Data Protection (PDPA)

1. Overview

BIRTHEORY is committed to complying with the Thailand Personal Data Protection Act B.E. 2562 (2019) ("PDPA"). This policy outlines how we handle your personal data in accordance with PDPA requirements.

2. Data Controller

BIRTHEORY acts as the Data Controller for all personal data collected through our services.

Contact: BIRTHEORY
18/250 The Terrace, Soi Ramintra 65, Ramintra Road, Bangkhen, Bangkok 10230, Thailand
Phone: +66(0)95-142-9595

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: Your explicit consent when creating an account and providing birth data.
• Contract: Necessary for performing services you have purchased.
• Legitimate Interest: Improving our services and ensuring security.
• Legal Obligation: Compliance with applicable laws and regulations.

4. Sensitive Personal Data

Birth data (date, time, place of birth) and blood type may be considered sensitive personal data under PDPA. We collect this data only with your explicit consent and use it solely for the purpose of generating your personalized BirthCode and LifeCode analysis.

5. Your Rights Under PDPA

As a data subject, you have the following rights:

• Right to Access: Request access to your personal data.
• Right to Rectification: Request correction of inaccurate data.
• Right to Erasure: Request deletion of your personal data.
• Right to Restrict Processing: Limit how we use your data.
• Right to Data Portability: Receive your data in a structured format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent at any time.

6. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Upon account deletion, your personal data will be securely erased within 30 days, except where retention is required by law.

7. Cross-Border Data Transfer

Your data may be processed on servers located outside Thailand. In such cases, we ensure adequate data protection measures are in place in compliance with PDPA requirements.

8. Data Breach Notification

In the event of a personal data breach that is likely to cause high risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

9. Contact & Complaints

To exercise your rights or file a complaint regarding your personal data, please contact us at:

BIRTHEORY — Data Protection
Phone: +66(0)95-142-9595
WhatsApp: @BIRTHEORY

You also have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.