal data live; application of terms and conditions of services and privacy policy; protection of data of the data subjects, our business, privacy, properties, staff, other people; remedies, prevention and minimization of possible loss and damage;

 

4.11 compliance with the laws; investigations by officials and regulatory agencies in compliance with the laws, rules and regulations.

 

We shall notify you of any other purposes not listed herein at the time of collection of personal data.

 

We shall collect, use and disclose your personal data according to the purposes set forth under Article 4, based on the appropriate lawful basis under the Personal Data Protection Act B.E. 2562 (2019). The processing of your Personal Data will be carried out only where at least one of the following lawful bases applies:

1. where you have granted prior legal consent

2. when necessary to ensure compliance with the provisions under the agreement with you, or to carry out your instructions

3. when necessary for health and safety, and prevention of deaths or injuries

4. when necessary for operations, the public benefit and when required by state agencies

5. when necessary for the benefits of our company or other person or juristic entity, except when such benefits are less important than your basic rights to your personal data

6. when necessary to ensure compliance with the law

7. when necessary for the documentation of history, archives, studies or statistics, provided measures are applied to protect your rights and liberty

 

Processing of Sensitive Data

 

Where it is necessary for we to collect, use, or disclose your Sensitive Data, such as health data, biometric data, racial or ethnic origin, religious beliefs, disability information, or criminal records, we will obtain your explicit consent prior to such processing, unless otherwise permitted under Section 26 of the Personal Data Protection Act B.E. 2562 (2019).

 

We may process Sensitive Data without obtaining your explicit consent in the following circumstances:

 

Where necessary to prevent or suppress a danger to the life, body, or health of a person, and the data subject is incapable of giving consent.

 

Where carried out in the course of legitimate activities, with appropriate safeguards, by a foundation, association, or non-profit organization having political, philosophical, religious, or trade union objectives, in relation to its members, former members, or persons who have regular contact with such organization in connection with its purposes, provided that the Sensitive Data is not disclosed outside the organization without appropriate legal grounds.

 

Where Sensitive Data has been manifestly made public by the data subject through explicit consent.

 

Where necessary for the establishment, compliance, exercise, or defense of legal claims.

 

Where necessary for compliance with applicable laws in order to achieve the following purposes:
5.1 Preventive medicine or occupational medicine.

5.2 Public health purposes, including protection against serious communicable diseases or epidemics.

5.3 Labour protection, social security, national health security, healthcare welfare for persons entitled under the law, protection of road accident victims, or social protection.

5.4 Scientific, historical, or statistical research, or other public interest purposes.

5.5 Reasons of substantial public interest as provided by law.

 

 

5. Disclosure and Transmission of Personal Data

 

5.1 Disclosure of Personal Data

 

We will keep your Personal Data confidential and will disclose your Personal Data only to the extent necessary to fulfill the purposes of processing as described in this Privacy Notice or where such disclosure is required or permitted by applicable law. We may disclose your Personal Data to the following persons or organizations:

 

(a) Affiliates and Group Companies

For the purposes of internal administration, service provision, or conducting business operations within the corporate group, including but not limited to Kia Motor Corporation Korea, Kia Asia Pacific, Hyundai AutoEver, and Hyundai Glovis Loigistic Thailand Co., Ltd.

 

(b) Service Providers / Business Partners 

Service providers engaged by the Company to perform services on its behalf or to support the Company's business operations, such as information technology service providers, cloud service providers, logistics providers, marketing service providers, data analytics providers, payment service providers, event organizers, or other related service providers, including but not limited to Innocean (Thailand) Co., Ltd and AWP Services (Thailand) Co., Ltd.

We will enter into a Data Processing Agreement or other appropriate contractual arrangements where required by applicable law. We will also require such persons to maintain the confidentiality of your Personal Data, process your Personal Data only to the extent necessary for the purposes specified by us, and implement appropriate security measures in accordance with applicable data protection laws.

 

(c) Financial Institutions and Payment Service Providers 

For the purposes of processing payments, verifying transactions, or carrying out activities relating to payment processing.

 

(d) Government Authorities, Regulatory Authorities, or Other Competent Authorities

For the purpose of complying with applicable laws, court orders, lawful requests, or exercising and defending legal rights, including, for example, the Revenue Department, the Legal Execution Department, the Ministry of Labour, the Department of Land Transport, the Customs Department, the National Anti-Corruption Commission (NACC), the State Audit Office of Thailand (SAO), and other competent authorities.

 

(e) Professional Advisors

Such as legal advisors, auditors, internal auditors, or external consultants appointed by the Company to provide professional services.

 

(f) Other Persons or Organizations Permitted or Required by Law

Where disclosure is required or permitted by applicable law, or is necessary for the public interest, or for the establishment, exercise, or defense of legal claims.

 

(g) Persons or Organizations to Whom You Have Given Your Consent

Where we rely on your consent as the lawful basis for disclosure, we will disclose your Personal Data only within the scope and for the purposes for which your consent has been obtained.

 

5.2 Transmission of Personal Data Overseas

 

We may need to disclose or transfer your Personal Data to its affiliates, group companies, service providers, or other recipients located in foreign countries for the purposes of business operations, internal administration, information technology services, data storage, or other activities relating to the purposes described in this Privacy Notice. The destination countries may include the Republic of Korea, Malaysia, and Singapore, where the Company's affiliates, service providers, or data storage facilities, such as servers or cloud services, are located.

Where we transfer your Personal Data to a foreign country, we will ensure that such transfer is carried out in compliance with the Personal Data Protection Act B.E. 2562 (2019). Where the destination country does not have an adequate standard of Personal Data protection as prescribed by applicable law or may not provide an adequate level of Personal Data protection, we will implement appropriate safeguards to ensure that your Personal Data is adequately protected. Such safeguards may include requiring the recipient to implement appropriate security measures, entering into data protection or confidentiality agreements, adopting Binding Corporate Rules (BCRs), or implementing any other safeguards recognized under applicable law, as appropriate in the circumstances.

 

 6. Data Retention and Storage of Personal Data

We will retain your Personal Data for a period of not more than ten (10) years from the date on which the purpose of the collection, use, or disclosure of the Personal Data has been fulfilled, or from the termination of the relationship between you and us, as applicable, unless a longer retention period is required or permitted by law, or where such retention is necessary for compliance with legal obligations, the establishment, exercise, or defense of legal claims, the protection of legal rights, or legal proceedings.

We will retain your Personal Data only for as long as necessary, considering the purposes and necessity for which we collect and process your Personal Data, including compliance with applicable laws. We may retain your Personal Data for a period after the agreement between you and us has expired, in accordance with the applicable statutory limitation periods and other relevant legal requirements. Your Personal Data will be stored in appropriate storage locations based on the nature of the Personal Data.

We may also be required to retain your Personal Data even after the applicable statutory limitation period has expired, for example, where the Personal Data is required in connection with ongoing litigation or judicial proceedings. The retention of Personal Data shall be carried out in accordance with our Data Retention Policy.

Examples of the retention periods under Data Retention Policy are as follows:

 

 

 

 

Upon expiry of the applicable retention period, we will take appropriate measures to delete, destroy, or anonymize your Personal Data so that it can no longer identify you, in accordance with the applicable standards, the retention periods specified above, and our Data Disposal Policy, in order to prevent your Personal Data from being accessed, used, disclosed, or recovered without authorization.

We will destroy Personal Data using appropriate methods based on the nature and format of the Personal Data, whether in physical or electronic form, to ensure that such Personal Data cannot be restored or reconstructed. However, we may continue to retain your Personal Data where retention is required by applicable law or where there is a legal necessity to retain such Personal Data.

 

 

7. Use of Personal Data for Marketing Purpose

Other than those purposes and in compliance with the law, we shall use your personal data for direct and indirect marketing purposes, e.g., introduction of products, services and promotions by postal mail, email or other method so that you will gain higher benefits from being our customer.

You may opt out of receiving such sales promotions and choose to receive only necessary communications.

 

 

8. Personal Data Protection

To prevent unauthorized use or disclosure of your personal data by a data recipient, we shall administratively, technically and physically safeguard such personal data to ensure the confidentiality, integrity and availability thereof according to our current and future policies, rules and regulations.

 

We physically and electronically safeguard your personal data by limiting access thereto, and allow only certain employees or representatives to use such personal data for the introduction of products according to our privacy protection policy.

 

At the time of entering into a contract or an agreement with any third party, we set forth the measures for the protection of personal data and confidentiality to ensure that the personal data we handle are safe.

 

 

9. Rights to Data Subject

You should know your rights under the law and our privacy protection policy and the revisions thereof. You may request to exercise your rights under the provisions of the laws and this Policy and its future revisions.

 

9.1 Withdrawal of Consent

 

If you have consented to us collecting, using and disclosing your personal data before or after the application of a personal data protection law, you may withdraw such consent during the time for which your personal data is retained by us, unless the provisions of the law or the contract otherwise forbid you from doing so.

 

9.2 Access to Data

 

You shall have access to your personal data that is retained by us. You may request us to submit a copy of such data to you together with an explanation of how we obtained such data without your consent.

 

9.3 Data Transmission

 

If we put your personal data in a format that can be read and used by some devices, you may request us to submit such data automatically to you or to other data controller, except in the event of technical errors.

 

9.4 Objection

 

If we collect, use and disclose your personal data for our benefit or the benefit of another person, you may raise an objection at any time. However, we may continue to collect, use and disclose your personal data if we can prove that we have the right to do so in compliance with the law or if legal actions are being taken.

 

9.5 Request for Deletion of Data

 

You may request us to delete or destroy your personal data or to remove all personally identifying information if you believe that we have collected, used or disclosed your personal data illegally or that we no longer need your personal data for the purposes set forth hereunder, or when you withdraw your consent or raise an objection as mentioned above.

 

9.6 Request for End of Data Usage

 

You may request us to suspend the use of your personal data during the time at which we are investigating your request for revision of personal data or your objection or in the event that we no longer need to use your data and you prefer that we suspend its use to the deletion or destruction of such data.

 

9.7 Revision of Data

 

You may revise or update your personal data to ensure its correctness and completeness and avoid misunderstanding.

 

9.8 Complaint

 

You may complain to the competent agency if you believe that your personal data have been collected, used and disclosed illegally.

 

9.9 Exercising Rights

 

You can exercise your rights by completing an application form and submitting it to the relevant agency, subject to limitations under the applicable laws. In some cases, we may not comply with your request if it is in conflict with the law or a court order for the public benefit, or if your actions may infringe the rights and liberty of other persons. If we do not comply with your request, we will inform you of the fact.

 

 

Deadlines for certain actions:

* Deleting or destroying personal data, removing identifying information from personal data or withdrawing consent can only be done in compliance with the provisions of the law or the contract with us. If such actions affect the performance of the contract with us or the provision of service due to inability to identify the data subject, the data subject may not receive services and news from us in the future.

 

 

10. Connection to Other Websites

Our website may include links to other websites which have different privacy protection policies. You should study their privacy protection policies before deciding whether or not to disclose your personal data. We shall not be liable for any loss or damage caused by their actions or privacy protection policies.

 

 

11. Cookies

We have the same policy on cookies and other technologies with similar functions on our website. This policy provides information on cookies, their functions and how we manage your cookies.

 

Our website uses cookies to enhance your experience using our website and help us increase the efficiency of our website. Cookies will not harm your devices. The contents of a cookie can only be read or used by the website which has created the cookie.

 

11.1 Types of Cookies Used by Us and Duration of Cookies Operation

 

We use 4 types of cookies. These can be described as 1) cookies that are strictly necessary, cookies that have analytical /performance purposes, cookies to enhance website functionality, and targeting cookies. The purposes of these are explained hereunder:

 

We use first-party cookies and third-party cookies. The former are the cookie files generated and recorded by the website you are visiting. The latter are read by the website which generate and record your data only. Third-party cookies are generated and recorded by a domain which is different from the website you are visiting, and can be shared with other websites independently.

 

We also use session cookies and persistent cookies. The former remain on your device until you leave our website. The latter will remain on your device until you delete them. How long the cookies will remain on your device depends on the lifetime of such cookies and your browser’s settings.

 

11.2 Consent

 

Strictly necessary cookies will always be used on your device for our benefit and safety under the law, once you grant prior consent. If you intend to change your cookies settings or withdraw consent, please study the cookies settings.

 

11.3 Use of Cookies

 

When you visit our website, we use the following cookies:

 

• Strictly necessary cookies to allow you to use our website and access data safely.

 

• Analytical/Performance Cookies that collect data on the use of the website for statistics on user behavior to improve and develop contents on our products, services and website to improve your experience of using our website so that you can easily find the contents you want.

 

• Functionality cookies that record your language, region and fonts settings and enable us to recognize you when you return so that we can present the contents that you want.

 

• Targeting cookies for recording web pages you visited and the hyperlinks thereto, including your profile so that we can present interesting products, services and advertisements.

 

• Third-Party Cookies

Our website and applications may connect with third parties’ websites and applications. You should study their policies on cookies and privacy, which may be different from ours, to understand how they collect and use your data. We shall not be liable to any loss or damage caused by their websites or applications.

 

11.4 Setting Cookies

 

You can set how your browser handles cookies as follows:
Cookies Setting in Chrome
https://support.google.com/chrome/answer/95647?hl=en&ref_topic=14666

 

Cookies Setting in Firefox

https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer?redirectlocale=en-US&redirectslug=Cookies

 

Cookies Setting in Safari

https://support.apple.com/en-ca/guide/safari/sfri11471/mac

 

Cookies Setting in Internet Explorer

https://support.microsoft.com/en-us/topic/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d#ie=ie-10

 

If you clear your cookies, our website may perform less efficiently.

Learn more at www.aboutcookies.org

 

 

12. Personal Data Protection Staff

We have personal data protection staff which audit our collection, use and disclosure of personal data to ensure compliance with the Personal Data Protection Act B.E. 2562 (2019) and our policies, regulations, announcements and instructions, liaise with the Personal Data Protection Committee Office and perform other duties according to the Personal Data Protection Act B.E. 2562 (2019).

 

 

13. Questions About Privacy Protection Policy

If you want to make any suggestions or ask any questions about our collection, use and disclosure of your personal data and your rights hereunder, you can contact us and our staff at:

[personal data protection staff contacts]

 

 

14. Contacts

If you have any questions about our collection, use and disclosure of your data and want to take any actions as per Article 9 of the Personal Data Protection Act, you can contact us at:

 

 

Contact the company:

 

 

PDPA Working Team

 

 

15. Appropriate Authority

 

 

16. Revision of Privacy Protection Policy

We may revise this personal data protection policy from time to time when required by law, and will publish such revisions on our website.

 

 

17. Kia Privacy Policy – Kia ID (link)

To view the full details of this policy, click the following link. - [KIA ID PRIVACY POLICY]

 

 

Effective as of August 1, 2026

Mr. Jung Won Kang 

President