Privacy & Cookie Policy

1. Data Controller

GPOS Co., Ltd. ("the Company") is the data controller for the collection, use and disclosure of personal data through the gpos.co.th website.

• Registered address: 459 Thep Rattana Road, Bang Na Nuea, Bang Na, Bangkok 10260
• General email: contact@gpos.co.th
• Telephone: 02-114-8678
• Email for personal data matters: privacy@gpos.co.th

2. Personal Data We May Collect

2.1 Information you provide to the Company, such as

• First and last name
• Company or organization name
• Telephone number
• Email address
• Information or messages you send through contact forms
• Information used to request a quotation
• Information about the products and services you are interested in
• Your consent to receive news, offers or promotions
• Any other information you voluntarily provide to the Company through the website

2.2 Website usage information

When you use the website, the Company or the technology providers it uses may receive technical and usage information, such as

• IP address
• Device type
• Browser type and version
• Operating system
• Date and time of your visit
• Pages you view
• Time spent on the website
• Source of your visit
• Your interactions with different parts of the website
• Information related to cookies or similar technologies

Some types of data are collected only with your consent, as required by law.

3. Purposes and Legal Bases for Processing

The Company may collect, use or disclose your personal data for the following purposes.

Fulfilling requests or contracts

In order to:

• Contact you back regarding your request
• Prepare and send quotations
• Provide information about our products and services
• Take steps prior to entering into a contract
• Provide services or perform a contract we have with you

Consent

The Company may ask for your consent for:

• The use of analytics cookies
• The use of cookies or technologies for advertising and marketing
• Sending news, promotions or marketing offers where the law requires consent

You may withdraw your consent through the channels the Company provides.

Legitimate interests

The Company may process data to the extent necessary in order to:

• Keep the website and our systems secure
• Prevent fraud or misuse of the website
• Investigate and resolve technical issues
• Manage and improve the Company’s operations

In doing so, the Company will consider the necessity of the processing and its impact on the rights and freedoms of data subjects, as required by law.

4. What Are Cookies and Related Technologies?

Cookies are small data files that a website stores on your computer, mobile phone, tablet or other device when you visit the website.

Cookies allow the website to remember certain information about your use, such as your cookie preferences, and help the Company analyze website usage, measure performance, and improve its products, services and advertising.

The website may use cookies together with other technologies that serve similar purposes, such as pixels and tags.

5. Types of Cookies Used on the Website

The website may use the following types of cookies and related technologies.

5.1 Strictly Necessary Cookies

These cookies are required for the basic operation of the website, including security and remembering your cookie consent preferences.

Because these cookies are necessary to provide the website, we do not need to ask for consent in the same way as for analytics or marketing cookies.

5.2 Analytics Cookies

These cookies help the Company understand how the website is used, such as the number of visitors, the pages that attract interest, the sources of visits, and usage patterns.

This information helps the Company analyze and improve the performance of the website.

The Company will use these cookies in accordance with your consent settings and as required by law.

5.3 Advertising and Marketing Cookies

These cookies and technologies may be used to:

• Measure the performance of advertising campaigns
• Check whether advertising leads to website visits or contact with the Company
• Analyze the effectiveness of marketing channels
• Show or improve the relevance of ads on other platforms

The Company will use these technologies in accordance with your consent settings and as required by law.

6. Tools and Service Providers Used on the Website

The website may use services and technologies from third-party providers to help with analytics, website management and marketing measurement, such as

Google Analytics 4

Used to analyze data about visits to and use of the website, helping the Company understand and improve website performance.

Google Ads

Used to measure the performance and conversions of advertising through Google, and may use data in accordance with users’ consent settings for advertising purposes.

Meta Pixel

Used to measure the performance of advertising on Meta platforms such as Facebook and Instagram, including analyzing certain actions users take after seeing or clicking an ad.

Google Tag Manager

The website may use Google Tag Manager to manage tags or measurement tools on the website. Whether analytics- or marketing-related tags run depends on your consent settings and the website’s configuration.

The list of cookies, technologies, providers and their durations may change as the website or third-party services are updated.

The Company will make reasonable efforts to keep the information in this policy consistent with the website’s actual use.

7. Giving and Managing Cookie Consent

When you first visit the website, it displays a cookie consent tool so that you can choose which types of cookies the website may use.

You can:

• Accept all cookies
• Reject non-essential cookies
• Turn each type of cookie on or off through the cookie settings menu

Rejecting analytics or marketing cookies will not prevent you from using the basic parts of the website, but some functions or experiences may differ.

You can change or withdraw your cookie consent at any time through the "Cookie settings" menu provided on the website.

You can also delete or block cookies through the settings of the browser you use.

8. Disclosure to Third Parties

The Company may disclose data to, or allow external service providers to process data, to the extent necessary for our operations, such as

• Website system and hosting providers
• Information technology service providers
• Website analytics providers
• Advertising and marketing providers
• Providers of systems or tools related to the operation of the website

The Company will ensure that such use or disclosure is consistent with the relevant purposes and legal requirements.

The Company may disclose data where required by law, by orders of government authorities, or by orders of a competent court.

9. Transfer of Personal Data Abroad

Some technology providers used by the Company may have systems, servers, affiliates or data processors located abroad, which means some data may be processed in or transferred to other countries.

Examples of such providers may include Google and Meta.

Where personal data is transferred abroad, the Company will comply with the applicable personal data protection laws and put in place appropriate data protection measures as required by law.

10. Data Retention

The Company will retain personal data for as long as necessary for the purposes for which it was collected and processed, or for the period required by law.

When personal data is no longer necessary for those purposes and there is no other legal ground requiring the Company to keep it, the Company will delete, destroy or anonymize the data as appropriate.

For data generated by cookies or third-party services, retention periods may vary depending on the type of cookie, the website’s settings and each provider’s policies.

11. Data Security

The Company uses appropriate organizational and technical measures to help protect personal data from loss and from unauthorized access, use, alteration, modification or disclosure.

The Company limits access to personal data to those who need it to perform their related duties.

12. Rights of Data Subjects

Subject to the criteria, conditions and exceptions provided by law, you may have the following rights regarding your personal data:

• The right to access and obtain a copy of your personal data
• The right to have your personal data corrected so that it is accurate and up to date
• The right to request deletion or destruction of your personal data
• The right to request restriction of the use of your personal data
• The right to object to the processing of your personal data
• The right to receive or transfer your personal data where required by law
• The right to withdraw consent you have previously given
• The right to lodge a complaint with the Personal Data Protection Committee or another competent authority

Withdrawing your consent does not affect the lawfulness of any processing carried out by the Company before the withdrawal.

The exercise of some rights may be subject to legal conditions or exceptions, and in some cases the Company may need, or be legally required, to continue retaining certain data.

13. How to Exercise Your Rights and Contact Us About Personal Data

If you wish to exercise your rights regarding personal data, have questions about this policy, or wish to contact the Company about personal data protection, you can reach us at:

The Company may request additional information, to the extent necessary, to verify the identity of the requester and to prevent disclosure of personal data to unauthorized persons.

The Company will consider and act on requests within the period required by law.

14. Third-Party Websites and Services

The website may contain links to third-party websites, applications or services.

When you leave the Company’s website for a third-party service, that service’s collection and use of data is governed by the provider’s own privacy policy.

The Company recommends that you review the privacy policies of such websites or services before providing personal data.

15. Changes to This Policy

The Company may amend or update this Privacy & Cookie Policy from time to time to reflect changes in the website, technology, business operations or applicable laws.

When changes are made, the Company will update the "Last updated" date at the top of the policy and, for material changes, may notify users through appropriate channels.