Privacy policy

1. Scope

This policy covers the personal data of website users, including website visits, contact forms, information requests, newsletter subscriptions, event registrations, job applications, contact by email, phone or social media, and third-party content embedded on the website. Some products may have their own privacy notices.

2. Data controller

Robowealth Mutual Fund Brokerage Securities Co., Ltd., 1-7 Zuellig House, Unit 1A, 6th Floor, Silom, Bang Rak, Bangkok 10500

3. Sources of data

• Directly from you, such as forms, emails and job applications
• Automatically, through cookies and usage logs
• From group companies, partners, event organisers, recruiters, public sources and government agencies

4. Data we collect

The Company does not intend to collect sensitive data and asks you not to send such data unless necessary.

• Identity data, such as name, age and photograph
• Contact data and business data
• Job application data and the content of your communications with the Company
• Technical data, such as IP address, device, browser and website usage
• Marketing preferences

5. Purposes and legal bases

• Operating and securing the website
• Answering enquiries and managing events
• Considering job applications
• Marketing, based on consent
• Analysing website usage: visit statistics without cookies, based on legitimate interest, and analysis that uses cookies, based on consent
• Complying with the law and the requirements of regulators

6. Disclosure of data

The Company may disclose data to group companies, service providers (such as hosting, CRM, analytics, security, events, human resources and professional advisers), business partners where necessary, government agencies and regulators, and parties involved in a business restructuring.

7. Transfers abroad

The Company transfers data abroad only where the destination country has adequate data protection standards or appropriate safeguards are in place.

8. Retention period

Retention periods vary by type of data: for example, up to 3 years for enquiries and events, up to 2 years for unsuccessful job applicants, up to 10 years for contract-related data, and until consent is withdrawn for marketing data. When the data is no longer needed, the Company deletes it or makes it non-identifiable.

9. Security

The Company has measures such as access control, authentication, encryption where appropriate, data backups, audits and staff confidentiality obligations. However, the security of data transmitted over the internet cannot be fully guaranteed.

10. Your rights

You may withdraw your consent at any time, and you have the following rights under the personal data protection law:

• To access and obtain a copy of your data
• To have your data corrected
• To receive or transfer your data
• To object to processing
• To have your data deleted or its use suspended
• To lodge a complaint with the Personal Data Protection Committee

11. Other provisions

• Minors should obtain the consent of a parent or guardian
• Anyone who provides another person's data must have the right to provide it
• The Company does not control third-party websites
• The Company may amend this policy and will show the date it was last updated