BOOKOLA Logo

Privacy Policy for Customers

BOOKOLA Co., Ltd. ("BOOKOLA") places great importance on protecting your personal data. This Privacy Policy explains our practices regarding the collection, use, or disclosure of personal data, as well as the rights of data subjects in accordance with the Personal Data Protection Law.

Collection of Personal Data

We collect personal data directly from you through the following channels:

  • Telephone
  • Email
  • Facebook Login

Types of Personal Data Collected

  • Personal Information: Name, surname, age, date of birth, nationality, ID card number, passport, etc.
  • Contact Information: Address, phone number, email, etc.
  • Account Information: User account, usage history, etc.
  • Identification Documents: Copy of ID card, copy of passport, etc.
  • Transaction and Financial Data: Purchase history, credit card details, bank account, etc.
  • Technical Data: IP address, Cookie ID, website usage history (Activity Log), etc.
  • Other Data: Photos, video recordings, and other data considered personal data under applicable law.

Minors

If you are under 20 years old or legally incompetent, we may need consent from your parent or legal guardian to collect, use, or disclose your personal data. If we learn that we have collected personal data from a minor without parental consent, we will delete such data from our servers.

Storage of Personal Data

We store your personal data in both physical and electronic forms in the following locations:

  • Our company servers located in Thailand
  • Overseas server providers

Processing of Personal Data

We collect, use, or disclose your personal data for the following purposes:

  • To create and manage user accounts
  • To deliver products or services
  • To improve products, services, or user experience
  • For internal administration
  • For after-sales service
  • To gather feedback
  • For payment of products or services
  • To comply with terms and conditions
  • To comply with legal and regulatory requirements

Disclosure of Personal Data

We may disclose your personal data with your consent or as permitted by law in the following cases:

Internal Administration:

We may disclose your data within the company as necessary to improve and develop our products or services.

Service Providers:

We may disclose your data to service providers as necessary for operations such as payment processing, marketing, or product development. These service providers are subject to their own privacy policies.

Business Partners:

We may share limited data with business partners for coordination and communication related to our services.

Retention Period of Personal Data

We will retain your personal data for as long as necessary during your relationship with us or to fulfill the purposes in this policy. If required by law, we may need to retain the data beyond this period. Once the data is no longer necessary, we will delete, destroy, or anonymize it.

Your Rights as a Data Subject

Under the Personal Data Protection Law, you have the following rights:

  • Right to Withdraw Consent: You may withdraw consent at any time.
  • Right to Access: You may request access to and a copy of your personal data.
  • Right to Data Portability: You may request transfer of your personal data in a machine-readable format.
  • Right to Object: You may object to the collection, use, or disclosure of your data under certain circumstances.
  • Right to Erasure/Destruction: You may request the deletion, destruction, or anonymization of your data.
  • Right to Restriction of Processing: You may request the suspension of the use of your data under certain conditions.
  • Right to Rectification: You may request correction of inaccurate or incomplete data.
  • Right to Lodge a Complaint: You may file a complaint with the regulatory authority if you believe your data has been misused.

You may exercise your rights by contacting our Data Protection Officer. We will respond within 30 days of receiving your request. If we deny your request, we will inform you of the reason via email, SMS, phone, or letter.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience and monitor website usage. You can configure your browser to reject cookies, but this may affect website performance. Types of cookies we use:

  • Functionality Cookies: Remember user preferences such as account name, language, and layout.
  • Strictly Necessary Cookies: Essential for service functionality and security.

Data Security Measures

We maintain confidentiality, integrity, and availability of your data by implementing administrative, technical, and physical safeguards, including access control.

Data Breach Notification

If a data breach occurs, we will notify the Personal Data Protection Committee within 72 hours and notify affected individuals if the breach poses a high risk.

Policy Changes

This policy may be updated occasionally. You can find updates on our website. This version was last updated and is effective from July 14, 2025.

Third-Party Website Policies

This Privacy Policy applies only to our website. If you visit other websites via our links, their privacy policies will apply.

Contact Information

Data Controller

BOOKOLA Co., Ltd.

546 Ratchada One Building, 3rd Floor, Room 3-04

Ratchadaphisek Road, Chankasem, Chatuchak, Bangkok 10900

Email: contact@bookola.ai

Website: www.bookola.ai

Phone: (+66) 092-382-5111

Data Protection Officer

Kritsada Linpattarachai

546 Ratchada One Building, 3rd Floor, Room 3-04

Ratchadaphisek Road, Chankasem, Chatuchak, Bangkok 10900

Email: dpo@bookola.ai

Phone: (+66) 092-382-5111