Privacy Policy

1. Information We Collect

We may collect the following personal data when you contact or use our services:

• Name and company name
• Phone number, email, and LINE ID
• Delivery or billing address
• Order details and product requirements
• Messages, quantities, project details and BOQ documents you choose to send through the channel used
• Technical data such as IP, browser, time, requested page, errors and activity logs to deliver content and operate systems
• Visits and contact-link clicks for analytics when configured and accepted

2. Purposes and Legal Bases

• Answering inquiries, preparing quotations and taking steps you request before a contract or performing a contract with you: necessity for those steps or that contract.
• Coordinating with business representatives, operating and protecting systems, preventing misuse and handling claims: legitimate interests where necessary, considering your rights and the impact on you.
• Accounting, tax records and lawful orders: compliance with applicable legal obligations.
• Google Analytics: consent selected separately from contacting us. An inquiry is not a marketing subscription. A new purpose requires appropriate notice and a lawful basis before use.

3. Disclosure to Third Parties

People handling inquiries and systems may access data for their duties, including hosting, database, email and website providers. The system uses Supabase for databases and administrator authentication and Cloudinary for website media. Loading media and Google Fonts sends connection data, such as IP and browser information, to their providers.

When you choose to load Google Maps, its provider receives connection data and may use cookies under its own policy. Rejecting BWS Analytics does not control maps or external websites.

LINE, Shopee, Facebook and TikTok links take you to external services with their own policies. We receive information you send to us there for the matter concerned.

Where needed for transactions or claims, relevant information may be disclosed to carriers, manufacturers, professional advisers or legally authorized bodies. Disclosure requires an applicable purpose and lawful basis.

4. Retention

Retention depends on the record and reason for its use, following the criteria below rather than indefinite storage. Data must be deleted, destroyed or anonymized once no longer needed and no legal duty or grounds for continued retention apply.

• Inquiries and quotations: while handling and following up until closure, and as necessary for related disputes or claims.
• Transaction, accounting and tax records: for periods required by the law applicable to each record and as necessary for unresolved claims.
• Security and activity logs: as necessary for investigating incidents and applicable logging duties. Backups follow system and provider cycles; information no longer needed should not be restored to ordinary use.
• The browser analytics choice has no website-set expiry and remains until changed, site data is cleared or the browser removes it. Analytics cookies and data follow service retention settings. Contact us for details relevant to your data.

5. Your Rights

These rights are subject to legal conditions. A refusal or restriction of a request requires a lawful reason communicated to you:

• Access and request a copy of your personal data
• Request correction of inaccurate data
• Request erasure or restriction of processing
• Withdraw consent at any time
• Learn the source of data obtained without your consent
• Receive or transfer data in the prescribed format where portability conditions apply
• Object where provided by law, including to direct marketing
• Complain to the Office of the Personal Data Protection Committee through official channels at pdpc.or.th; contacting us does not waive that right

6. Cookies & Website Analytics

Browser storage remembers choices and display data. Administrator sessions support authentication and access control. Clearing site data may reset choices; blocking sessions may affect administrator login.

We save your analytics choice in browser localStorage. Google Analytics loads only when the service is configured and you accept, to measure page visits and contact-link clicks. You can reject or change your choice using Cookie Settings in the footer, without affecting website access or inquiry submissions.

Analytics may use cookie identifiers and device information. The website does not intentionally send names, phone numbers, emails or form messages as analytics data and removes query strings and fragments from URLs in events defined by the website.

Rejecting disables analytics tracking and removes analytics cookies accessible to this website. This does not delete information already sent. Contact us to exercise your data rights.

Withdrawal does not affect the lawfulness of processing before withdrawal. You can also manage cookies in your browser settings.

7. Required Data and Other Sources

Inquiry forms require a name and phone number; the contact form also requires a message. Without required information a form or request may not be processed. You can use another channel on our Contact page. Supply additional information only where relevant.

Where an organization representative or coordinator supplies another person's data, we use what is necessary for the inquiry and must provide notice as required by law. Senders should be entitled to share it and inform the person about disclosure to us.

Avoid health, religion, biometric or criminal-record information, passwords, payment-card details and unnecessary confidential information in messages or BOQs. Redact unrelated third-party data. Necessary sensitive-data processing requires separate consideration of legal conditions. This website has no payment-card or OTP entry fields.

These services provide product information and business contact channels. Where a minor or a person requiring legal representative consent makes a transaction or gives consent, the representative should act as required by the law applicable to that case.

8. International Processing

Cloud and external providers may process information abroad. This notice does not represent that all information is stored in Thailand. Transfers by the company must satisfy sections 28 or 29 and applicable rules, such as adequate protection, appropriate safeguards or an applicable statutory exception. Contact us for details relevant to your data.

9. Security and Incidents

The system checks authorization for administration and media uploads and validates forms to reduce misuse. No system can guarantee complete security. Contact us promptly if you suspect inappropriate access or disclosure.

The company must assess breaches, mitigate harm and notify the regulator or affected people according to the risk and applicable legal deadlines.

10. Policy Changes

The date above identifies this revision. Material changes to purposes or data use require appropriate notice and new consent where legally required. Updating this text does not expand existing consent to every use.

11. Contact

To exercise your rights or ask questions about this policy, contact bws.bangkokwynn@gmail.com or call 02-853-3656.

Bangkok Wynn Strong CO., LTD., registration 0105568235626. Address: 361 Floor 1, Theparat Road, Bang Na Nuea, Bang Na, Bangkok 10260.

Describe your personal-data request, information that helps locate it and a reply channel. An identity-card copy is not required with the initial request. We may request proportionate identity verification to protect against disclosure to others. Requests must be considered within applicable statutory deadlines; access and copy requests under section 30 must be handled without delay and within 30 days of receipt.