Section 2 sets out the type of Personal Data that we collect or may collect from you.
3.1 The Personal Data has/or will be obtained from the following sources, where applicable, or such other sources which we may see fit from time to time: (a) information provided or submitted by you through among others, your dealings and agreements with us, which includes information provided when registering as a user, providing information regarding any account which you may open with us, providing answers to security questions, completing any confirmations, declarations or forms, or through your utilization of any of our Services, accessing or viewing our Platform; (b) as applicable, publicly available or publicly accessible information; and (c) such other written, electronic or verbal communications or documents delivered to us prior to and during the course of our contractual or pre-contractual dealings with you. 3.2 As the accuracy of your Personal Data depends largely on the information you provide to us, you should inform us as soon as practicable if there are any errors in the Personal Data or if there have been any changes to the Personal Data. We intend to keep the Personal Data accurate and up-to-date, and retain the Personal Data no longer than necessary for the above purposes or as required or permitted by any applicable law.
Section 3 sets out where we may obtain Personal Data from. As the accuracy of your Personal Data depends largely on the information you provide to us, you should inform us as soon as practicable if there are any errors in the Personal Data or if there have been any changes to the Personal Data.
4.1 We may use your Personal Data for our business purposes, including the provision and continuing operation of the Platform and the Services provided to you on the following legal bases and for the following purposes ("Purposes"): (a) provision of the Services as requested by you; (b) carrying out any transactions on your behalf contemplated on the Platform and the Services thereto; (c) assessing and processing applications, instructions or requests from you; (d) communicating with you, including providing you with updates on changes to our Services; (e) to verify your identity for the purposes of providing Services to you; (f) conducting due diligence checks, screenings or credit checks as may be required by any Applicable Laws or our internal policies and procedures; (g) to administer any account which you may open with us; (h) to process payments; (i) to respond to queries or feedback; (j) for the specific purpose for which it was volunteered or provided to us; (k) any other reasonable purposes in connection with the provision of our Services; (l) to detect and protect us or any third parties against negligence, fraud, theft and other illegal activities; (m) to understand your needs and preferences; (n) improving the content, appearance and utility of the Platform; (o) to manage and develop infrastructure and business operations; (p) to comply with our internal policies and procedures; (q) to address or investigate any complaints, claims or disputes; (r) as permitted by any Applicable Laws; (s) enforcing obligations owed to us; (t) seeking professional advice, including legal advice; (u) fulfilling any purpose directly related to the above Purposes; (v) any other purposes that are appropriate or authorized by any Applicable Laws; (w) to comply with any Applicable Laws or any request from any relevant governmental or regulatory authority; (x) financial reporting, regulatory reporting, management reporting, risk management, audit and record keeping purposes; or (y) with your consent, providing you with marketing materials in connection with the services we may provide. 4.2 You may, at any time, withdraw your consent to receive marketing information from us. If you wish to do so, please click on the “Unsubscribe” option available on all marketing/newsletter emails that you may receive from us or contact our Data Protection Officer, at 17th Floor T-One Building, 8 Soi Sukhumvit 40, Prakanong, Klongtoey, Bangkok 10110, email@example.com or +662 506-1111. 4.3 We will use your Personal Data only where we have a lawful basis for using it. These lawful basis include where: (a) we need to pursue our legitimate business interests; (b) we need to process the information to perform our contract with you; (c) we need to process the information to comply with a legal obligation; (d) the use of your information as described is in the public interest, such as for the purpose of preventing or detecting crime; and (e) we have your consent.
Section 4 sets out how we may use your Personal Data. This includes using your Personal Data for the provision of our Services / Platform to you, for marketing purposes, and to comply with regulatory requirements. We will use your Personal Data only where we have a lawful basis for using it, which include, pursuing our legitimate business interests; processing the information to perform our contract with you; processing the information to comply with a legal obligation; for the public interest, such as for the purpose of preventing or detecting crime; and having your consent.
We may also disclose and share your Personal Data with other persons in connection with the Purposes described in Section 4
To the extent necessary, we may transfer, store, process and/or deal with your Personal Data outside Thailand. In doing so, we will comply with the PDPA and other applicable data protection and privacy laws. If the recipient countries do not maintain adequate standard levels, we will ensure that the transfers are in compliance with legal requirements and will put in place the as necessary and appropriate measures for the purpose of protecting your Personal Data.
We may transfer your Personal Data outside Thailand. If we do, we will comply with applicable data protection and privacy laws.
Your Personal Data is retained as long as the purpose for which it was collected remains and until it is no longer necessary for any other business purposes or to comply with any Applicable Laws and in accordance with our policy or manual on data retention of StashAway Thailand.
We may retain your Personal Data for as long as it is necessary for the purpose it was collected, for business purposes or to comply with applicable laws.
However, you may also • request access to and obtain a copy of your Personal Data we hold; • request the rectification of any inaccurate data; • request to obtain your Personal Data we hold in the format which is readable or commonly used by ways of automatic tools or equipment which can be used or disclosed by automated means; • object to the processing of your Personal Data by us; • request us to delete or anonymise of your Personal Data that we no longer have a legal ground to process; • request us to restrict the processing of your Personal Data; • where you have provided us with your consent to process your Personal Data, withdraw your consent at any time; and • lodge a complaint to relevant authority in case that we process your personal data unlawfully or not in compliance with applicable laws. If you would like to do so, please contact our Data Protection Officer, at 17th Floor T-One Building, 8 Soi Sukhumvit 40, Prakanong, Klongtoey, Bangkok 10110, firstname.lastname@example.org or +662 506-1111. However, please note that exercise of your rights above may be restricted under Applicable Laws and it may be necessary for us to deny or not be able to carry out your requests, e.g. to comply with laws or court orders, public tasks, your request in breach of rights or freedom of other persons, etc. In the event that we are required to deny your request, we will inform you of the reason.
You may contact our Data Protection Officer to access or request changes to your Personal Data
If you have any questions about any aspects of this policy or your Personal Data, please contact our Data Protection Officer, at 17th Floor T-One Building, 8 Soi Sukhumvit 40, Prakanong, Klongtoey, Bangkok 10110, email@example.com or +662 506-1111.