Privacy Policy

1. Data controller

The data controller for the purposes of this policy is Life Development Co., Ltd. (the mpark Maharat project), 21 Chang Phueak Road, Nai Mueang, Mueang Nakhon Ratchasima, Nakhon Ratchasima 30000, Thailand, email marketing.mparkkorat@gmail.com.

If you have questions about how we process personal data, or wish to exercise your rights, please contact us using the details above.

2. Personal data we collect

We collect only the personal data necessary for the purposes set out in this policy.

a. Data you give us directly, through the retail space registration form:

• first name and last name;
• contact telephone number;
• current occupation;
• a description of the goods or services you offer;
• the type of business you wish to invest in;
• a record of your consent, including the date and time it was given.

b. Data collected automatically when you visit the website:

• your IP address, used for security and abuse prevention;
• browser type, operating system and device characteristics;
• pages visited, time spent and referral source (collected via Google Analytics only where you have consented);
• your cookie consent choices and your language preference.

We do not intend to collect sensitive personal data as defined in section 26 of the PDPA — such as racial or ethnic origin, religious beliefs, criminal records or health data. Please do not include such information in the free-text fields of our form.

This website is not directed at minors, and we do not knowingly collect personal data from anyone under the age of 20 without the consent of a parent or guardian.

3. Purposes and legal bases for processing

We will not use your data for any purpose incompatible with those stated above without first informing you and, where required, obtaining fresh consent. We do not sell your personal data to anyone.

4. Disclosure to third parties

We disclose personal data only as necessary to the data processors that provide our infrastructure, under agreements that impose confidentiality and security obligations on them:

We may also disclose data where required by law, a court order, or a lawful request from a competent authority.

5. International transfers

Some of our providers operate servers outside Thailand. Any transfer abroad is made in accordance with section 28 of the PDPA, with appropriate and legally enforceable safeguards in place, such as standard contractual clauses for personal data protection.

6. How long we keep your data

• Registration of interest submissions: no longer than 2 years from the date you submit the form, or until you withdraw consent, whichever comes first.
• If you go on to sign a lease with the project, the related data is retained for the period required by accounting and tax law — generally no more than 10 years.
• Cookie consent records: 12 months, or until you change your settings.
• Google Analytics statistics: for the retention period configured in our Analytics account, which does not exceed 14 months.

At the end of these periods we delete, destroy or anonymise the data so that it can no longer identify you.

7. Security measures

We maintain appropriate technical and organisational security measures to protect personal data against loss, unauthorised access, use, alteration or disclosure.

• All traffic is encrypted in transit using HTTPS/TLS across the whole site.
• Form submissions are verified as human using Cloudflare Turnstile, and all input is validated both in the browser and again on the server.
• Access to submitted data is limited to staff who need it to do their job.
• Security measures are reviewed whenever the system changes significantly.

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Office of the Personal Data Protection Committee within 72 hours of becoming aware of it, so far as practicable, and will notify you directly where the breach presents a high risk.

8. Your rights as a data subject

Subject to the conditions set out in law, you have the right to:

• access your personal data and obtain a copy of it (s.30);
• have your data transmitted to another data controller (s.31);
• object to the collection, use or disclosure of your data (s.32);
• request erasure, destruction or anonymisation of your data (s.33);
• request that use of your data be temporarily suspended (s.34);
• have inaccurate, out-of-date or misleading data corrected (s.35);
• withdraw your consent at any time, without affecting the lawfulness of processing already carried out (s.19);
• lodge a complaint with the Personal Data Protection Committee if you believe processing is unlawful.

To exercise any of these rights, email us at marketing.mparkkorat@gmail.com. We will consider your request and respond within 30 days of receiving it. We may ask you to verify your identity first, to avoid disclosing data to someone not entitled to it. Exercising your rights is free of charge, unless a request is manifestly unfounded or excessively repetitive.

9. Cookies

This website uses cookies to function, to remember your preferences and to analyse usage. Each category, and how to manage your consent, is described in the Cookie Policy. You can change your choices at any time through the “Cookie settings” link in the footer of every page.

10. Changes to this policy

We may update this policy from time to time to reflect changes in the law or in our services. The updated policy is published on this page with a revised date. Where a change is significant, we will notify you through an appropriate channel.

11. Contact us

Life Development Co., Ltd. — 21 Chang Phueak Road, Nai Mueang, Mueang Nakhon Ratchasima, Nakhon Ratchasima 30000, Thailand — email marketing.mparkkorat@gmail.com

If you are not satisfied with our response, you have the right to complain to the Office of the Personal Data Protection Committee (PDPC), Ministry of Digital Economy and Society.