EPICENTER COMPANY LIMITED
PRIVACY POLICY
Thailand Personal Data Protection Act (PDPA) B.E. 2562 • 4 June 2026

 Data Controller:

 Epicenter Company Limited

 Registration No. (DBD):

 0835568022448

 Address:

 86/3 Moo 6, Kathu Sub-district, Kathu District, Phuket, 83120

 E-mail:

 epicenterthai@gmail.com

 Phone:

 +66 82 747 42 12

 Website:

 https://phuketcar.rent


1. Categories of Personal Data
We process only the data necessary to fulfil our obligations to you.

 Data Category

 Specific Data Elements

 Identification Data

 Full name, passport number and copy, driver's licence.

 Contact Data

 Phone number, e-mail, Telegram ID, WhatsApp number.

 Booking Data

 Rental dates, vehicle model, delivery/return address and time.

 User-Generated Content

 Reviews, ratings, comments, photos — voluntary.

 Technical Data

 IP address, browser type, cookie data (see Cookie Policy).


2. Legal Bases and Purposes of Processing

 Legal Basis (PDPA)

 Purposes and Notes

 Contract Performance — Section 24(3)

 Booking requests, rental agreement, customer support. No separate consent required.

 Legal Obligation — Section 24(1)

 Thai tax law compliance (up to 5 years), law enforcement requests.

 Legitimate Interest — Section 24(5)

 Service improvement, analytics. LIA conducted. Right to opt-out at any time.

 Consent — Section 24(2)

 Publishing reviews and media on social networks; marketing communications. Withdrawable at any time.


3. Disclosure to Third Parties

 Platform

 Legal Status and Safeguards

 WhatsApp (Meta)

 Data Processor under Meta Business Data Processing Terms + SCCs.

 Telegram

 Independent Data Controller. Data processed under Telegram's own Privacy Policy: https://telegram.org/privacy

 CRM Systems

 Data Processors under Data Processing Agreements (DPAs).

 Insurers / Law enforcement

 Only for contract performance or official Thai authority requests.


4. Data Retention Periods

 Data Category

 Retention Period

 Contract/Booking Data

 10 years (CCC B.E. 2468)

 Tax Documents

 5 years (Revenue Code)

 Identity Document Copies

 Up to 3 years after contract completion

 Marketing Data

 Until consent is withdrawn

 Technical Logs/Cookies

 No longer than 1 year


5. Your Rights under PDPA B.E. 2562
• Right to withdraw consent at any time (without affecting the lawfulness of prior processing).
• Right to access your data and receive a copy.
• Right to rectification of inaccurate data.
• Right to erasure when processing purposes are achieved.
• Right to restrict processing or to object (including against legitimate interest processing).
• Right to data portability.
• Right to lodge a complaint with the PDPC: https://www.pdpc.or.th

To exercise your rights contact: epicenterthai@gmail.com. We respond within 30 days.

6. Cookies
This Website uses cookies. Details: https://phuketcar.rent/cookies

7. Changes to this Policy
We will notify Users of material changes at least 14 days in advance.



Epicenter Company Limited   •   epicenterthai@gmail.com   •   +66 82 747 42 12   •   phuketcar.rent