Privacy Policy

One and All Thailand Company Limited (collectively, “Company,” “we,” “us” or “our”) recognizes the importance of personal data (“personal data” refers to any data that is retained and can be used to clearly identify or can reasonably verify the identity of an individual directly by the company in possession of the data or when aggregated with other data, can be used to identify an individual directly with certainty) as well as sensitive personal data that contains information about race, ethnicity, politics, creed, religion or philosophy, sexual orientation, criminal background, health, disability, trade union, genetics, biometric data, or any other data that can affect the owner of the data in a similar nature (“sensitive personal data”) as stated in the rules, regulations, and orders of the Personal Data Protection Act B.E. 2562 in effect and any other amendments to the Personal Data Protection Act B.E. 2562 (collectively, “PDPA”). To protect personal data, we will follow the PDPA and this privacy policy (“Privacy Policy”) when processing the personal data of our customers, shareholders, employees, and job applicants.

(1) Collection of personal data

The Company will collect personal data and sensitive personal data as follows:

  • Personal data, e.g., name, last name, age, date of birth
  • Contact information, e.g., address, workplace, telephone number, email, Line ID
  • Device information, e.g., IP Address, MAC Address, Cookie ID

This is for the purposes of complying to contractual terms, entering into a contract, contractual obligations, carrying out duties and responsibilities, legal interests, and legal obligations.

(2) Purposes of collecting, using, and/or disclosing data

We will use your data to develop and improve our website and our other social media channels. We will also use the data to analyze and process personal data through electronic means to better meet your needs as a user.

The Company will not collect, use, or disclose your personal data for any purpose other than what has been stated to you beforehand or while collecting the data.

(3) Collection, usage, or disclosure of personal data

Collection of personal data: The Company will collect data that you have provided consent to.

The Company will only collect your data as deemed necessary and retain the data in our records for a duration of 10 years from the day that the data was collected.

Usage or disclosure of personal data: The Company will not use or disclose your personal data until you have provided consent, apart from data that is collectable without consent.

The Company will ensure that any employee assigned to this matter does not use, disclose, show, or in any way make your personal data appear anywhere other than for the stated purposes within the law and scope that you consent to, or within the related perimeters stated in this privacy policy.

In the case that the Company discloses your personal data to a third party, the said third party must state its purpose of use or must disclose your personal data to the Company first. The said third party also must not use or disclose your personal data for any purpose outside what was stated to the Company.

The Company may disclose your personal data to companies involved in the analysis of data for the development and improvement of products and/or services, research or statistical purposes, business management, and promotional marketing, such as notifying you of activities, products and/or services.

In the case that the Company uses or discloses personal data that is exempt from prior consent, the Company will record the usage or disclosure in writing or through electronic means.

In the case that the Company sends or transfers personal data overseas, the receiving country or international organization must have adequate security measures for the protection of personal data.

(4) Your rights regarding personal data

Your rights as stated here are rights in accordance with the Personal Data Protection Act B.E. 2562 and other related laws that you should be aware of. Your request to exercise these rights are subject to the law and the Company’s policies.

The right to revoke consent: You have the right to revoke consent at all times throughout the duration that your data is with the company.

The right to access, review, and request copies of your data: You have the right to access and request your data that is within the responsibility of the Company, request that the Company provide you with copies of said data, and request the source of any data that you did not provide consent to.

The right to request correction of your data: You have the right to correct and update your personal data to avoid any misunderstandings.

The right to request deletion or destruction of your data: You have the right to request deletion or destruction of your data or make your personal data anonymous. The Company will delete your personal data within 90 days from the date of service cancellation in the system.

The right to request the Company to ensure that your personal data is correct, updated, and does not cause any misunderstandings.

Exercising your rights above may be limited by related laws, and there are some cases where it is deemed necessary for the Company to deny or not comply to your request, e.g., to abide by the law or judicial orders, the exercise of your right violates the rights or freedom of other individuals, etc.

(5) Contact the Company regarding your personal data

If you have any questions about the collection, usage, or disclosure of personal data, or about exercising your rights in this privacy policy, you may contact the company through the following channels:

  • One & All Thailand
    65/2 Moo 1 Rangsit-Ongkarak Rd. Thanyaburi, Pathumthani 12110
  • Tel: +662 904 1466
  • Email: