Privacy Policy

Phoenix Media Partners Co., Ltd. (the "Company", "we", "us") recognises the importance of protecting personal data. This Privacy Policy explains our practices regarding the collection, use and disclosure of personal data, along with the rights of data subjects, in accordance with the Personal Data Protection Act B.E. 2562 (2019) ("PDPA") and applicable law. You can be assured that the personal data you entrust to us is processed to meet your needs and in line with the applicable laws.

Last updated: 28 June 2026

Personal data we collect

We collect personal data that you provide to us directly, including:

• Contact information such as your name, telephone number and email address.
• Transaction and financial information such as purchase history, credit card details and bank account information.
• Technical data such as your IP address, cookies (via Google Analytics) and other records of your interactions with us, including logs.
• Other data you choose to send us, such as articles, photos, feedback and similar materials.

Children's privacy

Our service does not address anyone under the age of 20. We do not knowingly collect personally identifiable information from anyone under the age of 20. If we become aware that we have collected personal data from a person under that age without verification of parental consent, we will take steps to remove that information from our servers.

How we use your data

We use the collected data to provide, maintain and improve our products and services, to communicate with you, to process transactions, to comply with our legal obligations, and for the other purposes described in this Policy.

Sharing and disclosure

We share your personal data within our organisation in order to provide and develop our products and services. We may combine information internally across the different goods or services covered by this Privacy Policy to help us be more relevant and useful to you and others.

We may use service providers to help us deliver our services, for example for payments, marketing and development. These service providers may only access your information to perform tasks on our behalf and have their own privacy policies governing their use of any data.

In connection with any reorganisation, restructuring, merger, sale or other transfer of assets, we may transfer information, including your personal information, provided that the receiving party agrees to respect your personal information in a manner consistent with this Privacy Policy and applicable law.

Under certain circumstances, we may be required to disclose your personal data if obliged to do so by law or in response to valid requests by public authorities (for example, a court or a government agency).

Data retention

We will retain your personal data for as long as necessary while you are a customer or otherwise in a relationship with us, or for as long as necessary in connection with the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law. We will erase, destroy or anonymise your personal data when it is no longer necessary, or when the relevant period lapses.

Data security

We use reasonable administrative, logical, physical and managerial measures to safeguard your information against loss, theft and unauthorised access, use and modification. These measures are designed to provide a level of security appropriate to the risks of processing your payment information and other information.

We store your payment details (for example, a credit card number or token) in our secured systems for your future payments or for the billing process.

Your rights as a data subject

You may exercise any of the following rights within the requirements of the law and our policies as they apply now or as amended in the future, together with any regulation set out by us:

• Withdrawal of consent: where you have given consent for us to collect, use or disclose your personal data, you may withdraw that consent at any time during the period your personal data is held by us, unless restricted by law or while you remain under a beneficial contract.
• Data access: you may access the personal data we hold about you, request a copy of it, and ask how we obtained it.
• Data portability: where your data is held in an automated, machine-readable format, you may request that it be sent or transferred to another data controller where technically feasible.
• Objection: you may object to the collection, use or disclosure of your personal data in certain circumstances, such as where it is processed for our legitimate interests or for the performance of a public task.
• Erasure or destruction: you may request that we erase, destroy or anonymise your personal data where you believe its processing is unlawful, where it is no longer necessary, or where you have withdrawn consent or objected to the processing.
• Suspension of processing: you may request that we suspend processing your personal data while we examine a rectification or objection request, or in place of erasure where appropriate.
• Rectification: you may have your personal data updated so that it is accurate, complete and not misleading.
• Lodging a complaint: you may complain to the competent authorities where you believe the collection, use or disclosure of your personal data does not comply with the relevant laws.

You can exercise these rights by contacting our Data Protection Officer using the details below. We will notify you of the outcome of your request within 30 days of receipt. If we decline a request, we will inform you of the reason.

Marketing and analytics

To help you benefit from our products and services, we use your information to analyse, personalise and enhance our offering and our marketing, including through Google, Facebook and pixel tracking technologies, so that we can provide recommendations for products or services we believe will be of interest to you.

We may send communications or news based on your preferences. If you no longer wish to receive communications from us by email, you can click the "unsubscribe" link in any of our emails.

Cookies

To enrich and improve your experience, we use cookies or similar technologies to display personalised content and appropriate advertising and to store your preferences. We use cookies to recognise and understand visitors, how they use our website, and their access preferences.

If you do not wish to have cookies placed on your device, you can set your browser to refuse cookies before using our website. Please note that doing so may affect the functionality of some features of the website.

Data breach notification

We will notify the Office of the Personal Data Protection Committee without undue delay and, where feasible, within 72 hours of becoming aware of a personal data breach, unless the breach is unlikely to result in a risk to your rights and freedoms. Where a breach is likely to result in a high risk to your rights and freedoms, we will also notify you of the breach and the remedial measures without undue delay.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Where changes are made, we encourage you to check this page regularly so that you are aware of the most current version.

Third-party links

The purpose of this Privacy Policy is to cover the products and services we offer and the use of our website. Any websites on other domains that are linked from our site are subject to their own privacy policies, which are not related to us.

Contact us

If you have any questions about this Privacy Policy, or wish to exercise your rights, please contact our Data Protection Officer through the following channels: