Data Subject Rights Request

Your Rights Under PDPA

The Personal Data Protection Act B.E. 2562 (PDPA) grants data subjects the following rights over personal data held by Elefy (operated by [Company Name] as data controller):

1. Right of Access — request a copy of personal data Elefy holds about you.
2. Right to Rectification — request correction of inaccurate or incomplete data.
3. Right to Erasure — request deletion of your data where there is no lawful basis to retain it.
4. Right to Restriction of Processing — request that processing be limited in certain circumstances.
5. Right to Data Portability — receive your data in a structured, machine-readable format where technically feasible.
6. Right to Object — object to processing based on legitimate interests or direct marketing.
7. Right to Withdraw Consent — where processing is based on consent, withdraw it at any time without affecting prior lawful processing.

How to Submit a Request

Submit your request by email to [email protected]. Please include:

• Your full name
• Your registered email address
• The type of request (e.g. access, erasure, rectification)
• Sufficient detail to identify the data concerned

Elefy will respond within 30 days of receipt. For complex requests, this period may be extended by a further 30 days, and you will be notified of the extension and reasons.

Identity Verification

To protect your personal data, Elefy may ask you to verify your identity before processing a rights request. Requests submitted by a third party on your behalf require written authorisation signed by you as the data subject.

Fees

Rights requests are generally free of charge. Elefy reserves the right to charge a reasonable administrative fee for requests that are manifestly unfounded or excessive.

Right to Lodge a Complaint

If you believe your PDPA rights have been violated, you may lodge a complaint with the Personal Data Protection Committee (PDPC):

• Website: https://www.pdpc.or.th
• Telephone: 02-142-1033