Privacy Policy
for Mobile Application

1. Scope of this Policy

This Privacy Policy applies to the processing of personal data of users of the mobile application, website, or related online services of CK Power Public Company Limited and its affiliated companies. It covers the collection, use, disclosure, transfer, retention, correction, deletion, or any other processing of personal data in accordance with applicable personal data protection laws.

2. Personal Data That May Be Collected

The Company may collect personal data only as necessary for the purposes of providing and operating the mobile application. The categories of personal data that may be involved are as follows:

The Company will collect personal data only to the extent necessary and consistent with the purposes stated in this Privacy Policy. If the application requests access to additional data or device permissions, such as camera, photos, files, location, or notifications, the Company will request permission from users in accordance with operating system requirements and applicable laws.

3. Purposes of Using Personal Data

1. To provide and operate the mobile application, including login, identity verification, user account management, and access rights management.
2. To manage requests, communications, issue reporting, user support, and responses to inquiries.
3. To provide news, announcements, notifications, or information relating to the use of the mobile application.
4. To improve the quality, performance, security, and user experience of the system.
5. To analyze, monitor, prevent, or resolve technical issues, irregularities, or usage that may affect system security.
6. To comply with contracts, laws, orders of government authorities, or other legal obligations.
7. To support the Company's legitimate interests, such as internal audits, accounting audits, risk management, security, and business continuity.

4. Legal Bases for Processing Personal Data

The Company may process personal data under applicable legal bases, including the performance of a contract, compliance with legal obligations, the Company's legitimate interests, consent of the data subject, or any other legal basis permitted under applicable personal data protection laws.

5. Disclosure or Transfer of Personal Data

The Company may disclose or transfer personal data to affiliated companies, related companies, external service providers, cloud service providers, technology service providers, auditors, advisors, government authorities, or other persons as necessary to carry out the purposes described in this Privacy Policy.

If personal data is transferred to another country, the Company will implement appropriate measures to ensure that such transfer is secure and complies with applicable laws.

6. Retention of Personal Data

The Company will retain personal data for as long as necessary for the purposes of processing, as required by law, or as necessary for business operations. When the data is no longer necessary, the Company will delete, destroy, or anonymize the personal data through appropriate procedures.

The retention period may vary depending on the type of data, purpose of use, legal requirements, or potential legal claims. The Company's internal policies may require the continued retention of certain personal data for a necessary period after the original purpose of use has ended.

7. Security of Personal Data

The Company recognizes the importance of protecting personal data and will apply appropriate technical and organizational measures to prevent unauthorized access, use, alteration, disclosure, loss, or destruction of personal data. Personal data may be stored in paper form, electronic form, or other appropriate formats.

8. Rights of Data Subjects

Data subjects have rights under applicable personal data protection laws, which may include the following rights:

• The right to be informed about the collection, use, or disclosure of personal data.
• The right to access and request a copy of personal data.
• The right to request correction of personal data so that it is accurate, up to date, complete, and not misleading.
• The right to withdraw consent where the Company relies on consent as the legal basis for processing.
• The right to request deletion, destruction, or anonymization of personal data.
• The right to request restriction of the use of personal data.
• The right to object to the processing of personal data.
• The right to request data portability where required by law.
• The right to lodge a complaint with the competent authority under applicable law.

Users may contact the Company to exercise these rights through the contact channels specified in Section 12. The Company may request additional information to verify the identity of the requester before proceeding with the request.

9. Withdrawal of Consent

Where the Company processes personal data based on consent, users have the right to withdraw their consent through the procedures specified by the Company. Withdrawal of consent will not affect the lawfulness of processing that was carried out before the consent was withdrawn.

10. Account Deletion and Data Deletion

If the application provides user accounts, users may request to close their account or delete personal data associated with the account by contacting the Company via email at ckpdpo@ckpower.co.th or through any other channel announced by the Company.

Upon receiving a request, the Company will consider and proceed in accordance with applicable laws. The Company may continue to retain certain data where necessary to comply with laws, conduct audits, prevent fraud, maintain security, or establish, exercise, or defend legal claims.

11. Cookies, Analytics, and Related Technologies

If the application or related website uses cookies, analytics, crash reporting, push notifications, or other technologies, the Company will use such data to provide services, analyze usage, detect errors, improve system quality, and maintain security. The Company will do so in accordance with applicable laws and users' consent settings, where applicable.

12. Contact Channels

If you have any questions, complaints, or wish to exercise your rights relating to personal data, you may contact the Company's Data Protection Officer at:

13. Changes to this Privacy Policy

The Company may update or amend this Privacy Policy from time to time to reflect changes in laws, application services, or the Company's business practices. The latest version of this Privacy Policy will be published through appropriate channels.