Privacy Policy

Background and Purpose

To affirm our commitment to protecting personal data and to ensure that the collection, use, or disclosure of personal information belonging to complainants, members, or any individuals under the care of the Kratai Hope Foundation (“the Foundation”) complies with the Personal Data Protection Act B.E. 2562 (2019), the Foundation has established this Privacy Policy to guarantee that all personal data is safeguarded in accordance with the law.

Status of the Data-Collecting Organization

The Kratai Hope Foundation is a public charitable organization dedicated to supporting youth and promoting the development of martial arts. Its objectives are as follows:

To promote and support the development of combat sports such as Muay Thai , Boxing, Judo, Jujitsu , and Mixed Martial Arts (MMA), both in Thailand and internationally.
To promote and support the development of underprivileged children, youth, and people by providing educational and living support during their studies, as well as opportunities to compete in combat sports, enabling them to pursue stable careers or advance to national and international competitions.
To promote and support assistance in every way to individuals, organizations, or educational institutions by providing scholarships, equipment, training facilities, assets, or any form of support that benefits the field of combat sports such as Muay Thai, Boxing, Judo, Jujitsu, and Mixed Martial Arts (MMA).
To promote and support cooperation with institutions and organizations, both domestic and international, whose objectives involve the development and organization of competitions related to combat sports.

Collection of Personal Data

Data Collection Channels

The Foundation collects personal data directly from you through various channels, such as email, the Foundation’s website, social media platforms (e.g., Facebook, Instagram, Twitter, YouTube, or LINE), complaint forms, membership applications, telephone, mail, training sessions, events, seminars, or meetings. Personal data may also be collected from other sources, including consumer protection organizations or networks, search engines, social media, government agencies, or other external parties.

Types of Personal Data Collected

Personal information such as title, first name, last name, nickname, gender, age, nationality, and signature.
Contact information such as address, phone number, email, social media account names (e.g., LINE ID or Facebook), and records of correspondence or communication.
Information or copies of documents such as national ID card, household registration, name change certificate, vehicle registration, and driver’s license.
Complaint-related information such as details of inquiries or complaints, requested assistance, and the purpose of the complaint.
Account information such as user account details and usage history.
Technical information such as IP address, Cookie ID, and website activity log.
Other information such as photographs, video recordings, survey data, and any other details considered personal data under the Personal Data Protection Law.
Sensitive personal data: sensitive information appearing on identification documents, such as religion or disability status.

Personal Data of Third Parties

If you provide the Foundation with personal data of third parties (such as directors, authorized representatives, company signatories, parents, spouses, children, or in cases where you file a complaint on behalf of another person), you must obtain their consent and inform them of the details in this policy regarding the collection, use, disclosure, and/or cross-border transfer of their personal data.

Personal Data of Minors, Quasi-Incompetent Persons, and Incompetent Persons

If the data subject is under 20 years of age or has legal limitations on capacity, the Foundation may collect, use, or disclose their personal data only with the consent of a legal guardian. In cases where consent is required and the minor cannot legally provide it themselves, consent must first be obtained from the parent, guardian, or curator, as applicable or as permitted by law.

If the Foundation becomes aware that personal data has been collected from a minor, quasi-incompetent person, or incompetent person without the consent of a legal guardian, custodian, or curator (as applicable), the Foundation will promptly delete such personal data as soon as practicable.

Use of Personal Data

The Foundation will collect, use, or disclose your personal data only as necessary or as required by law, for the following purposes:

To create and manage user accounts.
To improve services or enhance user experience.
For organizational management purposes.
To comply with the Terms and Conditions.
To establish, comply with, exercise, or defend legal claims.
For communication and coordination purposes, including receiving complaints through various communication channels.
To create and maintain a consumer complaint database, as well as for reporting, statistical, research, data analysis, and feedback collection purposes.
For public communication purposes.
To comply with laws and regulations of government authorities.

This applies except in cases where the Foundation specifies that the collection, use, or disclosure of personal data is based on your consent.

Retention Period of Personal Data

The Foundation will retain your personal data for as long as necessary while you are a system user or maintain a relationship with the Foundation, or for as long as required to fulfill the purposes stated in this policy. Retention may continue thereafter if required by law. Once the data is no longer needed or the retention period has expired, the Foundation will delete, destroy, or anonymize your personal data.

Disclosure of Personal Data

The Foundation may disclose your personal data to others with your consent or as permitted by law, as follows

Internal Management: The Foundation may disclose your personal data within the organization as necessary to improve and develop its services.
Consumer Protection Organizations or Agencies: The Foundation may disclose your personal data to relevant organizations or agencies for problem resolution, consultation, or cooperation in consumer protection efforts.
Public Communication: The Foundation may disclose certain personal data related to the nature or facts of a case for consumer protection purposes, only as necessary for educational or case study use. However, in cases involving sensitive information, such as name or surname, disclosure will be made only with your explicit consent or as permitted by law.
Donors and Sponsors: The Foundation may disclose certain personal data to its donors or sponsors as necessary to comply with funding requirements.
Law Enforcement: In cases required by law or upon request from government authorities, the Foundation will disclose your personal data as necessary to such authorities, including courts and government agencies.

Cross-Border Transfer of Personal Data

The Foundation may disclose or transfer your personal data to individuals, organizations, or servers located outside the country. The Foundation will implement appropriate measures to ensure that the destination country maintains an adequate level of personal data protection or as otherwise permitted by law.

Advertising and Marketing

For your benefit in receiving the Foundation’s products or services, the Foundation may send information or newsletters to your email for the purpose of sharing relevant updates or offers. If you no longer wish to receive such communications, you may contact the Foundation via email to unsubscribe.

Policy on Tracking Technologies and Cookies

The Foundation uses tracking technologies or cookies. Allow the use of tracking technologies, cookies, or similar tools, and your website experience will be more convenient, as these technologies store information about the websites you have visited or accessed. If you do not wish to have tracking technologies or cookies stored on your computer, you may configure your browser settings to reject cookies before using the Foundation’s website.

The website uses collected cookie data for statistical analysis and/or other Foundation activities to improve its products and services.

Personal Data Security Measures

Protection of Personal Data Security

The Foundation will maintain the security of your personal data in accordance with the principles of confidentiality, integrity, and availability to prevent loss, unauthorized access, use, alteration, modification, or disclosure. The Foundation will also implement security measures that include administrative, technical, and physical safeguards to control and restrict access to personal data.

Personal Data Breach Notification

In the event of a personal data breach, the Foundation will notify the Office of the Personal Data Protection Committee without delay and, where feasible, within 72 hours of becoming aware of the incident. If the breach poses a high risk to your rights and freedoms, the Foundation will inform you promptly of the breach and the remedial measures through appropriate channels such as the website, SMS, email, phone, or mail.

Amendments to the Privacy Policy

The Foundation may amend this policy from time to time. You can review the updated terms and conditions of this policy on the Foundation’s website.

This policy was last revised and became effective on June 1, 2022.

Privacy Policies of Other Websites

This Privacy Policy applies only to the services and website operated by the Foundation. If you visit other websites, even through links on the Foundation’s website, the protection of your personal data will be governed by the privacy policies of those respective websites, which are independent of the Foundation.

Consequences of Not Providing All or Part of the Required Information

If you choose not to provide your personal data to the Foundation, it may affect your ability to receive certain services or assistance. The Foundation may be unable to process your requests, provide guidance, or deliver its services as intended, which may result in inconvenience.

Rights of the Data Subject

Under the Personal Data Protection Law, you are entitled to the following rights:

right to withdraw consent If you have given consent for the Foundation to collect, use, or disclose your personal data — whether before or after the enforcement of the Personal Data Protection Law — you have the right to withdraw your consent at any time. However, the withdrawal of consent will not affect the collection, use, or disclosure of data that was lawfully consented to prior to the withdrawal.
Right to Access: You have the right to access your personal data under the Foundation’s responsibility and request a copy of such data. You may also request that the Foundation disclose how it obtained your personal data.
Right to Data Portability: You have the right to request your personal data in a structured, commonly used, and machine-readable format when such data is processed automatically. You also have the right to request that the Foundation transfer this data to another data controller where technically feasible, or to receive the transferred data directly, unless technical constraints prevent such transfer.
Right to Object: You have the right to object at any time to the collection, use, or disclosure of your personal data if such processing is carried out based on the Foundation’s or another party’s legitimate interests, beyond what you could reasonably expect, or if it is conducted for public interest purposes.
Right to Erasure/Destruction: You have the right to request the deletion or destruction of your personal data, or for it to be anonymized, if you believe that your data has been collected, used, or disclosed unlawfully, if it is no longer necessary for the purposes stated in this policy, or if you have exercised your right to withdraw consent or object as mentioned above.
Right to Restriction of Processing: You have the right to request the temporary suspension of the use of your personal data while the Foundation is verifying your request to correct or object to the processing of your data, or in other cases where the Foundation is required by law to delete or destroy your data but you request that its use be restricted instead.
Right to Rectification: You have the right to request that your personal data be corrected, updated, completed, and kept accurate to prevent any misunderstanding or inaccuracy.
Right to Lodge a Complaint: You have the right to file a complaint with the relevant legal authorities if you believe that the collection, use, or disclosure of your personal data has been carried out in violation of, or in non-compliance with, applicable data protection laws.

You may exercise your rights as a data subject by contacting the Foundation’s Data Protection Officer using the contact details provided at the end of this policy. The Foundation will inform you of the outcome within 30 days from the date your request is received, following the form or procedure specified by the Foundation. If the Foundation denies your request, you will be informed of the reason for the denial through appropriate channels such as SMS, email, phone, or mail.

Contact Channels

For inquiries regarding personal data collected by the foundation or to exercise your data subject rights, please contact:

Data Controller

Kratai Hope Foundation
34/5 Moo 12, Plubpla Subdistrict, Mueang Chanthaburi District, Chanthaburi 22000 Thailand
Website: https://krataihope.org

Data Protection Officer

34/5 Moo 12, Plubpla Subdistrict, Mueang Chanthaburi District, Chanthaburi 22000 Thailand
email: [email protected]