Privacy policy


Privacy Policy

We are updating our Privacy Policy as a part of our GDPR readiness efforts. The level of privacy protection for your information is not changing. Our new Privacy Policy will take effect on May 25, 2021.

1. Introduction

This data protection policy explains how Investeast processes personal data when you visit our websites or disclose personal data to us by other means. Changes to this data protection policy will be published immediately on our website at www.investeast.co.th

Privacy protection and personal data security are important matters to us and ones that we take into account in all our processes at all times. As a result, we always treat your personal data confidentially and in compliance with statutory provisions.

We also respect the Children’s Online Privacy Protection Act. Our websites, mobile apps and services are not intended for children under the age of 13. If you believe that we are processing the data of a child under the age of 13, please inform us.

2. Our principles for processing personal data

2.1 How we process personal data

If we process information about you, we will inform you of this data processing, its legal basis, transmission of data to third parties, duration of data storage and your rights. We will do this in comprehensible language in advance or as quickly as possible. We will never process your personal data for any purposes except those for which we collected it from you or for which you have subsequently given your consent. In addition, we will take appropriate measures to verify the accuracy and completeness of data and will not sell or transmit your personal data to third parties by any means without your consent. Our service providers, which help us to operate our website and perform our services and with which we have concluded non-disclosure agreements, are an exception to this rule.

2.2 How we secure your personal data

We take appropriate technical and organizational security precautions to protect your personal data against manipulation, loss, destruction and unauthorized access or disclosure. Despite these efforts, we cannot guarantee that your personal data is secure, and thus such data is transmitted at your own risk.

2.4 Duration of personal data processing

We process your personal data only for as long as we need it for the stated purpose. If we process your personal data on the basis of your consent, we will stop processing it immediately as soon as you revoke your consent. In other cases, we will erase your personal data after 2 years.

3. Personal data processed by us

3.1 Your use of our websites

We process data related to your use of our websites (such as your IP address, location, browser, operating system, referrer URL, the duration of your visit, pages you open, and files you download, links you click, search terms, navigation paths and information on the time of day, frequency and patterns of website use). If your visit is the result of online advertising (such as banner ads, search engine ads, etc.), we will record which element motivated you to visit the website. In addition, our websites use small text files that are saved to your computer (‘cookies’). You can choose your cookie preferences in ‘Show details’:

Level 1: At this level, only those cookies that are absolutely necessary to run the website (such as for your shopping basket) are enabled. This level also uses session cookies for anonymized access, which are deleted when you close your web browser. This level is the default setting.

Level 2: At this level, we store cookies permanently on your computer so that your preferences are met when you next visit our websites.

Level 3: At this level, you can give us permission to use your data for statistics and marketing purposes.

We process your personal data for the exclusive purpose of monitoring, securing, improving and adapting our websites. This data processing takes place on the basis of our legitimate interest in operating our websites and offering our services, and on the basis of your consent, which you can revoke at any time.

3.2 Your email and other correspondence with us

If you interact with us on our website or by another means (such as a contact form, email, creation of a user account or visiting our office), we require your email address and in some cases other additional contact data, which we store on our servers. We use this data and its associated metadata to process your request, for subsequent correspondence with you and for general customer service. This data will be passed on or published only with your consent. We assume this if, for example, you leave a message in the guestbook on our websites or a comment on one of the blog posts. This processing of personal data is based on statutory authorization of contract execution and fulfillment of legal obligations, or on your consent, which you can revoke at any time.

4. Personal data processed by our service providers

To provide our websites and services, we work with service providers that sometimes use session cookies to fulfill their tasks. Session cookies store information temporarily during your website visit. This data is deleted when you close your web browser. In addition, some service providers process personal data on our behalf:

  • Newsletter mailings : To send newsletters, we use Mailchimp from Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, US. Your email address will be stored on its servers and used exclusively to send newsletters. Information on Mailchimp’s data protection policy can be found here.

5. Personal data processed by third parties

Our websites may contain content from third parties, some of which use cookies and other active components (‘plug-ins’). These items are activated when you select one of the graphics concerned on our websites. With activation, you establish a link to the website of the third party and consent to its data processing. We have no influence over the relevant data processing. Information on the purpose and scope of such data processing and your rights can be found in the data protection policy of the third party:

  • Facebook : Websites contain plug-ins from Facebook Inc., Palo Alto, CA, US. They feature the Facebook logo or say ‘Facebook’, ‘Like’ or ‘Share’.
  • YouTube : Websites contain plug-ins from YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, US, which enable you to play audio and video files.

6. Warranty and liability information

We exercise great care when creating our website. However, we cannot guarantee that the content is accurate and correct, and we exclude any warranty or liability relating to the use of our website. In addition, our website contain links to third party websites. When you click such a link, we no longer have any influence on the processing of personal data by these third parties, and we exclude any warranty or liability relating to this. The current data protection policy does not apply to such linked websites.

7. Your rights and contact information

We are happy to provide you with information on whether and which personal data of yours we process. In addition, you can assert your right to correct, block or erase your personal data within the scope of applicable statutory provisions. Please direct any queries in relation to data protection to the following email address: info@investeast.co.th

We will review your query and then contact you. If your issue cannot be settled in this manner, you can submit a complaint to the responsible data protection authority at any time. More information on this can be found on the website of your data protection authority.