Personal Data Protection Policy

1. Definition of Personal Data

"Personal Data" means any information relating to a natural person, which enables the identification of such person, whether directly or indirectly, such as name, surname, address, telephone number, email, or any other data that can be linked back to that individual.

2. Types of Personal Data Collected by the Company

The Company may collect your personal data as necessary to provide services or carry out lawful purposes as follows:

• First Name - Last Name
• Email Address
• Telephone Number
• Address
• Any other information you voluntarily provide through the website oms.co.th

3. Source of Personal Data

The Company will collect personal data from:

• Information provided directly by you through registration or various forms.
• Communications through the website, email, or other company channels.

By providing such information, the Company deems that you have given consent to collect, use, or disclose personal data in accordance with the purposes stated in this policy.

4. Purpose of Processing Personal Data

• To provide services or contact you back upon your request.
• To execute transactions or coordination related to the Company's services.
• To develop, improve the quality, and security of the system.
• To comply with relevant laws.

The Company will not use or disclose your personal data for purposes other than those specified, unless your consent is obtained or as permitted by law.

5. Disclosure of Personal Data

The Company may disclose your personal data to third parties only in cases where:

• Your explicit consent is obtained.
• Disclosure is required by government officials, state agencies, or courts acting under legal authority.
• It is necessary to prevent danger to a person's life, body, or health.
• It is necessary for the enforcement of rights or prevention of violation of the Company's legal rights.

6. Data Retention Period

The Company will retain your personal data for as long as necessary in relation to the purposes of use, and will delete or destroy your personal data when it is no longer needed, unless retention is required by law.

7. Security of Personal Data

The Company has appropriate security measures to prevent unauthorized access, use, alteration, or disclosure of personal data by utilizing technical and administrative safeguards, including access control, encryption, and logging of significant events.

8. Rights of the Data Subject

You have legal rights regarding your personal data, including:

The Company will process your requests within 30 days free of charge.

9. Notification of Personal Data Breach

In the event of a personal data breach, the Company will notify the Office of the Personal Data Protection Committee within 72 hours. If the breach poses a high risk to your rights, we will notify you immediately.