Th En

Privacy Policy

NICE CARS recognizes the importance of personal data protection, which refers to any information relating to an individual that enables the identification of such person. We process your data in accordance with the standards you expect from our products and services. These operations may include the collection, use, disclosure, and/or transfer of data outside of Thailand. Our objective is to build and maintain a business relationship based on trust with our customers and prospective customers; therefore, we place the highest priority on maintaining the confidentiality and integrity of your personal data.

This Privacy Policy ("Privacy Policy") applies to websites across both PC and mobile channels, social networking sites, online communication channels, activities, and other locations where we collect your personal data. However, please read this Privacy Policy in conjunction with the terms and conditions of the services you use, which may contain separate provisions regarding the personal data we collect about you.

We reserve the right to amend this Privacy Policy from time to time. Please check this Privacy Policy regularly to see when it was last updated. Changes to this Privacy Policy will become effective upon the publication of the revised version on our website or application. We will notify you of any material amendments.

1. What Personal Data We Collect

We may collect or obtain the following types of information, which may include your personal data, directly from you, from other sources, or from business partners. Certain types of data collected depend on your interaction with us and the services or products you require from NICE CARS:

  1. Personal Details: Such as title, first name-last name, gender, age, blood group, nationality, date of birth, marital status, occupation, job position, business type, income, years of employment, and information specified in government-issued identification (e.g., identification card number, passport number, tax identification number, driver's license details, or similar details). This also includes name/surname change documents, birth certificates, marriage certificates/divorce certificates, documents related to foreign nationals, work permits, certificates of residence, house registrations, and land title deeds. Furthermore, it includes socio-cultural data, photographs, CCTV recordings, conversation recordings, life insurance information, visa-related documents, information in withholding tax certificates, VAT registration certificates, user profiles (e.g., configured news, voice service providers), and other legal documents.
  2. Contact Details: Such as postal address, delivery details, billing address, telephone number, fax number, maps, location data, email address, LINE ID, Facebook account, Instagram ID, and other IDs from social networking sites.
  3. Vehicle Details: Such as Vehicle Identification Number (VIN), license plate number, brand, model, year, color, engine number, chassis number, vehicle type, mileage, battery, voltage, door and tailgate characteristics, fuel level, brake wear, position and movement data (e.g., time, location, speed), traffic data, environmental data, sensor data (e.g., radar, ultrasonic devices, gestures, sound), vehicle insurance details, credit insurance, compulsory insurance, and Gap Insurance. This also includes salvage value (residual value), body kits/accessories, vehicle registration book (Bluebook), vehicle price, next service appointment date, vehicle inspection documents, details of Connected Drive and Connected Drive functionality, GPS data and vehicle location, vehicle history reports, police summons and letters, and other vehicle-related information.
  4. Technical Details: Such as Internet Protocol (IP) address and Telemetry data.
  5. Behavioral Details: Such as details regarding behavior, lifestyle, attitudes, and other information regarding your interactions.
  6. Profile Details: Such as login names or usernames, profile details, photos, contact history, complaint history, past orders, purchase history, your interests, preferences, feedback, and responses in satisfaction surveys.
  7. Marketing and Communication Details: Such as your preferences in receiving marketing information from us, third parties, and business partners, and your communication preferences.
  8. Other Information: Information that NICE CARS collects, uses, or discloses related to our relationship, such as forms or questionnaires. If you provide personal data of third parties to us, such as first name, last name, address details, and telephone numbers for emergency contact and debt collection, and family member income, please provide this Privacy Policy to such third parties so they are aware of the policy and/or seek consent as necessary. We will only collect, use, or disclose sensitive data upon receiving your explicit consent or as permitted by law.

We collect data regarding children, quasi-incompetent persons, and incompetent persons only when consent is obtained from parents or guardians. We do not intentionally collect data from customers under 20 years of age without parental consent as required by law, or from quasi-incompetent and incompetent persons without the consent of their legal guardians. In the event we inadvertently learn that we have collected personal data from any person under 20 years of age without parental consent as required by law, or from quasi-incompetent and incompetent persons without legal guardian consent, we will delete that data immediately or process the data only if there is a legal basis other than consent.

2. Why We Collect, Use, and/or Disclose Your Personal Data

2.1. Purposes Based on Your Consent

  • Marketing and Communications: To provide information regarding marketing, remarketing, retargeting, market segmentation, communications, sales, special offers, promotions, announcements, news, and information about other products and services from NICE CARS and/or our business partners, where it cannot be considered based on other legal bases.
  • Sensitive Data: We may use your sensitive data for the following purposes:
    • Sensitive data as appearing in identification documents: For the purpose of identity verification and authentication.
    • Health data: To facilitate the provision of benefits to you.
    • Disability: To facilitate the provision of benefits to you.
    • Biometric data (e.g., fingerprints, facial recognition data): For the purpose of identity verification and authentication.
    • Criminal records: For internal audit and investigation.

2.2. Other Purposes and Legal Bases for Processing Your Personal Data

We may use (1) Contractual Basis, to enable us to initiate or perform a contract with you; (2) Legal Obligation Basis, to comply with the law; (3) Legitimate Interest Basis, for our legitimate interests and the legitimate interests of third parties; (4) Vital Interest Basis, to prevent or suppress a danger to a person's life, body, or health; and/or (5) Public Task Basis, for the performance of a task carried out in the public interest or for the exercise of official authority.

We may collect, use, and/or disclose your personal data for the following purposes:

  1. Provision of Products and Services: To provide products and services to you, to enter into a contract and manage the contractual relationship with you (including signing contracts, performing contracts, contract renewals, early termination, and management at the end of the contract), test drive bookings, and registration for vehicle-related and other services.
  2. Participation in Competitions, Lucky Draws, and Similar Promotions: To enable you to participate in sales offers, special offers, privileges, lucky draws, and other offers/promotions, technical campaigns, activities, events, and seminars, remarketing, retargeting, and all related advertising services.
  3. Recommendations and Personalization of Content: To recommend products and services you may be interested in, to understand your needs, and to customize products and services specifically for you.
  4. Registration and Authentication: To register, prove, identify, and verify you or your identity.
  5. Contact and Communication: To communicate with you regarding marketing, sales, special offers, promotions, news, and information about products and services, and to process and update your information.
  6. Relationship Management: To communicate with you regarding products and services you receive from NICE CARS or from our business partners; to process and update your information as our member; to facilitate your use of products and services; to handle customer service inquiries, requests, feedback, complaints, insurance claims, disputes, or compensation; to manage technical issues, provide technical assistance, vehicle repairs, warranties, and goodwill; and to conduct customer relationship management activities (e.g., customer satisfaction index surveys).
  7. Profiling and Data Analytics: To measure your engagement with products and services; to conduct data analysis for product and service development, market research, surveys, assessments, behavior, statistics and classification, consumption trends and patterns; to know you better; to improve business efficiency and better tailor our content to our customers' preferences; to determine the effectiveness of our promotional campaigns; to identify and resolve issues with existing products and services; and for qualitative data development.
  8. Improvement of Business Operations, Products, and Services: To evaluate, develop, manage, improve, research, and develop services, products, systems, and business operations for you and all our customers, which includes editing images, digital assets, and marketing campaigns; to manage target groups, Lead Generation, and Sales Funnels; to ensure product and service quality; for legal consultation; to create aggregated and anonymous reports; to identify and resolve issues; to conduct training programs for sales staff; and to improve application and sales processes.
  9. To Learn More About You: To know more about the products and services you receive and other products and services you may be interested in, including profiling from processing your personal data—for example, by considering the types of products and services you use from us, how you want us to contact you, etc.—and to obtain information from satisfaction surveys and customer credit assessments.
  10. Website, Mobile Application, and Platform Functionality: To administer, operate, track, monitor, and manage our websites and platforms to facilitate and ensure these things work properly, efficiently, and securely; to facilitate the use of our websites and platforms; and to improve the layout and content of our websites and platforms.
  11. Information Technology Management: For our business management purposes, including information technology operations, communication system management, information technology security, and information technology security audits; and business management for compliance with internal requirements, policies, and processes.
  12. Compliance with Regulations: To comply with laws, legal processes, or orders from government agencies, including orders from government agencies outside Thailand, and/or cooperate with courts, authorities, government agencies, and law enforcement agencies when we have reason to believe the law requires us to do so and if it is necessary to disclose your personal data to comply with the law, process, or government orders; to provide and manage VAT refund services; to issue full tax invoices or tax forms; to record and monitor communications; to manage traffic tickets and road taxes; and to report any transactions to the Anti-Money Laundering Office (AMLO). This also includes sending information to the Credit Bureau and issuing Credit Bureau letters to you; disclosing information to tax officials, financial service law enforcement, and other government and law enforcement agencies; and investigating or preventing crime.
  13. Protection of Our Interests: To maintain the security and integrity of our business; to exercise our rights and protect our interests when necessary and lawful—for example, to detect, prevent, and respond to fraud complaints, intellectual property infringement complaints, or law violations; to manage and prevent property loss; to ensure compliance with our terms and conditions; to detect and prevent wrongdoing within our premises, including the use of CCTV cameras; to monitor various situations; to prevent and report crime; and to maintain the security and integrity of our business.
  14. Fraud Detection: To prove your identity; to verify compliance with laws and other regulations (e.g., to comply with anti-money laundering and anti-corruption rules), including conducting internal audits and recordings, asset management, fraud databases, systems, and other business controls.
  15. Corporate Transactions: In the event of a sale, transfer, merger, reorganization, or similar cases, we may transfer your data to one or more third parties as part of such operations.
  16. Risk: To manage risks, monitor efficiency, and assess risks; and/or
  17. Life: To prevent or suppress danger to a person's life, body, or health.

If you are unable to provide personal data as requested, we may be unable to provide products and services to you. We will seek your consent when the law requires that the transfer of data out of the country must receive consent.

3. To Whom We Disclose or Transfer Your Personal Data

We may disclose or transfer your personal data to the following third parties who collect, use, and disclose personal data for the purposes under this policy. These third parties may be located in Thailand or outside Thailand. You can view the privacy policies of these parties to know details about how they collect, use, and disclose your personal data, as you are the data subject under such privacy policies.

4. International Transfer of Personal Data

The Personal Data Protection Committee under the Personal Data Protection Act B.E. 2562 has not yet established rules regarding which destination countries may have adequate personal data protection standards. Whenever we transfer your personal data abroad, we will follow procedures and implement measures to ensure your personal data transfer is secure and to ensure the recipient has appropriate protection standards or other exceptions permitted by law. We will seek your consent when the law requires that the transfer of data out of the country must receive consent.

5. How Long We Retain Personal Data

We retain personal data for as long as necessary to perform the purposes for which the personal data was obtained and to comply with laws and other regulations. If data is processed for multiple purposes, that data will be automatically deleted or recorded in a form that cannot be traced back to you once the final purpose has been achieved. However, we may retain your personal data longer as required by law.

6. Cookies and Pixels and How to Use Cookies and Pixels

If you visit our website, we will automatically collect certain items from you using cookies for browsing history.

Cookies: These are small text files that websites copy onto your hard disk. Cookies do not cause damage to your computer and do not contain any viruses. Cookies from our website do not collect your personal data. As a rule, cookies are used on our website for as long as you use our website for anonymous statistical evaluation and to improve the quality of use. Occasionally, cookies may be used for other purposes in some parts of the website. You will be notified if you access these parts of the website.

Pixels: Additionally, we install pixels, which are analytical tools we use to understand you better based on your activities on our website. This will allow us to know you more.

You can turn off cookie and pixel settings by going to your browser settings and privacy settings to limit the collection of data by cookies.

7. Your Rights as a Data Subject

Under applicable laws and legal exceptions, you may have the following rights:

  1. Right to Access: You may have the right to access or request a copy of the personal data we collect, use, and disclose about you. For your privacy and security, we may ask you to verify your identity before providing the information you request.
  2. Right to Rectification: You may have the right to request correction of your personal data that we collect, use, and disclose if that information is incomplete, inaccurate, misleading, or not up to date.
  3. Right to Data Portability: You may have the right to receive the personal data we have about you in an electronic and structured format, and have the right to request the transfer of such data to another personal data controller, provided that this data is (a) personal data you provided to us; (b) if we process this personal data based on your consent or to perform a contract with you.
  4. Right to Object: You may have the right to object to certain collections, uses, and disclosures of your personal data, such as objecting to use for direct marketing.
  5. Right to Restriction: You may have the right to restrict the use of your personal data in certain cases.
  6. Right to Withdraw Consent: You have the right to withdraw your consent at any time for the various purposes you have consented to for our collection, use, and disclosure of your personal data.
  7. Right to Erasure: You may have the right to request us to delete your data or make your data non-identifiable, unless we are not required to do so if we must retain such data for compliance or exercise of legal claims, or for defense against legal claims.
  8. Right to Complain: You may have the right to complain to relevant authorities if you believe the collection, use, and disclosure of your personal data is unlawful or does not comply with personal data protection laws.