Who we are
Linfox M Logistics (Thailand) Co., Ltd. ("Linfox", "we" or "us") runs this website for the Linfox Distribution Centre at Asia Industrial Estate Suvarnabhumi, Samut Prakan. We are the data controller for the personal data described in this policy.
This policy covers personal data collected through this website and through enquiries you make from it. Our contact details are at the end of this page.
Personal data we collect
Details you choose to send us
The enquiry form on this website does not send or store anything. It prepares an email in your own email app, and nothing reaches us until you press send. The email may include:
- your name, company, work email address and phone number
- your preferred visit date, temperature requirements and topics of interest
- your message, and anything else you add, such as your email signature
If you contact us in another way, such as by phone or email, we collect the details you give us.
Technical information
This website has no sign in, analytics or advertising tools of its own. When your browser requests a page, our website hosting provider automatically records standard technical information, such as your IP address, browser type, the page requested and the date and time. This is needed to deliver the website and keep it secure.
Sensitive personal data
Please do not send us sensitive personal data, such as information about your health, religion, ethnicity, political opinions, biometric data or criminal record. We do not need it to answer an enquiry.
How we use it and our legal basis
We use personal data only for the purposes below. The PDPA requires a legal basis for each one, and the sections listed are those of the PDPA.
| Purpose | Personal data | Legal basis |
|---|---|---|
| Reply to your enquiry, arrange a site visit, discuss your requirements or prepare a proposal | Name, company, contact details and enquiry details | Steps you ask us to take before entering into a contract (Section 24(3)), and our legitimate interest in responding to business enquiries (Section 24(5)) |
| Manage our business relationship with you or your organisation | Name, company, contact details and correspondence | Performance of a contract (Section 24(3)), and our legitimate interest in managing customer relationships (Section 24(5)) |
| Run the website, keep it secure and prevent misuse | Technical information | Our legitimate interest in operating a secure website (Section 24(5)) |
| Comply with the law and protect our legal rights | Any of the above, only as needed | Compliance with a legal obligation (Section 24(6)), and our legitimate interest in establishing, exercising or defending legal claims (Section 24(5)) |
If we want to use your details to send you marketing information, such as news about Linfox services, we will ask for your consent first where the PDPA requires it. You can withdraw your consent at any time. Withdrawing it does not affect anything we did with your consent before then.
If we want to use your personal data for a new purpose, we will tell you first and ask for your consent where the PDPA requires it.
If you choose not to give us personal data
You do not have to give us any personal data, and no law or contract requires you to do so through this website. However, we need at least your name, company and a way to contact you to reply to an enquiry. Without them, we may not be able to respond.
Transfers outside Thailand
Some of these recipients, including our website hosting provider and other Linfox group companies, may be located outside Thailand, for example in Australia or the United States.
When we send personal data outside Thailand, we do so only in the ways Sections 28 and 29 of the PDPA allow. This means, for example, that the destination country has adequate data protection standards, that appropriate safeguards such as contractual protections or binding corporate rules are in place, or that another exception under the PDPA applies.
How long we keep it
- Enquiry details: for as long as we need them to respond, to follow up on your enquiry and to manage any business relationship that follows, and for any longer period the law requires, such as under accounting or tax law if a contract follows.
- Technical information: for a limited period set by our hosting provider to operate and secure the website.
When we no longer need personal data, we delete or destroy it, or make it anonymous so it can no longer identify you.
How we protect it
We use appropriate technical and organisational security measures to protect personal data against loss and against unauthorised access, use, change or disclosure, and we review these measures when needed. Only people who need personal data for their work can access it. This website is served over an encrypted connection (HTTPS).
Your rights
Under the PDPA, you have the right to:
Withdraw consent
Withdraw consent you have given us, at any time.
Section 19Access
Ask for access to and a copy of your personal data, or ask how we obtained it if you did not give consent.
Section 30Data portability
Receive your personal data in a commonly used electronic format, or ask us to send it to another organisation, where technically possible.
Section 31Object
Object to how we use your personal data, including for direct marketing.
Section 32Erasure
Ask us to delete or destroy your personal data, or make it anonymous.
Section 33Restriction
Ask us to limit how we use your personal data.
Section 34Correction
Ask us to correct your personal data so it is accurate, up to date and complete.
Section 35Complaint
Complain to the Office of the Personal Data Protection Committee if you believe we have breached the PDPA.
Section 73
Some rights have conditions or exceptions under the PDPA. If we cannot meet a request, we will tell you why in writing.
How to make a request or complaint
You can make a request in any of these ways:
- by email to LIG_marketing@linfox.com
- by registered mail to the address at the end of this page
- in person at the same address, during business hours
Please include your name, your contact details, the personal data or right your request is about and how you would like us to reply. To protect your personal data, we may ask for proof of identity, and for a letter of authorisation if someone makes a request for you.
We will reply within 30 days of verifying your identity. If a request is complex or covers a large amount of data, we may need up to 30 more days, and we will let you know.
Making a request is free. If you ask for copies that involve special recording or delivery costs, we may charge a reasonable fee that is no more than our actual cost and within the limits set by the Personal Data Protection Committee. We will tell you the amount before we go ahead.
You can also complain to the Office of the Personal Data Protection Committee (PDPC) at www.pdpc.or.th.
Children
This website is for business customers and is not directed at children. If you are under 20, please do not send us personal data without the consent of your parent or guardian.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.