DEEPAL Privacy Policy

General Rule

DEEPAL is an application developed by CHANGAN Auto Sales (Thailand) Co., Ltd. (hereinafter referred to as "we", "us","our") to connect your vehicle and provide related services. We attach great importance to your personal data. We will strictly follow the provisions of Thailand Personal Data Protection Law B.E. 2562 (2019) ("PDPA") and adhere to the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity and confidentiality, and accountability to protect your personal data and related rights. Through this DEEPAL Privacy Policy ("this Policy"), you will learn how we collect, use, store, disclose and protect your personal data when using DEEPAL's products or services.

Please understand that authorized dealers are independent entities and applications and other services provided by third parties have nothing to do with us. Please understand and be aware of the privacy policies of third parties. If you have any questions, please contact the third parties directly.

This Policy applies to the Internet-based and mobile Internet-related related services we provide to you, including mobile clients, applications and other locations collect your personal data.

Reminder:

If you are under 20 years old, please do not provide any personal data without the permissions of your parents or legal guardians.

In order to adapt to the current effective laws and regulations, functional services, etc., this Policy may be modified. We will notify you of the modification through a pop-up prompt to get the latest effective version.

We understand the importance of personal data to you and we are committed to taking appropriate security measures to fully protect your personal data in accordance with the industrys mature security standards.

By checking or clicking on "Read", “Agree” or other actions with the same meaning on the page to which this Policy belongs, you are deemed to agree to the relevant content of this Policy and agree to our processing of your personal data in accordance with legal requirements and this Policy. If you do not agree to any content of this Policy, we will not process your personal data. In general, this will not affect your use of our products or services, unless the processing of relevant personal data is necessary to provide the products or services. Please read this Policy carefully before checking or clicking on "Read", “Agree” or other actions with the same meaning, accepting products or services we provide, and submitting personal data to ensure that you are fully aware and understand the meaning and corresponding legal consequences of its content. The DEEPAL can be used only after confirmation of full understanding and agreement.

We will identify, by bolding or other reasonable means, terms that are (potentially) materially related to your rights and interests, terms relating to sensitive personal data, etc., and you should focus on reading them. If you have any questions, comments, or suggestions about this Policy, you may contact us using the contact information provided in this Policy.

Please understand that our services are intended for the public. If you are not a CHANGAN vehicle owner, you could still download DEEPAL and register to sign in, but you will not be able to bind your vehicle. We will still collect your personal data based on the functions and services you use.

Part 1. Definitions and Legal Basis

Section 1. Definitions

1. Personal Data means any information relating to a natural person (data subject) which enables the identification of such natural person, whether directly or indirectly. An identifiable natural person is one who is identified by his or her name, address, e-mail address, telephone number, identity card number, location data, online identification, or by reference to one or more elements of physical, physiological, genetic, psychological, economic, cultural, or social identity of that natural person, but does not include anonymized personal data.

2. Sensitive Personal Data means Personal Data pertaining to racial, ethnic origin, political opinions, cult, religious or philosophical beliefs, sexual orientation, criminal records, health data, disability, trade union information, genetic data, biometric data, or of any data which may affect the data subject in the same manner (sensitive data), as well as the Personal Data of minors under 20 years old.

Section 2. Legal Basis

We collect and process your Personal Data in strict compliance with the PDPA. We do not normally collect Personal Data directly from any source other than the data subject and we collect and process your Personal Data for the purposes described in this policy. In cases where the collection of Sensitive Personal Data, cross-border transfers of data, etc. are (potentially) of significant relevance to your rights and interests, we will notify you by means of enhanced notification or instant alerts (e.g., pop-up reminders) and obtain your explicit consent.

We will generally collect, use, disclose or otherwise process your Personal Data with your consent or in accordance with the law, for the purposes set out in this Policy, including but not limited to the following circumstances:

Part 2. The business features we offer and how we collect and process your Personal Data

Section 1. What Personal Data we collect about you

1. Basic Personal Data

Based on the purchase contract with you, the products or services provided to you, we may collect your Personal Data, such as name, gender, age, identity card, passport, driver’s license, telephone number and other Personal Data that you disclose to us.

2. Account-related Personal Data

Based on your use of DEEPAL, the products or services provided to you, we may collect your account and contact data, such as telephone number, phone verification code, login password, device number, system version, vehicle identification number (VIN), software version number, etc.

3. Vehicle-related Personal Data

Based on the products or services provided to you by driving your car, we may collect your vehicle data, such as vehicle nickname, license plate number, vehicle model, VIN, purchase record, vehicle door, window, sunroof, front cover, trunk, headlight on/off or locked/unlocked status of the vehicle,tire pressure, airbag, battery current and charging status, powertrain, stability system, steering, ABS, air quality.

4. Personal Data related to security operation and maintenance

To provide you with secure services, safeguard your account and identify system anomalies, we may collect technical and operation and maintenance data such as device model, device type, device version, operation logs, service logs, IP address and other related technical and operation and maintenance data.

5. Other Personal Data

Based on the various products, services, activities, etc. provided to you, other Personal Data may also be collected.

Section 2. We will collect and process your Personal Data for the following purposes as set out in this Policy

We collect and process your Personal Data for the purpose of providing you with the products or services described below. The Personal Data described below is necessary to provide DEEPAL’s features or services, and we do not automate decision-making or send you marketing messages via e-mail, telephone, etc. based on the Personal Data we collect from you. Therefore, if you do not provide and authorize us to process the Personal Data described below, we will not be able to provide you with products or services.

1. Personal Data you provide

Products or services Personal Data Purposes
Register / Login account telephone number, phone verification code, login password, device number, system version, device model, traceId, userId, VIN, vehicle model, license plate number, vehicle nickname, vehicle parameters.

We collect telephone number, phone verification code, and login password for DEEPAL account registration and login.

We collect device numbers, system version and device model to ensure the normal use, operation, and account security of services.

We collect traceId, userId, VIN, vehicle model, license plate number, vehicle nickname and vehicle parameters to synchronize your data to display on the APP.

2. Personal data collected when you use the products or services

Products or services Personal Data Purposes
Account and Security Management telephone number, login password, cell phone network status, device model, device type, device version, operation log, service log, IP address

We collect telephone number and login password to distinguish different accounts.

We collect mobile network status to ensure the normal use of services.

We collect device model, device type, device version, operation log, service log, and IP addresses for identifying account anomalies, understanding product suitability, and ensuring the safe and stable operation of the services provided to you.

Remote control of vehicles vehicleId, the opening/closing or locking/unlocking status of the vehicle's doors, windows, sunroof, front lid, trunk, and headlights, as well as the air conditioning switch status, seat ventilation status, charging status, battery, mileage, temperature data, car control password, flashing lights, horns, and lights We collect these data for you to check the relevant data, such as battery level and mileage, in the APP when you bind the vehicle with our APP and turn on the relevant functions of the vehicle. If you allow the app to collect relevant information, it can provide you with the function of remote control of vehicle related status, such as window control, car search, interior air conditioning on and temperature setting, seat ventilation.
Vehicle management Vehicle nickname, license plate number, vehicle model, VIN, purchase record We collect vehicle nickname, license plate number, vehicle model, VIN, and purchase record for the system to identify and label the vehicles you wish to manage, to accurately identify and provide services for you, such as binding and unbinding vehicles.
Vehicle upgrades VIN, software version number, vehicle model, vehicleId, traceId We collect VIN , software version number, vehicle model, vehicleId and traceId for system identification, determining the vehicle to be upgraded, and the system version to be upgraded.
Charging reservation Target state of charge setting, reservation state, remote charging start/end time setting control, remote charging end time setting control, remote charging start time setting We collect these data to determine the battery target state of charge, the current appointment status to avoid repeat appointments, and your chosen charging period.
Language settings System language, device model, VIN

We collect system language and device model for switching language versions, making it convenient for you to use.

We collect VIN to the find data related to your vehicle for synchronized language switching.

Bluetooth key Bluetooth data We collect Bluetooth data to identify nearby devices for connection and control the vehicle through Bluetooth keys.
Bluetooth key Bluetooth data We collect Bluetooth data to identify nearby devices for connection and control the vehicle through Bluetooth keys.
Vehicle diagnostics Tire pressure, airbag, battery current and charging status, powertrain, stability system, steering, ABS We collect these data to check the current health status of the vehicle and if the main modules of the vehicle are functioning properly.
Vehicle condition check Air quality We collect air quality data to show you the current air quality of your vehicle.
Vehicle sharing Telephone number, phone verification code, expiration time, telephone number of the person being shared We collect phone numbers and verification codes for identity verification when you share your vehicle with other users on the APP. We collect valid time data to set the validity period for sharing. We collect the shared person's phone number for recording and saving, so that the shared person can log in to their account and use your vehicle.

3. Personal data from third parties

To protect your rights and interests, fulfill our contractual obligations with you, comply with legal requirements or obtain your consent, we may receive your Personal Data from third parties, including but not limited to: our dealers, our service providers. We will strictly comply with the provisions of Article 25 of the PDPA to fulfill our obligations and protect your personal data and rights.

Section 4. We will only require your authorization to turn on the following permissions for you to use our products or services.

To provide the relevant products and services, in addition to the Personal Data provided by you, we may also need you to authorize the opening of the following permissions, and the refusal to open these permissions may result in us not being able to provide you with the relevant products or services.

These permissions include network, Bluetooth, location, and camera device permissions, as shown in the table below:

User Rights Descriptions Purposes
Network When you use the DEEPAL, we may need to enable network permissions on your mobile device. Enable network and networking services, browse pages, and use features.
Bluetooth When you use the Bluetooth key function, we may need to enable Bluetooth permissions on your mobile device. Use Bluetooth key to control the vehicle and search for nearby devices.
Camera When you need to login, authorize and so on in the in-vehicle terminal, we need you to scan the QR code in the in-vehicle terminal with the APP. We may need you to turn on the camera permission of your mobile device. It is used for scanning the QR code, logging in the account, completing the authorization in the scenarios such as restoring the factory settings and others in the in-vehicle terminal in which the camera permission may be used.

We only collect the permissions mentioned in the above description and will not request additional permissions beyond the functional requirements. You can choose to turn off some or all permissions at any time in the device settings function; You can manage your permissions and refuse the collection of your Personal Data by operating within DEEPAL: "Home" - "Personal Center" - "Account and Security" - "System Rights Management".

Section 5. We will only access the SDK if you use our products or services for the following reasons

For the purpose of providing services to you and with your consent, we may access and update from time to time the software development kit (SDK) in order to ensure the realization and stable operation of the functions. We will monitor the security of the SDK within the current state of technology and reasonable time and labor costs and will protect the security of your Personal Data as much as possible. For more information, see the following table.

SDK Personal Data Scenarios and Purposes
Digital Key SDK Device identification information, geographic location information Used to initiate Bluetooth connections with vehicle-to-vehicle devices and issue Bluetooth positioning calibration data.

Part 3. How we disclose and store your personal data

Section 1. Disclosure

Under normal circumstances, we will not disclose your Personal Data to third party subjects. In order to protect your rights and interests, fulfill the contractual obligations signed with you, meet the legal requirements or obtain your consent, we may disclose your Personal Data to third-party subjects, and we will always comply with the legal requirements when disclosing your Personal Data, abide by the principles of purpose limitation and minimum necessity, and protect your Personal Data and related rights. The details are as follows:

1. Affiliated companies of CHANGAN Auto Sales (Thailand) Co., Ltd.

In order to protect your rights and interests, fulfill the legal obligations as well as the contractual obligations signed between us and you, and provide complete products or services, we may disclose your Personal Data to the affiliated subjects of CHANGAN Auto Sales (Thailand) Co., Ltd. and obtain your consent by means of this Policy or the privacy policies of other platforms of CHANGAN Auto Sales (Thailand) Co. consent. The disclosure is related to the purposes described in this Policy.

We may disclose your Personal Data to the following affiliates:

2. Service providers of CHANGAN Auto Sales (Thailand) Co., Ltd

We may disclose your personal data to service providers in order to protect your rights and interests, fulfill our statutory obligations and contractual obligations entered into between us and you, and to provide complete products or services. We will provide Personal Data to the minimum extent necessary for them to provide the service and sign a contract requiring the service provider not to use your Personal Data for any purpose other than the purpose agreed with us and to take technical, organizational, and administrative measures to protect your Personal Data. Service providers include but are not limited to: (1) IT service providers; (2) logistics and freight service providers; (3) data storage and cloud service providers; (4) event management service providers; (5) call center service providers.

3. Business partners of CHANGAN Auto Sales (Thailand) Co., Ltd

In order to protect your rights and interests, fulfill our legal obligations and contractual obligations with you, and provide complete products or services, we may disclose your Personal Data to our business partners. We will provide Personal Data to the minimum extent necessary for their business cooperation and sign an requiring the business partners not to use your Personal Data for any purpose other than the one agreed with us and to take technical, organizational, and administrative measures to protect your Personal Data. Partners include but are not limited to dealers, maintenance business, insurance business, financial business, and other partners.

4. Third parties required by law

We may have to disclose your Personal Data under certain legal requirements, such as: legal obligations that we need to fulfill or rights that need to be protected.

5. If we are required by law to obtain your consent, we will first obtain your consent.

Section 2. Storage

The Personal Data we collect and generate about you while operating and managing DEEPAL in Thailand is stored in a database server room located in Singapore, which has adequate data protection standard. The reason for choosing off-site storage is to improve system operation efficiency, reduce system redundancy and better protect your Personal Data in the event of a security incident; in addition, we will also strictly comply with the provisions of Singapore's Personal Data Protection Act, through legal contracts, technical measures, organizational measures, etc. to protect your Personal Data and related rights.

We store your Personal Data for a different period of time depending on the purpose of the processing, legal requirements, your rights, etc., but not longer than is necessary for the processing of the Personal Data. After the expiration of the storage period, we will delete your Personal Data or make it impossible to identify you directly or indirectly.

We have applied a series of technical, administrative, and organizational measures to protect the stored Personal Data and to minimize the risk of unauthorized use, disclosure, and inaccessibility. The security measures we have taken include, but are not limited to data desensitization, data encryption, firewalls and data access authorization controls.

Part 4. How we process your Personal Data globally

To protect your Personal Data, we do not normally process your Personal Data outside of Thailand. However, in order to comply with legal requirements, fulfill our contractual obligations with you, fulfill your functional use and ensure the safe and stable operation of your vehicle, provide other assistance services, etc., we may transfer your Personal Data to a third country outside of Thailand, or to be accessed by our affiliates in a third country, and your Personal Data may be transferred or disclosed within the company group.

If the data protection standard in the third country are lower than those in Thailand or in a country recognized by the relevant Thai authorities as an equivalent country for the protection of Personal Data, we will take protection measures comparable to the PDPA to ensure that Personal Data transferred to the third country will be protected to the same standard of data protection as that required in Thailand; for example, we will enter into a contract or establish binding corporate rules with the third-country recipient; or we will take technical measures so that the Personal Data cannot be directly or indirectly identified to you.

If you would like more information about how your Personal Data is protected outside of Thailand, please contact us using the contact information provided in this Policy.

Part 5. How we protect your Personal Data

We will provide appropriate security measures to prevent unauthorized or illegal access to, use, correction, or disclosure of your Personal Data. We will regularly check and update the security mechanisms used to protect data to provide effective protection against data abuse.

We use encryption to ensure the confidentiality of Personal Data; we use trusted protection mechanisms to prevent malicious attacks on data; and we deploy access control mechanisms to ensure that only authorized personnel have access to Personal Data. We have established a special privacy compliance organization and a management system for employees, third parties, etc. We will regularly hold security and privacy protection training courses to enhance employees' awareness of the importance of protecting Personal Data. We will carefully select service providers and business partners and conduct regular Personal Data protection audits.

In the event of a data breach, we will notify the Office of the Personal Data Protection Commission of Thailand in accordance with the PDPA, where practicable, within 72 hours of becoming aware of a data breach, unless it is unlikely that such a breach of Personal Data would pose a risk to your rights and freedoms. If the Personal Data breach is likely to pose a high risk to your rights and freedoms, we will immediately notify you of the remedial measures taken in relation to the Personal Data breach and notify the affected parties and relevant authorities.

If you believe that the security of your Personal Data has been compromised, or if you want to know more about our data protection measures, please contact us using the contact information provided in this Policy.

Part 6. How we protect your rights

We want to make sure that you are fully aware of all your rights as a data subject. In accordance with the relevant laws and regulations of Thailand, as well as common practices in other countries and regions, you have the following legal rights with respect to your Personal Data:

Section 1. The right to access, obtain a copy of and receive

Pursuant to Sections 30 and 31 of PDPA, you are entitled to request access to and obtain a copy of the Personal Data related to yourself, subject to the exceptions provided for by law.

You can request access to and obtain a copy of your Personal Data by operating in the DEEPAL: "Home"-"Personal Center".

You can send an email to compliance@changan.co.th to make an application for accessing and obtaining a copy of your Personal Data.

You can send us a request to make an application for accessing and obtaining a copy of your Personal Data by sending an email to compliance@changan.co.th

If technically feasible and in accordance with the conditions set by the relevant authorities, we may, at your request, transfer a copy of your Personal Data collected by us directly to you or to the controller of your Personal Data designated by you, and we will provide you with the appropriate means of transfer.

Section 2. The right to object

Pursuant to Section 32 of PDPA, you have the right to object the collection, use, or disclosure of your Personal Data in question, e.g., you have the right to object to direct marketing.

You can send us a request to object to the processing of your personal data by sending an email to compliance@changan.co.th .

Section 3. The right to erase or destroy

Pursuant to Section 33 of PDPA, you have the right to request us to erase or destroy your Personal Data, or anonymize the Personal Data to become the anonymous data which cannot identify you, directly or indirectly, based on the following circumstances:

1. If our processing of Personal Data in violation of laws and regulations

2. If the purpose for which your Personal Data is processed has been achieved, cannot be achieved or is no longer necessary for the achievement of that purpose (e.g. You are no longer the owner of CHANGAN AUTO product, etc.);

3. If we collect or use your Personal Data without your authorized consent or if you object the collection, use or disclosure of your Personal Data;

4. If our processing of your Personal Data in breach of our contract with you;

5. If we have ceased to provide a product or service or the retention period has expired;

6. If you have withdrawn your authorized consent for us to process your Personal Data;

7. Other cases stipulated by law.

You can send us a request to erase or destroy your personal data by sending an email to compliance@changan.co.th .

If you need to cancel your account, you can operate in DEEPAL: "Home" - "Personal Center" - "Account and Security " - "Account Cancellation". After logging out of your account, we will stop providing you with all DEEPAL products and services, and delete your Personal Data generated while using DEEPAL or make the Personal Data unable to identify you directly or indirectly, in accordance with the requirements of laws and regulations. If you are unable to cancel your account through the above methods, you can send us a request to cancel your account by sending an email to compliance@changan.co.th .

If we decide to respond to your request for erasure or destruction, we will also notify other entities that have access to your Personal Data through us at the same time and ask them to erase or destroy it, unless otherwise required by law or regulation, or if these entities have obtained your independently authorized consent.

Due to legal requirements or technical limitations, we may not immediately erase or destroy or anonymize the corresponding Personal Data from the system. During this period, we will securely store your Personal Data and will not proceed with any further processing, leaving it in a state where it cannot be retrieved or accessed.

Section 4. The right to restrict processing

Pursuant to Section 34 of PDPA, you have the right to request us to restrict the use of your Personal Data, where the following applies:

1. You contest the accuracy of the personal data, but please allow us to verify the accuracy of the Personal Data within a certain period.

2. The processing is unlawful and you object to the erasure of the Personal Data and request that the use of the Personal Data be restricted.

3. When it is no longer necessary to retain such Personal Data for the purposes of processing, but you have necessity to request the retention for the purposes of the establishment, compliance, or exercise of legal claims, or the defense of legal claims.

4. When we are pending verification or review to prove that the collection, use, or disclosure of the Personal Data based on an exemption or for the purpose of scientific, historical or statistic research in order to reject your objection request.

Section 5. The right to rectification

Pursuant to Section 35 of PDPA, if you find that your Personal Data processed by us is inaccurate or incomplete, you have the right to request us to rectify or supplement it.

You can improve your Personal Data through "Home"-"Personal Center"-"Account and Security".

If you are unable to rectify your Personal Data through the above method, you can send us a request to apply for rectification of your Personal Data by sending an e-mail to compliance@changan.co.th .

Section 6. The right to withdrawal of consent

You also have the right to give or withdraw your consent to the collection, use or disclosure of the Personal Data at any time. You can withdraw your consent by going to "Home" - "Personal Center" - "About Us" - "Privacy Policy" - click on "More Actions" in the upper right corner – click on "Withdraw Consent" and click "Confirmed". If you are unable to withdraw your consent in the above way, you can send us a request to withdraw your consent by sending an e-mail to compliance@changan.co.th . After you have withdrawn your consent, we will no longer process the Personal Data within the scope of your withdrawal of consent, but the decision to withdraw your consent will not affect the collection, use or disclosure of the Personal Data to which you have already consented.

Section 7. Responding to your requests and complaints above

In order to protect your personal data rights and for data security, we may require you to verify your identity through a written request, etc. before accepting your request, and we will provide feedback on your request within thirty days of the date of the request. It may sometimes take longer than thirty days if your request is particularly complex or if you have already made many requests. In such cases, we will notify you and keep you updated.

In principle, we will not charge you any fees for reasonable requests, but we will charge a fee for multiple, repeated requests that exceed reasonable limits, depending on the circumstances. We may refuse requests that are unfounded, require excessive technical means (such as the development of new systems or fundamental changes to existing current practice law), pose a risk to the legitimate interests of others, or are highly impractical.

Pursuant to PDPA , if you believe that our collection, use and disclosure of your Personal Data is unlawful or does not comply with applicable data protection laws, you have the right to file a complaint with the competent authorities in Thailand: กระทรวงดิจิทัลเพื่อเศรษฐกิจและสังคม MDES.

Section 8. We may not be able to respond to your request in the following circumstances:

1. Related to the fulfillment of our statutory obligations;

2. Directly related to national security, national defense security, financial security, etc;

3. Related to public safety and significant public interest;

4. Directly related to crime investigation, prosecution, trial and execution of judgment;

5. We have sufficient evidence to show that you have subjective malicious intent or abuse of rights;

6. Responding to your request will lead to serious damage to your legitimate rights and interests or those of other individuals or organizations.

7. Other circumstances stipulated by law.

Part 7. How we protect the Personal Data of minors

Our products or services are primarily intended for adults. Minors under the age of 20 may not create their own accounts without the consent of a parent or other guardian. We do not knowingly collect Personal Data from users under the age of 20 without the prior consent of a parent or other guardian. If we learn that we have inadvertently collected the Personal Data of any minor under the age of 20, we will delete the relevant data immediately or process the minor's Personal Data only if we can rely on a legal basis other than consent.

Part 8. How we use Cookies and similar technologies

Cookies are small file that are temporarily stored on your computer or mobile device to recognize and remember you. It is sent to your browser and stored on your computer's hard drive, tablet, or mobile device. When you visit our service providers, business partners and our websites and emails we received, we may collect data about you through Cookies or similar technologies. As there is no detailed regulation in Thailand, a more detailed description of what Cookies are and how they work can be found in the EU Cookies Guide: Cookies policy (europa.eu).

The use of Cookies and similar technologies helps us to analyze your usage to improve your experience. We undertake that we will not use cookies for any purpose other than that set out in this Policy.

Part 9. How we maintain updates to this Policy

We reserve the right to modify this Policy at any time. If such changes are material, we will automatically consider your consent withdrawn until you agree again to the terms of our Privacy Policy. We will not reduce your rights under this Policy without your express consent.

To better protect your Personal Data, we encourage you to check back frequently to keep up to date with our Privacy Policy. We will periodically post any changes to this Policy on this page. We will archive older versions of this Policy, which can be accessed via "Home" - "Personal Center" - "About Us" - "Privacy Policy" - click on "Historical Versions" in the upper right corner.

For major changes, we will also provide more prominent notice (including, but not limited to, special notices on browsing pages, pop-up notices, etc.) and request your consent again if necessary or required by law.

Major changes within the meaning of this Policy include, but are not limited to:

1. When there is a significant change in our service model, such as the purpose of processing Personal Data, the type of Personal Data processed, the way Personal Data is used, etc.;

2. When we undergo significant changes in our ownership structure, organizational structure, etc., such as changes of data controllers due to business restructuring, bankruptcy and mergers and acquisitions, etc.;

3. When there is a change in the main targets of in the cases of disclosure of Personal Data, cross-border and other circumstances;

4. When there is a significant change in your right to participate in the processing of Personal Data and the way of exercising your right;

5. When there is a change in the department, the contact information and complaint channels responsible for handling Personal Data security.

Part 10. How to contact us

When and if you have any questions, comments or suggestions about this Policy or matters relating to your Personal Data, or if you wish to exercise any of your rights, you can contact us in the following ways:

Email: compliance@changan.co.th

Address: No.9 G Tower Grand Rama 9, 22nd Floor, Unit GN2201-04, Rama 9 Road, Huaykwang Sub-district, Huaykwang District, Bangkok Metropolis

Zip code: 10320

We will respond as soon as possible after receiving your information and thank you for your patience and understanding. Given the complexity and volume of requests, this period may be extended when necessary.