Privacy policy
1. Who is the controller of your personal data
The website sp-bancarcare.com (SP Ban Carcare) is operated by S P CAR CARE HOUSE CO., LTD. (“we”), which is the controller of the personal data processed through this website under the Personal Data Protection Act B.E. 2562 (2019) (PDPA).
- Controller
- S P CAR CARE HOUSE CO., LTD.
- Tax ID
- 0-3055-38001-19-6
- Registered address
- 553/2, 553/8, 553/15 Mittraphap Road, Nai Mueang, Mueang Nakhon Ratchasima Nakhon Ratchasima 30000
- Telephone
- 044-262-941 · 044-259-147 · 086-465-8286
- Opening hours
- Monday–Saturday 08:00–17:00 · Closed Sunday
You can contact us about personal data through the channels above (telephone, post to the address above). We have not announced a separate data protection officer (DPO), so every request reaches us directly through these channels.
2. The data we process
This website presents the business. It has no form that sends your personal data to our systems, no warranty registration or warranty check, and it does not collect vehicle details or chassis numbers. The data involved is as follows.
- Technical data created when you open the website
- IP address, browser and device type, the page opened, the time and the server’s response code. This is processed by Cloudflare, which hosts the website and delivers it over its network for us, including the system’s own logs of operation and errors, to keep the website working and secure.
- Settings remembered in your browser
- Your cookie choice, the light or dark theme and the language are kept in your browser’s storage (localStorage: preedanext-analytics-consent · preedanext-theme · preedanext-language). They are not sent to us.
- Anonymous usage data (only if you accept)
- When you choose Accept on the cookie bar, PostHog records page views and page exits, page speed (Web Vitals), device and browser type, the referring site, campaign parameters (utm_*) and advertising click ids (such as gclid, fbclid), clicks on the call, map buttons, and a recording of how the screen is used (session recording) in which every input field is masked. It does this without identifying you (no person profile is created). PostHog keeps a random browser id in a cookie and in localStorage (names starting with ph_), created only after you accept. Campaign parameters that arrive with the first link wait in the tab’s sessionStorage (preedanext-landing-attribution) and are not sent anywhere until you accept.
- Page error reports (before and after consent)
- If you have not accepted, or you decline, the page can send PostHog only error reports (exceptions). It uses no cookie, stores nothing on your device, creates no profile, sends no page views and records no screen. It cuts everything after ? and # from the page address, masks email addresses, phone numbers, long digit runs and tokens, and switches off IP geolocation (GeoIP).
- What you tell us by telephone or in person
- When you call us or come to see us, we note what you give us and what is needed to answer or arrange an appointment, such as your name, telephone number and what you need. This happens outside the website and falls under this policy as far as contact is concerned.
Links on these pages to other websites or apps (such as maps (Google Maps)) take you out of our website. Those providers handle data under their own policies.
3. Purposes and lawful basis
We do not use your data for any other purpose than those stated, and we do not sell your personal data.
- To keep the website working and secure and to fix errors (technical data, system logs). Lawful basis: our legitimate interests (PDPA section 24 (5)).
- To remember what you chose (theme, language, cookie choice). Lawful basis: legitimate interests, so that the website works the way you chose.
- To measure how the website is used so that we can improve its content, speed and contact channels. Lawful basis: your consent (PDPA section 19), given through the cookie bar and withdrawable at any time.
- To receive anonymous page error reports before you choose, so that the website stays usable. Lawful basis: legitimate interests (section 24 (5)). This data does not identify you.
- To answer questions, give information and arrange appointments when you contact us. Lawful basis: taking steps at your request before a contract, and our legitimate interest in answering people who contact us.
- To comply with the law and to establish, exercise or defend legal claims. Lawful basis: legal obligation and legitimate interests.
5. How long we keep data
- Data held in your own browser: stays until you clear or change it. We hold no copy.
- System logs at Cloudflare: for the period set by Cloudflare in the service we use, kept only as long as needed for security and fixing errors.
- Measurement data and error reports at PostHog: for the period set in our PostHog account, and deleted after that period.
- Messages and details you send to contact us: kept as long as needed to answer and follow up, and for the limitation periods or legal duties that apply, then deleted or destroyed securely.
7. Your rights
Under the PDPA you have the following rights over the personal data we hold about you.
- The right to access your data and to obtain a copy.
- The right to receive your data in a readable format and to have it sent or transferred (where the law provides).
- The right to object to the processing of your data.
- The right to have your data erased, destroyed or made unidentifiable.
- The right to have the use of your data restricted.
- The right to have your data corrected so that it is accurate and up to date.
- The right to withdraw consent you have given, at any time, without affecting processing done before the withdrawal.
- The right to complain to the Personal Data Protection Committee Office (PDPC) if you believe the processing of your data breaches the law.
You can exercise these rights by contacting us through the channels in section 1 (telephone, post to the address above). We will act and tell you the outcome without delay and within 30 days of receiving your request, as the PDPA requires. We may first ask for information to confirm who is asking, and we may refuse a request where the law allows, in which case we will tell you why.
8. Withdrawing consent
You can withdraw the consent you gave on the cookie bar at any time, and as easily as you gave it: open the “Cookie settings” page (the link at the foot of every page) and press “Decline and withdraw consent”. PostHog stops recording at once. Declining does not affect reading the website or contacting us. You can also clear this website’s data in your browser, and the cookie bar will ask again.
9. Security and changes to this policy
This website is served over an encrypted connection (HTTPS), and we limit access to the data we hold to those who need it for their duties.
We may amend this policy when the website or the law changes. The latest version is on this page with its date (7 October 2026). If an amendment significantly affects your rights we will say so on the website.