LoginRegister

Privacy Policy

1. Introduction

This Privacy Policy (the “Policy”) is issued by Zimpligital Co., Ltd. (the “Company”, “we”, “us”, or “ZimpleOmni”) to explain how we collect, use, disclose, transfer, and retain personal data of users, customers, contact persons, and other individuals in connection with the use of the ZimpleOmni platform and services, in accordance with the Personal Data Protection Act B.E. 2562 (2019) (“PDPA”).

Depending on the circumstances, the Company may act as a Data Controller with respect to personal data relating to service registration, billing, account management, and customer support activities. The Company may also act as a Data Processor in relation to personal data uploaded, stored, or otherwise processed through the ZimpleOmni platform on behalf of and under the instructions of its customers.

2. Personal Data Collected

The Company collects and processes personal data only to the extent necessary and appropriate for providing services and carrying out related business operations, subject to applicable laws and regulations.

2.1 Identity and Contact Information

  • Full name
  • Telephone number
  • Email address
  • User account name or username
  • Any other identifying information voluntarily disclosed during communications or interactions with us

2.2 Communication Data

  • Messages, inquiries, comments, feedback, or other information submitted through the ZimpleOmni platform
  • Documents, images, videos, and other files uploaded by users
  • Information contained within such documents, files, or attachments

2.3 Technical and Usage Data

We may collect technical and usage information relating to the use of the ZimpleOmni platform, including:

  • IP address
  • Device type and operating system
  • Browser type and version
  • Date, time, and duration of usage
  • System log files
  • Chat logs and records of interactions with the ZimpleOmni platform

3. Purposes of Processing Personal Data

The Company collects and processes personal data only as necessary and in accordance with applicable laws for the following purposes:

  • To register and manage user accounts
  • To provide the ZimpleOmni platform and its functionalities
  • To provide technical support and respond to inquiries
  • To process payments, issue invoices, and administer subscriptions and service plans
  • To analyze, improve, and enhance the quality, efficiency, and performance of our services
  • To prevent fraud, unauthorized activities, unlawful conduct, or violations of our terms and conditions
  • To comply with applicable laws, regulations, court orders, and lawful requests from governmental authorities

4. Legal Bases for Processing Personal Data

The Company processes personal data on one or more of the following legal bases:

  • Performance of a Contract
  • Compliance with Legal Obligations
  • Legitimate Interests
  • Consent
  • Establishment, Exercise, or Defense of Legal Claims

5. Disclosure of Personal Data to Third Parties

The Company will not sell, rent, or otherwise disclose personal data to unrelated third parties except where permitted by law or in the following circumstances:

  • Where the data subject has provided consent
  • Where disclosure is required or permitted by applicable law

The Company may disclose personal data to the following categories of recipients:

  • Cloud infrastructure service providers
  • Artificial Intelligence (“AI”) or Machine Learning service providers, where users choose to utilize AI-powered features of the platform
  • Authentication service providers
  • Payment service providers
  • Customer support service providers
  • Legal advisors, auditors, and professional consultants
  • Government authorities, regulators, or other public bodies having lawful authority

Where users elect to use AI-related functionalities available through the ZimpleOmni platform, the Company may transmit information entered by users to third-party AI service providers for the purpose of processing requests and generating outputs requested by users. The Company shall implement appropriate safeguards and protective measures to ensure that such processing is conducted in compliance with applicable data protection laws.

6. Cross-Border Transfer of Personal Data

The Company may transfer personal data to cloud service providers, infrastructure providers, technology vendors, or other service providers located outside Thailand. Where such international transfers occur, the Company shall implement appropriate safeguards and protection measures in accordance with the PDPA and applicable legal requirements.

7. Retention Period of Personal Data

The Company will retain personal data only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal obligations, or for any other period required or permitted by applicable law. When personal data is no longer necessary for such purposes, the Company will securely delete, destroy, anonymize, or otherwise render such personal data incapable of identifying an individual, unless retention is required by law.

8. Data Security Measures

The Company implements appropriate technical and organizational security measures to protect personal data against accidental or unlawful loss, destruction, alteration, unauthorized access, use, disclosure, or other unlawful processing. Such measures may include data encryption, access control mechanisms, system monitoring and audit procedures, network security controls, and other industry-standard security measures.

Payments for the Company's services are processed through independent third-party payment service providers that maintain applicable security standards. The Company does not store users’ credit card numbers or payment card information within its systems.

9. Cookies and Similar Technologies

Cookies are small data files placed on a user’s device by a website through a web browser to facilitate website functionality, improve user experience, and enable analysis of visitor behavior and platform performance. The Company uses cookies and similar technologies as described in its Cookie Policy. Users may manage their cookie preferences through the Company's Cookie Banner or Cookie Preference Center. Please note that disabling certain cookies may affect the availability or functionality of some features of the platform.

10. Rights of Data Subjects

Subject to the PDPA and applicable laws, data subjects have the following rights:

  • The right to access personal data
  • The right to obtain a copy of personal data
  • The right to rectify inaccurate or incomplete personal data
  • The right to request erasure of personal data
  • The right to restrict processing
  • The right to object to processing
  • The right to data portability
  • The right to withdraw consent
  • The right to lodge a complaint with the Personal Data Protection Committee or other competent authority

11. User Account Deletion

Users may request deletion of their accounts at any time by submitting a request to contact@zimplesolution.ai. Upon receiving a valid request, the Company will delete, anonymize, or otherwise de-identify personal data associated with the relevant account as appropriate. However, the Company may retain certain information where necessary to comply with legal obligations, fulfill contractual obligations, establish, exercise, or defend legal claims, or protect the Company’s legitimate rights and interests.

12. Amendments to this Privacy Policy

The Company may review and update this Privacy Policy from time to time to reflect changes in our services, business operations, legal requirements, or regulatory obligations. Any revised version of this Privacy Policy will be published on the Company's website and/or communicated through other appropriate channels. Users are encouraged to review this Privacy Policy periodically to stay informed about how their personal data is protected and processed. Continued use of the Company's services following the publication of any updated Privacy Policy shall constitute acknowledgment of such updates to the extent permitted by law.

13. Contact Information

If you have any questions, concerns, requests, or wish to exercise your rights relating to your personal data, please contact our Data Protection Officer (“DPO”) at:

Zimpligital Co., Ltd.
Address: 77/3-4 Soi Ram Inthra 40, Nuanchan Subdistrict, Bueng Kum District, Bangkok 10230, Thailand
Email: contact@zimpligital.com
Telephone: +66 61 646 5428