V Group Car Limited (the "Company") recommends that you understand the Personal Data Protection Policy (Privacy Policy) as this policy explains how the Company handles your personal data, including the collection, storage, use, and disclosure of your personal data, as well as your rights and benefits associated with our products, services, and more.

To make you aware of the Company's personal data protection policy, the Company hereby announces the following:

1. Definitions
• "Personal Data" means personal information and other data related to an individual that can directly or indirectly identify that individual.
• "Company" refers to V Group Car Limited and/or companies within the V Group Car group of companies.
• "Customers/Users" refer to individuals or legal entities that own personal data provided either before or at the time of contact or use of the Company's website or applications.
• "Data Controller" refers to individuals or legal entities responsible for making decisions and/or appointed representatives related to the management of personal data, including collection, use, and disclosure.
2. Purpose of the Policy

   This Personal Data Protection Policy is designed by the Company to manage the personal data of customers/users, including the collection, use, and disclosure of personal data in compliance with applicable laws. This is to ensure the security of personal data for all customers/users who contact or use the Company's website or applications. If there are any changes, modifications, or additional objectives related to personal data operations, the Company will notify customers/users accordingly.

   Additionally, the Company may establish guidelines for protecting personal data of customers/users to specify the details of the Personal Data Protection Policy for data controllers. This policy has been approved and endorsed by senior management and is publicly announced to employees and relevant external parties.

3. Enforcement Scope of the Privacy Policy

   This Personal Data Protection Policy applies to the protection of personal data of all customers/users (Personal Information) provided before or at the time of contact or use and applies to the collection, use, and disclosure of personal data, including any amendments, modifications, additions, or actions related to personal data of customers/users of the Company. The Customer Relations Department is responsible for supervising and ensuring compliance with this policy.

4. Methods of Collecting Personal Data
   1. 4.1 The Company collects personal data for the purposes outlined in this policy. The Company is the data controller, and the collection of data is done only to the extent necessary within the framework of the policy's objectives.
   2. 4.2 The Company will collect personal data with the consent of customers/users. If customers/users subsequently contact or use the Company's website or applications, it is presumed that they have consented to the Company's collection of personal data that was provided previously or at that time.
   3. 4.3 The Company may collect personal data of customers/users in conjunction with personal data received from other sources, but only in cases where it is necessary and with the consent of customers/users. This is done for the purpose of updating and improving the accuracy and efficiency of the Company's services.
   4. 4.4 The collection of personal data related to race, ethnicity, political opinions, religious beliefs, sexual orientation, criminal history, health information, disability information, labor union information, genetic information, and biometric information is strictly prohibited.
5. Restrictions on the Use of Personal Data
   1. 5.1 The Company will use personal data for disclosure or display to the extent necessary and in line with the objectives of data collection and storage, such as names, genders, ages, addresses, etc., for purposes such as contact/communication, public relations, product or service presentations, benefits, and various activities related to the Company's business or website or application.
   2. 5.2 The Company guarantees that it will not disclose or transfer personal data of customers/users who have given consent previously or at the time of contact or use to third parties for any reason, except for other legal entities that the Company deems appropriate and has obtained the consent of customers/users or for the purpose of facilitating transactions, where customers/users are the parties to the transactions.
   3. 5.3 Personal data collected by the Company will be used for legal purposes and for the Company's business operations in various cases, such as:
      1. (1) Use for transaction orders, purchase details of products, services, benefits, and other business-related activities of the Company.
      2. (2) Use for improving, updating, and developing the Company's website or applications.
      3. (3) Use for improving, updating, and developing customer communication and service.
      4. (4) Using customers/users' personal data to meet their specific requirements.
      5. (5) Use for managing participation in promotions, lucky draws, surveys, various activities, or the use of the website or application in various cases.
      6. (6) Use for sending messages, newsletters, and information about products, services, benefits, and more on various occasions.
      7. (7) Use for presenting/recommending user experiences with the website or application to customers/users.
      8. (8) Use for receiving comments or handling various complaints from customers/users.
6. Personal Data Security
   1. 6.1 For the benefit of maintaining confidentiality and security of customer/user personal data, the company is certified for maintaining data confidentiality and security of the website or application according to general standards to prevent loss, unauthorized access, destruction, alteration, or unauthorized disclosure of personal data.
   2. 6.2 The company has established secure data encryption methods for customer/user personal data. The company has also defined access rights or usage of customer/user personal data within the organization to maintain the confidentiality and security of sensitive personal data.
7. Disclosure of Management Information

   In the management of personal data, which has been consented to by customers/users and/or accessed or used through the website or application, the company may disclose customer/user personal data to other legal entities as deemed necessary by the company. This includes business partners or business affiliates but requires prior consent from customers/users. Additionally, the company may disclose customer/user personal data to third parties, such as service providers and professional consultants, for the following purposes:

   • To comply with any legal requirements or enforce the terms and conditions of the company's services and other agreements.
   • To protect the rights, properties, and security of the company, as well as the rights, properties, and security of the company's affiliates, users of the website or application, or any other related to the website or application.
   • In connection with legal processes or legal proceedings.
   • Related to business transactions, such as purchases, sales, leases, acquisitions, dispositions, transfers, or fundraising for the organization or any part thereof, or any business or property of the organization in which the company enters as one of the contracting parties, or may be required to enter into the contract.
8. Involvement of Data Subjects

   If customers/users wish to know personal data about themselves, verify data, or request information, they can do so by providing their true identity in accordance with the criteria and procedures set by the company. When the company receives such a request, it will promptly notify the existence or details of the personal data within a reasonable period. If customers/users find that personal data is incorrect, they can notify the company to correct, change, destroy, or delete such personal data.

9. Amendment and Modification of the Policy

   The company reserves the right to amend, modify, update, and develop the personal data protection policy occasionally to ensure that it is up-to-date and of high quality or efficiency. Therefore, the company will notify of any amendments, changes, updates, and developments on the website or application of the company. The amended personal data protection policy will take effect from the date and time it is posted on the website or application of the company.

10. Contact Information for the Company

    Customers/users can contact the company to inquire for additional information regarding this personal data protection policy, express opinions, or make any complaints through the Customer Relations department of V Group Cars Limited at the following address:

    • Address: 100/39 Vongvanij Building B Tower, 17th Floor, Rama 9 Road, Huai Khwang Sub-district, Huai Khwang District, Bangkok 10310, Thailand
    • Phone: 02-026-3545
    • Email: callcenter@vgroupcars.com
    • Website: www.vgroupcars.co.th

This policy is effective from April 15, 2020, onwards.