The Privacy Policy of Good App Innovation Company Limited (“Company”) applies to the Company's operations. Regardless of the channels access, whether accessed through the use of the service of the website “https://www.tripdiothailand.com” and “Tripdio” application. This Privacy Policy has explained procedures for collecting, using and disclosing information of visitors or users of the Service (“Users”), including users who have subscribed to the service and users who are not subscribed to the service. In this Privacy Policy (“Policy”) explains in detail: What information does the company collect and what is it used for. Please read this policy carefully because this policy explains how the company collects, uses, discloses and/or transfers the user's personal data in accordance with the personal data protection law of Thailand.

Minor privacy protection policy if you are under 20 or an incompetent person according to the law.

We may collect, use or disclose your personal information by your parents or your guardian's consent or as permitted by law. If we know that your personal information has been collected without the consent of your parents or guardians. We will delete that information from our servers.

Notification of personal data breach

In the event of a breach of your personal data we will notify the Office of the Personal Data Protection Commission within 72 hours of being aware of the incident. Where the infringement has a high risk of affecting your rights and freedoms. We will notify you of violations with remedies through various channels such as website, text message (SMS), email, phone call, letter, etc.

Information collected by the company

If the user is a general account level. The Company may collect information about general personal data such as name, surname, telephone number, gender, date of birth, email address, profile picture, address, and etc. Additionally, text, images, audio, video, logo or content that users import (upload) or distribute through by themselves. This information allows the company to improve its services and can be provided in additional way of uses.

If the user is a guide account level and has a career as a tour guide. The company may collect information about the Tour Guide, such as name, surname, telephone number, gender, nationality, date of birth, email address, profile picture, address, other means of contact, and etc. Additionally, text, images, audio, video, logo, or content that users import (upload) or publish by themselves, nationality, image of the tour guide card, Guide license number, start date of permission to be a tour guide, and end date of permission to be a guide tour in order to identifies verification, account security and keep functional in the work of the Tripdio app. Moreover, we also collect details of bank account information. (Name of the account holder, account number, bank name) in order to receive income through the Tripdio app for guide account level.

If the user is an expert account level. The company may collects information such as name, surname, occupation, telephone number, gender, nationality, date of birth, email, profile picture, address, other means of contact, and etc. Moreover, we also collect text, images, audio, video, logo or content that users import (upload) or publish by themselves, photo of the card ID, ID number, Credit/Debit Card Information and payment history in order to use for identity verification, account security, and functions in the work of the Tripdio app. We also collect details of bank account information. (name of the account holder, account number, bank name), in order to receive income through the Tripdio app for expert account level.

In addition, the Company may collect user information from the use of the service, other organizations or additional sources. This is for the benefit of the company's business including the development and improvement of the Company's service quality.

In the event that the user changes their personal information. The user must notify the company in to update the information to be accurate, up-to-date and complete as possible It is deemed. That the User's personal data controlled by the Company is accurate, up-to-date and complete, and the user waives the right to object or take legal action against the company for the incompleteness of such personal data.

In the event that the user provides personal information of others to the company. The user is obliged to notify that person about the service as well as collecting, using, disclosing and/or transferring information to relevant foreign countries before submitting personal information of such persons to the company. And must obtain the consent of that person or relying on other relevant legal bases as an exception of consent and notify such person of this policy.

Other types of personal data collected

and any other information that is considered personal data in accordance with the Personal Data Protection Act.

Information that the company automatically collects

The company may automatically collect information about users' use of the Service, such as access time, user movements within the service, how long the user has been in the system, Device ID or other device identification number (Unique Identifier), IP address, language information, device name and model, operating system information location, time zone geolocation information, location access information in the foreground and background.

Data use

The company uses information collected from users or information about the user for the use of the services provided to the users and for the purposes of the user and other purposes that are necessary under the law as following:

- to serve or perform the duties under the contract with the user. to respond to user requests, communicate with users perform customer service and provide technical assistance.

- to verify the identity of the user and prevent spam or unauthorized actions or illegal.

- To prevent, detect, avoid and detect fraud security breach or other actions that may be prohibited or illegal.

- To take the necessary actions to fulfill the obligations of the company to the regulatory body and tax authority law enforcement or legal obligations of the company.

- to take necessary actions for the legitimate interests of the company or another person or another juristic person.

- To achieve the objectives related to the preparation of historical documents for the public benefit or for research purposes or statistics with adequate and appropriate security measures or information about the user to enable their benefit from the use of the service as the user chooses to give their consent as follows:

- To improve the company's services and respond to the needs and user's satisfaction including for research-related purposes and other analysis by studying and understanding the accessibility and use of the Company's services.

- To offer and provide products, services, discounts or promotions from the Company and/or affiliated companies and the company's partners.

- To analyze, market and advertise according to the target group as well as modernizing the service and promotional offers.

If the user does not provide their information to the company or providing inaccurate complete information. The Company may not be able to facilitate communicate or provide some services of the company to the user.

Using background location data

Additionally, the features of Tripdio app “Start the Tour” and “Travel Program” may request background location access which are necessary for the app to work and for the benefit of users. Tripdio collects location data to enable the “Start the Tour” and “Tour Program” features even if the app is closed or inactive. If the user is denied permission to access the location in the background This will result in incomplete functionality of the app and may prevent users from getting the most out of the app.

sharing of information

The company may disclose and/or transfer user information to the following persons located in Thailand and/or abroad which those countries may have or lack of adequate data protection measures similar to Thailand's data protection measures.

1. Affiliates and subsidiaries

The company may disclose information collected to its affiliates and subsidiaries for purposes under this policy.

2. Service provider

The company may disclose the information it collects to its business operators or business owners, service providers, contractual contractors. or agents acting on behalf of the company.

3. Transfer or merger

The company may transfer the collected information to other companies in connection with or during negotiations for a merger, sale of assets, borrowing money or an entire acquisition or any part in the company's business.

4. Third parties and business partners

The company may share information with its partners who are third parties. This includes advertisers and researchers.

5. Proceedings with Legal Procedures

The company may disclose information to comply with the law, court proceedings, court orders, subpoenas, or other legal proceedings.

6. PROTECTING THE COMPANY AND OTHER PEOPLE

The company may disclose information if the company believes it is necessary to investigate, prevent or address illegal activities or it is suspected to be fraudulent. A situation that could threaten the safety of any person violation of the terms and conditions of use of the company's services or this Privacy Policy or as evidence in litigation with which the Company is involved.

7. General information or non-identifiable information

The company may share overview information or non-personally identifiable information about users to third parties for marketing, advertising, research or similar purposes.

8. Other users

The company may disclose personal information of users to other users accessible in the case of being part of the Company's services.

Data retention and retention periods

In general, the company will collect user information as necessary to perform the Company's services and/or obligations. To the extent reasonably necessary for the purposes described in this Privacy Policy or as required by relevant personal data protection laws The Company may keep information that the Company has reason to believe that it may be a dispute/litigation. As permitted by applicable law, the company will use its best efforts to provide security measures for the user's personal information. In order to prevent the loss, access, use, alteration, alteration or unauthorized disclosure of the user's personal information. The company will delete or destroy the personal information or make it non-personally identifiable information of the user when it is no longer necessary.

Cookies

Cookies are text files that are stored on a user's computer when they visit a website. This text file collects information that can be read by the website when the website is subsequently revisited. Some of these cookies are essential. Otherwise the website will not work perfectly. Other types of cookies also provide convenience to website's visitors. This is because the username is remembered in a secure way. It also remembers the language used. For example, cookies prevent users from entering the same information each time they visit a website.

The company collects information about every visitor's visit to the website through cookies or similar technologies and the company will use cookies for the benefit of improving efficiency in accessing the company's services via the internet including improving the efficiency of using the company's services on the internet It will be used for the following cases:

- To help the company maintain the variables used for data collection (session) when the User uses the Service and/or any other service, enabling the user to continually sign in to the user's account on the company's website to improve security of the company's system to be better.

- to collect user preferences and provide customized services for users.

- To study user behavior on the website to be developed, to be easy to use faster and more efficient.

The types of cookies that the company uses and how to use them are included, but are not limited to following these items:

Strictly Necessary Cookies: These cookies are essential to the operation of the website. This includes cookies that enable users to access information and use the company's website securely.

Functional cookies of the website (Functionality Cookies): These cookies are used to recognize the user when the user returns to the website. This allows companies to customize content for users. It will adapt the Company's website to meet the user needs as well as remembering user settings such as the language used, etc.

Website analytics/measurement cookies (Analytical/Performance CookiesThese cookies allow the company to remember and count the number of visitors to the website, as well as to help the company know the behavior of visiting the website. To improve the functionality of the website to be better quality and more appropriateness. It also collects statistical data on how users access and visit the website. This will improve the functionality of the website by allowing users to easily find what they are looking for and help companies understand the interests of users and measure the effectiveness of the company's advertising.

Advertising Cookies: These cookies remember the user's preferences in accessing the website and use it as a basis for personalizing the website pages in order to offer the most suitable advertisements to users as possible, for example, by choosing to display advertisements for products of interest to users. Preventing or limiting the number of times users will see an ad's web page repeatedly and to help measure the effectiveness of user ads.

In most web browsers, the user can control or set whether to accept cookies or not or limit your ability to set cookies. Users may not be able to take full advantage of the website or access to all functions. This may limit the overall user experience.

Notifications

The company may send a notification to the user's device which users can set to open or they can turn off receiving these messages at any time by setting a notification on the user's device or by changing the settings on the service.

Data Subject Rights

Subject to the relevant laws. Users may have the following rights to their personal data:

- The users have the right to withdraw their consent to the processing of personal data for which the user has given their consent to the company. For the duration of the user's personal data with the company. However, if the user withdraws the user's consent. The company may not be able to facilitate communicate or may not provide some of the services to users.

- The users have the right to access their personal data and request the company to make a copy of such personal data for the user.

- The users have the right to request the company to correct inaccurate information such as not up to date or adding incomplete information.

- The user has the right to request the company delete or destroy or make the user's personal information anonymous in some cases according to the relevant law.

- The user has the right to request the company to provide the user's personal information or send that user's personal information to another organization.

- The user has the right to object or inhibit the company from collecting, using or disclosing personal information of users in certain circumstances according to the relevant law.

- The user has the right to lodge a complaint to the competent government authority if it believes that the company has not complied with the law.

Users may exercise these rights by contacting the company as detailed in the last paragraph of this document.

Privacy Policy of Other Websites

This Privacy Policy It is used only for the provision of the company's services and the use of the Company's website. If a user has clicked a link and bring to another website or access and use other websites Instead, users are subject to and comply with the privacy policy displayed on that website.

Changes to the Privacy Policy

The company will review the Privacy Policy on a regular basis to comply with applicable practices laws and regulations. The company will notify users by updating information on the service of the company as soon as possible when it necessary. The company will require the user's consent for any changes.

Contact

If the user wants to exercise any rights with the relevant laws as stated above of have questions about the privacy policy of the company's services, have any suggestions, or want to make a complaint about this policy. Please contact or inform the Company's Data Protection Officer at Tripdio.biz@gmail.com or contacting the company directly.

Data Controller

Good App Innovation Company Limited

168/15 Tambon Sai Ma, Amphoe Mueang Nonthaburi Nonthaburi 11000

Email: Tripdio.biz@gmail.com

Website: www.tripdiothailand.com

Phone number: 0622599524

Personal Data Protection Officer

Thipmanee Kwankonchim

168/15 Sai Ma Muang Nonthaburi Nonthaburi 11000

Email: poomtipmanee@gmail.com

Phone number: 0979656509