This notice explains how The KPI Plus collects, uses and shares your personal data when you visit thekpiplus.com, contact us through a form, email, phone, LINE or WhatsApp, or use the Partner Portal. It also explains your rights under Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) and, where it applies to you, the EU or UK General Data Protection Regulation (“GDPR”).
1. Who we are and how to reach us
The data controller is The KPI Plus Co., Ltd. (Tax ID 0835564008629), trading as The KPI Plus (“we”, “us”).
For questions or requests about your personal data, contact our privacy contact:
Isara Isaraniran
58/15 E Chaofah Rd, Talat Nuea, Mueang Phuket, Phuket 83000, Thailand
Email: info@thekpiplus.com · Phone: +66 82 635 6266
WhatsApp: wa.me/66826356266 · LINE: lin.ee/TQibLMD
Or use our contact page.
2. Personal data we collect
- Contact details such as your name, email, phone number, hotel or company, job title, province, room count and preferred contact method.
- What you send us, such as messages, questions, project details and conversations on LINE or WhatsApp.
- Partner application details such as name, email, phone, territory, business type, and documents you upload in the Partner Portal, such as an ID card.
- Technical and usage data such as IP address, browser and device type, pages visited and cookie identifiers. Analytics data is collected only if you allow it.
- Cookie choices: the options you selected, when, and which version of the notice you saw.
- Client and billing data if you become a client, such as details in quotations, invoices and payments.
We do not intend to collect sensitive data such as health information, religious beliefs or criminal records. Please do not include it in messages to us. If we receive it by mistake, we delete it once we no longer need it.
3. Where the data comes from
Directly from you when you fill in a form or contact us; from your device through cookies and similar technologies, according to your choices; and from platform providers such as aggregated reports from Google Analytics when you allow analytics cookies.
4. Why we use your data, and our legal basis
| Purpose | Legal basis |
|---|---|
| Answer your enquiry and get back to you | Steps you ask us to take before a contract; our legitimate interest in responding to people who contact us |
| Prepare quotations, deliver services and manage our client relationship | Performance of a contract |
| Understand how the website is used so we can improve it, through Google Analytics | Your consent (analytics cookies) |
| Keep the website secure and prevent spam and abuse | Legitimate interest |
| Keep a record of consent given or withdrawn | Legitimate interest and legal obligation |
| Keep accounting and tax records | Legal obligation |
| Establish, exercise or defend legal claims | Legitimate interest |
If you do not give us information we need, such as a way to reply, we may not be able to answer you or provide our services. Declining analytics cookies does not affect the basic use of the website.
5. Cookies
Details of the cookies we use and how to change your settings are in our Cookie Policy. You can reopen the cookie settings from the “Cookie settings” link at the bottom of every page.
6. Who receives your data
We do not sell your personal data. We share only what is needed with:
- our website host and email provider, who process data on our instructions;
- The KPI Plus CRM, accessible only to authorised team users;
- Google (Google Analytics) only if you allow analytics cookies, and Google Maps if you choose to load the map;
- LY Corporation (LINE) and WhatsApp (Meta) when you choose to contact us through them — each has its own privacy policy;
- our auditors, accountants and legal advisers when needed;
- public authorities or courts where the law requires it or a lawful order is made.
7. International transfers
Some of these providers, including Google, may process or store data outside Thailand, including in the United States, where data protection standards may differ. We transfer data only where the PDPA (and GDPR, where it applies) allows it, relying on the provider’s safeguards.
8. How long we keep data
| Data | Retention |
|---|---|
| Enquiries that do not lead to a client relationship | 2 years after last contact |
| Client and contract records | For the contract term and then as long as accounting and tax law require |
| Accounting and tax documents | As required by law (generally at least 5 years) |
| Partner applications | During review, and for the partnership if approved |
| Cookie consent records | 12 months from the choice |
| Cookie data | As listed in the Cookie Policy |
After that, we delete or destroy the data or make it anonymous.
9. Security
We use appropriate organisational and technical measures to protect personal data against unauthorised access, use, alteration or disclosure, including HTTPS encryption, access limited to staff who need it, authentication on admin accounts, and encryption of partner identity documents. We review these measures regularly.
10. Your rights
Subject to the conditions set by law, you have the right to:
- access your personal data and receive a copy;
- receive or transfer your data in a machine-readable format;
- object to processing, including direct marketing;
- have your data deleted, destroyed or anonymised;
- restrict the use of your data;
- have inaccurate or incomplete data corrected;
- withdraw consent at any time, without affecting processing that took place before;
- complain to Thailand’s Office of the Personal Data Protection Committee (PDPC) — or, if GDPR applies to you, to the data protection authority where you live or work.
11. How to exercise your rights or withdraw consent
- Cookies: click “Cookie settings” at the bottom of any page and switch off the categories you no longer want.
- Other rights: send your request to info@thekpiplus.com or any channel in section 1, saying which right you want to use. We may ask for the minimum information needed to verify your identity.
We respond without undue delay and within the time the law allows — generally no more than 30 days from receiving your request. If we cannot fulfil a request, we will tell you why.
12. Children
Our website and services are not directed at minors. If we learn that we hold a minor’s data without valid consent, we will delete it.
13. Changes to this notice
We may update this notice when our services, tools or the law change, and will show the update date at the top. For significant changes — for example a new purpose that needs consent — we will tell you on the website and ask for your consent again where required.
If the Thai and English versions differ, the Thai version prevails.
Version 1.0 · Effective 28 September 2026