Email Address *
Password *
New to KANEKOJI? Sign up
Privacy Policy
KANEKOJI Group Co., Ltd. (“KANEKOJI”) recognizes the importance of your personal data and other information about you (collectively referred to as “Data”). To ensure that you can be confident that KANEKOJI is transparent and responsible in collecting, using, or disclosing your data in accordance with the Personal Data Protection Act B.E. 2562 (“PDPA”) and other relevant laws, this Privacy Policy (“Policy”) has been prepared to explain to you the details of the collection, use, or disclosure (collectively referred to as “Processing”) of personal data that is carried out by KANEKOJI, including its officials and related persons acting on or on behalf of KANEKOJI. The Policy contains the following substance:
1. Scope of Application of the Policy
This Policy applies to the personal data of individuals who have relationships with the Company, both present and future, which are processed by the Company, its officials, contracted employees, business units or other entities operated by KANEKOJI, and including contractors or third parties that process personal data on or on behalf of KANEKOJI (“Data Processors”) under various products and services, such as websites, systems, applications, documents, or other services that are controlled by KANEKOJI (collectively referred to as “Services”).
Individuals who have relationships with KANEKOJI in accordance with the first paragraph include:
  1. Individuals who are customers of KANEKOJI
  2. Officers, employees, or workers
  3. Individuals who are partners or service provider
  4. Directors, authorized representatives, representatives, agents, shareholders, employees, or other persons with similar relationships of legal entities that have relationships with KANEKOJI
  5. Users of KANEKOJI products or services
  6. Visitors or users of the website www.KANEKOJI.com, including systems, applications, devices, or other communication channels that are controlled by KANEKOJI
  7. Other individuals whose personal data is collected by KANEKOJI, such as job applicants, families of officers, guarantors, beneficiaries of insurance policies, etc.
(1) to (6) are collectively referred to as “You”
In addition to this Policy, KANEKOJI may establish a Privacy Notice (“Notice”) for KANEKOJI products or services to clarify to the data subject who is a service user about the personal data that is processed, the purpose and lawful basis for the processing, the period for which personal data is retained, and the data subject’s rights in that specific product or service.
In the event of a conflict in substance between the Privacy Notice and this Policy, the Privacy Notice of that service shall prevail.
2. Definitions
  • KANEKOJI means KANEKOJI Group Co., Ltd.
  • Personal data means any information relating to an identifiable natural person, whether directly or indirectly, but does not include data of a deceased person in particular.
  • Sensitive personal data means personal data as prescribed in Section 26 of the Personal Data Protection Act B.E. 2562 (PDPA), which includes data on race, ethnicity, political opinions, religious beliefs, or philosophical beliefs, sexual orientation, criminal history, health data, disability, union data, genetic data, biometric data, or other data that affects the data subject in a similar manner as prescribed by the Personal Data Protection Committee.
  • Processing of personal data means any operation or set of operations performed on personal data, such as collection, recording, copying, organizing, storing, updating, modifying, using, retrieving, disclosing, transmitting, publishing, transferring, combining, deleting, or destroying.
  • Data subject means the natural person who is the owner of the personal data that KANEKOJI collects, uses, or discloses.
  • Data controller means a natural or legal person who has the authority to decide on the collection, use, or disclosure of personal data.
3. Sources of personal data collected by KANEKOJI
KANEKOJI collects or obtains various types of personal data from the following sources:
  1. Personal data that KANEKOJI collects directly from data subjects through various service channels, such as registration, application, job application, signing contracts, documents, surveys, or use of products, services, or other service channels controlled by KANEKOJI, or when data subjects communicate with KANEKOJI at its offices or through other contact channels controlled by KANEKOJI.
  2. Data that KANEKOJI collects from data subjects' use of websites, products, or other services under a contract or a mission, such as tracking the usage behavior of KANEKOJI's websites, products, or services using cookies or from software on data subjects' devices.
  3. Personal data that KANEKOJI collects from sources other than data subjects, where such sources have the authority, a legitimate reason, or have obtained consent from the data subjects to disclose the data to KANEKOJI, such as linking the digital services of government agencies to provide seamless public services to data subjects themselves, receiving personal data from other government agencies as KANEKOJI is mandated to operate a central data exchange center to support government agencies in providing public services through digital systems, and from the necessity to provide services under a contract that may involve the exchange of personal data with counterparties.
  4. Specific requirements applicable to KANEKOJI Store
This section specifies the specific requirements that apply to KANEKOJI's processing of data that is conducted through KANEKOJI Store only.
  1. CCTV We may use CCTV when you visit KANEKOJI Store.
  2. Other activities Some activities may be conducted at the KANEKOJI Store when you visit the KANEKOJI Store (such as facial recognition, measurement and analysis of customer movements within the store, COVID-19 prevention). Further announcements and specific announcements will be made at the KANEKOJI Store
If data subjects refuse to provide data that is necessary for KANEKOJI's services, KANEKOJI may not be able to provide such services to such data subjects in whole or in part.
4. Legal basis for collecting personal data
KANEKOJI considers the legal basis for collecting your personal data in a manner that is appropriate and in the context of the services provided. The legal bases for collecting personal data that KANEKOJI uses include:
Legal basis for collecting data Details
For the purpose of carrying out a public task or using state power granted to KANEKOJI In order for KANEKOJI to exercise state power and carry out public tasks in accordance with its mission, as prescribed by law, such as:
- The Royal Decree establishing the Digital Government Development Agency (Public Organization) B.E. 2561
- The Public Administration and Digital Government Service Act B.E. 2562
- Relevant rules, regulations, orders, and cabinet resolutions
For the purpose of fulfilling legal obligations In order for KANEKOJI to comply with the laws that govern KANEKOJI, such as:
- Collecting computer traffic data under the Computer Crime Act B.E. 2560
- The Public Information Act B.E. 2540
- The Public Organization Act B.E. 2542
- Tax laws
- Carrying out court orders, etc.
For legitimate interests For the legitimate interests of KANEKOJI and other individuals, where such interests are no less important than the fundamental rights of the data subject in his or her personal data, such as for the security of KANEKOJI's premises or the processing of personal data for KANEKOJI's internal affairs, etc.
For the prevention or mitigation of harm to the life, body, or health of an individual This is a legal basis for collecting personal data under the Personal Data Protection Act (PDPA) of Thailand. This legal basis allows a company or organization to collect personal data that is necessary to prevent or mitigate harm to the life, body, or health of an individual.
For example, a company may collect personal data to track the spread of a disease or to provide medical care to an injured person.
For contractual obligations In order for KANEKOJI to perform its contractual obligations or to take necessary actions to enter into a contract with you, such as employment, service contracts, memorandums of understanding, or other types of contracts, etc.
Your consent In order to collect, use, or disclose your personal data, KANEKOJI Company needs your consent. We will notify you of the purpose of collecting, using, or disclosing your personal data before requesting your consent. For example, we may need your consent to collect sensitive personal data for a purpose that is not in accordance with the exceptions in Section 24 or 26 of the Personal Data Protection Act B.E. 2562, or to promote or market products and services of our business partners to you.
In cases where KANEKOJI Company needs to collect your personal data to fulfill a contract, perform a legal obligation, or for the necessity of entering into a contract, if you refuse to provide your personal data or object to the processing of your personal data for the purpose of the activity, it may result in KANEKOJI Company being unable to perform or provide the services you requested in whole or in part.
5. Types of Personal Data Collected by KANEKOJI Company
KANEKOJI Company may collect or obtain the following information, which may include your personal data, depending on the services you use or the context of your relationship with KANEKOJI Company, as well as other considerations that affect the collection of personal data. The types of data listed below are only a general framework for KANEKOJI Company's collection of personal data. Only the data that is relevant to the products or services you use or have a relationship with will be applicable.
Type of personal data Details
Personal information Personal information that identifies you, including your name, surname, middle name, nickname, signature, national identification number, nationality, driver's license number, passport number, home address, business registration number, professional license number (for each profession), social security number, etc.
Personal information that describes you Personal information that describes you, including your date of birth, gender, height, weight, age, marital status, military service status, photograph, spoken languages, behavioral data, interests, bankruptcy information, and information on whether you are incapacitated or quasi-incapacitated, etc.
Contact information Contact information, including your home phone number, mobile phone number, fax number, email address, home mailing address, social media username (Line ID, MS Teams), and location map of your residence, etc.
Information about your use of KANEKOJI Company's products and services Information about your use of KANEKOJI Company's products and services, including your user account name, password, PIN number, Single Sign-on (SSO ID) information, OTP code, computer traffic data, geolocation data, photos, videos, audio recordings, usage behavior data (from websites owned and operated by KANEKOJI Company, such as www.KANEKOJI.com or various applications), browsing history, cookies or similar technologies, device ID, device type, connection details, browser information, language used, operating system used, etc.
6. Cookies
KANEKOJI Company collects and uses cookies and other similar technologies on websites under the control of KANEKOJI Company, such as www.KANEKOJI.com, or on your device depending on the service you use. This is to ensure the security of KANEKOJI Company's services and to provide you with a convenient and enjoyable experience using KANEKOJI Company's services. This information will also be used to improve KANEKOJI Company's website to better meet your needs. You can set or delete cookie usage in your web browser settings.
  1. Cookie Policy
  2. While browsing the website www.KANEKOJI.com, information related to your website visits may be stored in the form of cookies. This Cookie Policy explains what cookies are, how they work, why they are used, and how to manage and delete cookies for your privacy. By using the website www.KANEKOJI.com, you consent to our use of cookies as described in this policy.
  3. What Are Cookies?
  4. Cookies are small pieces of computer data that are installed or saved on your computer or electronic device when you visit a website. Cookies remember your website usage data. Similar technologies that perform similar functions are also referred to as cookies.
    Session Cookies: These temporary cookies are used during your website visit and expire when you close your browser.
    Persistent Cookies: These cookies are stored on your computer or mobile device until they expire or are deleted. They remember your settings within the website and may persist even after you've closed the website. Such cookies help maintain data consistency and improve the efficiency of your user experience during website visits.
    First-party Cookies: Cookies set by the website you are visiting.
    Third-party Cookies: Cookies set by websites other than the one you are visiting, such as data providers, advertisers, or analytics services.
    Similar Technologies: Technologies that store data in your browser or device to share or collect data, such as Flash cookies, HTML 5, and other web application software methods.
  5. How We Use Cookies
  6. We collect website visit data through cookies or similar technologies for the following purposes:
    • To provide continuous and secure access to user accounts on our website.
    • To record your website usage data and settings.
    • To analyze your usage patterns on our website.
    • To enhance the performance and accessibility of our services.
    • To collect interests and improve our ability to respond to your usage needs.
  7. Types of Cookies Used on Our Website
  8. We use the following types of cookies on our website:
    Strictly Necessary Cookies
    These cookies are crucial for the functioning of the website, including cookies that enable you to access and use our website securely. They also help verify your identity and prevent fraudulent account activities. Without these cookies, we may not be able to provide you with our services.
    Functional Cookies
    Functional cookies help us remember your choices when you use our website, such as remembering your login details or language preferences. These cookies aim to provide you with a more personalized experience and avoid the need for you to enter your information each time you use the website. These cookies are typically persistent, remaining on your device for your next visit. You can delete these cookies through your browser settings.
    Analytical/Performance Cookies
    These cookies assist us in remembering and counting the number of users on our website. They help us understand how users interact with our website, enabling us to improve its functionality, making it easier for users to find what they need.
    Advertising Cookies
    Advertising cookies are used to display advertisements relevant to you. They limit the number of times you see an ad and help us assess the effectiveness of our marketing efforts. Additionally, we may use data from these cookies to offer you personalized ads based on your past online behavior. These cookies are typically persistent. We may share this information with third parties, including our business partners.
  9. How We Collect and Use Cookies
  10. Cookies operate automatically, allowing us to collect and store information about your website visits. Here is the data we automatically gather:
    1. Internet domain and IP address from where you access the website.
    2. Type of browser software, operating system, and operational system architecture you use to access the website.
    3. Date and time of your access to the website.
    4. Referring to website addresses that linked you to our website.
    5. Pages you visit, browse, and exit on our website, along with the time you spend on each page.
  11. Cookie Options
  12. If you prefer not to have cookies enabled on our website, you can modify your settings in your browser to suit your preferences. Disabling or deleting certain cookies in your browser settings may affect the functionality of the website or prevent it from working as intended. Most internet browsers are initially set to accept cookies automatically. However, you can configure your browser settings to block cookies or notify you when your device receives cookies. Managing cookies can be done in several ways, and you can find specific guidance in your browser's help documentation. For more information about cookies, you can visit websites like www.aboutcookies.org or www.allaboutcookies.org.
  13. Changes to Cookie Policy
  14. We may periodically make changes or updates to this Cookie Policy. You can stay informed about the terms and conditions of the policy, including any modifications, by visiting our website
7. Personal data of minors, incapacitated, and quasi-incapacitated individuals
If KANEKOJI Company learns that personal data that requires consent to collect belongs to a minor, incapacitated, or quasi-incapacitated individual, KANEKOJI Company will not collect such personal data until it has obtained the consent of the legal guardian who is authorized to act on behalf of the minor, or the guardian, or the trustee, as applicable. This is in accordance with the conditions set forth by the law.
If KANEKOJI Company is not aware in advance that the data subject is a minor, incapacitated, or quasi-incapacitated individual, and then later finds that KANEKOJI Company has collected data from such data subject without the consent of the legal guardian who is authorized to act on behalf of the minor, or the guardian, or the trustee, as applicable, then KANEKOJI Company will delete such personal data promptly if KANEKOJI Company has no other legal grounds for collecting, using, or disclosing such data other than consent.
8. Purposes for collecting personal data
  1. To carry out the necessary actions to complete the public interest tasks that KANEKOJI Company has been assigned to accomplish, or to use the legal authority that KANEKOJI Company has the authority to carry out its mission as stated in the Royal Decree on the Establishment of the Digital Government Development Agency (Public Organization) B.E. 2561 and related laws, rules, regulations, or orders.
  2. To provide and manage KANEKOJI Company's services, both services under the contract with you or under the mission of KANEKOJI Company.
  3. For KANEKOJI Company's transactional activities
  4. Control, operate, track, monitor, and manage services to facilitate and align with your needs
  5. To keep and improve information about you, including documents that mention you
  6. Prepare a record of data processing of personal data as required by law
  7. Analyze data, including troubleshooting problems related to KANEKOJI Company's services
  8. To carry out the necessary actions in internal management, including recruitment, selection of directors or other positions, and evaluation of assets
  9. Prevent, detect, avoid, and investigate fraud, security breaches, or prohibited or illegal acts that may cause damage to both KANEKOJI Company and the data subject
  10. Identity verification, verification, and data verification when you apply for KANEKOJI Company's services or contact for services or exercise legal rights
  11. Improve and modernize the quality of products and services
  12. Risk assessment and management
  13. Send notifications, confirmations of orders, contact and inform news to you
  14. To prepare and deliver relevant and necessary documents or information
  15. Identity verification, prevent spam or unauthorized or illegal acts
  16. To check how data subjects access and use KANEKOJI Company's services, both in general and individually, and for purposes related to research and analysis
  17. To take the necessary actions to comply with the obligations of KANEKOJI Company to regulatory authorities, tax authorities, law enforcement agencies, or KANEKOJI Company's legal obligations
  18. To take the necessary actions for the legitimate interests of KANEKOJI Company, or of other persons, or of other legal entities involved in the operation of the Agency
  19. To prevent or stop danger to the life, body, or health of individuals, including disease surveillance
  20. To prepare historical documents for public benefit, research, or statistics that KANEKOJI Company has been assigned to carry out
  21. Content 8 List 21
9. Types of persons to whom KANEKOJI Company discloses your personal data
Under the purposes stated in Article 9 above, KANEKOJI Company may disclose your personal data to the following persons. However, the types of recipients of information listed below are only a general framework for KANEKOJI Company's disclosure of personal data. Only the recipients of information that are relevant to the products or services you use will apply.
Type of recipient Details
Government agencies or authorities to which KANEKOJI Company must disclose information for the purpose of legal action or other important purposes (such as public interest actions) Agencies that enforce the law, have regulatory authority, or have other important objectives, such as the Council of Ministers, acting ministers, the Department of Provincial Administration, the Department of Revenue, the Royal Thai Police, the courts, the Office of the Attorney General, the Department of Disease Control, the Ministry of Digital Economy and Society, the Office of the Prime Minister's Secretariat, the Department of Consular Affairs, and the Student Loan Fund, etc.
The committees that are responsible for ensuring that the company complies with laws and regulations. KANEKOJI may disclose your information to individuals serving on various committees, such as the Recruitment Sub-Committee and the Digital Government Development Committee, as necessary to comply with applicable laws and regulations
Business Partners KANEKOJI may disclose your information to third parties that work with KANEKOJI to provide services to you, such as service providers that you contact through KANEKOJI's services, marketing and advertising providers, financial institutions, platform providers, and telecommunications providers.
Employees within the company KANEKOJI may disclose your information to employees within the company who work in departments that need to know the information, such as the accounting department, customer service department, marketing department, and legal department.
Service Providers KANEKOJI may appoint third-party service providers to represent or support the company's operations. These service providers may include data storage providers (such as cloud document warehouses), system developers, software and application developers, document delivery services, payment processors, internet service providers, telecommunications providers, digital ID providers, online social media platforms, risk management consultants, external consultants, and transportation service providers, among others.
Public Disclosure of Information KANEKOJI may disclose your information to the public when necessary, as required by official regulations, such as when mandated by a royal decree or a ministerial resolution, or in compliance with other legal obligations imposed on the company
10. Retention of Personal Data
KANEKOJI will retain your personal data for as long as it is necessary for the purposes for which the data was collected, as specified in our policies, announcements, or relevant laws and regulations. Once the data is no longer necessary for the aforementioned purposes, KANEKOJI will delete or destroy your personal data or render it unidentifiable according to the methods and standards of data deletion and destruction that may be prescribed by the committee or the law or international standards.

In cases of disputes, the exercise of rights, or legal proceedings related to your personal data, KANEKOJI reserves the right to retain such data until the dispute is resolved or until a final order or judgment is issued.
11. Engagement of Third Parties or Service Providers
KANEKOJI may appoint or contract with third parties (data processors) to process personal data on behalf of the company. These third parties may offer services in various capacities, such as hosting, outsourcing, cloud computing services, or other forms of data processing. When appointing third parties as data processors, KANEKOJI will establish agreements specifying the rights and responsibilities of KANEKOJI as the data controller and the data processor. This includes defining the types of personal data that KANEKOJI assigned for processing, as well as the purposes and scope of the data processing. Data processors are obligated to process personal data only within the defined scope of the agreement and in accordance with KANEKOJI's instructions, without engaging in any further processing for other purposes.

In cases where data processors engage sub-processors to process personal data on their behalf, KANEKOJI will ensure that there are contractual agreements in place between the data processor and the sub-processor that meet standards not less than those set forth in the agreement between KANEKOJI and the data processor.
12. Data Security Measures
KANEKOJI has implemented data protection measures by restricting access to personal data to only authorized personnel or individuals who have a necessary and legitimate purpose for accessing such data, as specified by the data owner. These authorized individuals are required to adhere to and diligently follow KANEKOJI's data protection policies, as well as maintain the confidentiality of personal data they come into contact with. KANEKOJI has established security measures, both organizational and technical, that adhere to international standards to ensure the security of data as required by the Personal Data Protection Committee or applicable laws.

Additionally, when KANEKOJI shares, transfers, or discloses personal data to third parties, whether for the purpose of fulfilling obligations under contracts or agreements, or in any other format, the company will establish appropriate security measures and confidentiality safeguards in accordance with legal requirements. This is done to ensure that the personal data collected and maintained by KANEKOJI remains secure at all times.
13. External Website or Service Connections
KANEKOJI's services may connect to external websites or services provided by third parties. These external websites or services may have data protection policies that differ from the policies outlined here. KANEKOJI recommends that you review the data protection policy of these external websites or services to understand the details before using them. Please note that KANEKOJI has no control over and cannot assume responsibility for the content, policies, damages, or actions arising from external websites or services provided by third parties.
14. Data Protection Officer
KANEKOJI has appointed a Data Protection Officer (DPO) to oversee and provide guidance on data collection, usage, and disclosure. The DPO is responsible for ensuring compliance with the Personal Data Protection Act of 2019 and collaborates with the Office of the Data Protection Committee to ensure alignment with the legal requirements.
15. Your rights under the Personal Data Protection Act B.E. 2562
The Personal Data Protection Act B.E. 2562 (PDPA) provides several rights for data subjects. These rights will come into effect when the relevant provisions of the PDPA come into effect. The details of these rights are as follows:
  1. Right to access personal data: You have the right to request access to, receive a copy of, and request disclosure of the source of your personal data that is collected by KANEKOJI without your consent. However, KANEKOJI may refuse your request for a legal reason or court order, or if exercising your right could cause harm to the rights and freedoms of others.
  2. Right to correct personal data to be accurate, complete, and up-to-date: If you find that your personal data is inaccurate, incomplete, or not up-to-date, you have the right to request that it be corrected to be accurate, up-to-date, complete, and not misleading.
  3. Right to delete or destroy personal data: You have the right to request that KANEKOJI delete or destroy your personal data, or make your personal data unidentifiable. However, the exercise of this right to delete or destroy personal data must be subject to conditions as prescribed by law.
  4. Right to request that the use of personal data be suspended: You have the right to request that the use of your personal data be suspended. This is applicable in the following cases:
    • During the time that KANEKOJI is investigating a request from a data subject to correct personal data to be accurate, complete, and up-to-date.
    • If the data subject's personal data is collected, used, or disclosed in violation of the law.
    • If the data subject's personal data is no longer necessary to be kept for the purpose that KANEKOJI has notified in the collection, but the data subject wishes KANEKOJI to keep the data for the purpose of exercising legal rights.
    • During the time that KANEKOJI is proving the lawful grounds for collecting the data subject's personal data, or checking the necessity of collecting, using, or disclosing personal data for the public interest, which is due to the data subject exercising the right to object to the collection, use, or disclosure of personal data.
  5. Right to object to the processing of personal data: You have the right to object to the collection, use, or disclosure of personal data about you. However, KANEKOJI may refuse your request for a lawful reason (for example, KANEKOJI can show that the collection, use, or disclosure of your personal data is necessary for a legitimate purpose that overrides your interests, or for the establishment, exercise or defense of legal claims, or for the public interest of KANEKOJI).
  6. Right to withdraw consent: If you have given consent to KANEKOJI to collect, use, or disclose personal data (whether that consent was given before or after the PDPA comes into effect), you have the right to withdraw your consent at any time during the period that your personal data is being kept by KANEKOJI However, there may be legal restrictions that require KANEKOJI to keep the data, or there may still be a contract between you and KANEKOJI that gives you benefits.
  7. Right to receive, transfer, or transmit personal data: You have the right to receive your personal data from KANEKOJI in a form that can be read or used generally by tools or devices that can operate automatically and can use or disclose personal data automatically. You may also request that KANEKOJI send or transmit the data in such form to another data controller. However, the exercise of this right must be subject to conditions as prescribed by law.
16. Penalties for non-compliance with the Personal Data Protection Policy
Non-compliance with the policy may result in disciplinary action under KANEKOJI's rules and regulations (for KANEKOJI's employees or operators) or under the data processing agreement (for data processors). Depending on the case and your relationship with KANEKOJI, you may also be subject to the penalties specified in the PDPA and its subsidiary laws, rules, regulations, and orders.
17. Complaints to the competent authority
If you find that KANEKOJI has not complied with the Personal Data Protection Act, you have the right to file a complaint with the Personal Data Protection Commission (PDPC) or another competent authority appointed by the PDPC or by law. However, before filing a complaint, KANEKOJI asks that you please contact KANEKOJI first so that KANEKOJI can have the opportunity to investigate the matter and provide clarification.
18. Modification and Amendment of Personal Data Protection Policy
KANEKOJI may consider revising, amending, or making changes to this policy as deemed necessary. Notification of the effective date for each revised version will be communicated through the website www.KANEKOJI.com. However, we recommend that you regularly review the updated policy, either through our application or specialized channels managed by KANEKOJI, particularly before disclosing personal data to KANEKOJI

By accessing KANEKOJI's products or services after the enforcement of the new policy, you are deemed to have acknowledged and accepted the terms outlined in the updated policy. Please discontinue the use of our services if you do not agree with the details in this policy and kindly reach out to KANEKOJI for further clarification.
19. Contact for Inquiries or the Exercise of Rights
If you have any questions, suggestions, or concerns regarding the collection, use, and disclosure of personal data by KANEKOJI, or related to this policy, or if you wish to exercise your rights under data protection laws, please feel free to contact
Data Controller (Data Protection Officer)
  • KANEKOJI Group Head office
  • 19 Sukhumvit 24 alley, Klongtan, Klongtoey, 10110
  • [email protected]