Privacy Policy

BYD (hereinafter BYD or “we”, “our”, or “us”) may collect, store, process and use your personal data for providing, maintaining and improving our service as well as upgrading the service quality and optimizing service functions. This Privacy Policy provides information on the personal data processing activities by us. Our Privacy Policy covers http://www.byd.com/en-th.
We highly value and respect our customer’s privacy. This Privacy Policy aims to better explain how we use your personal data and your legitimate rights. It is recommended to read it thoroughly before you accept our service.
I.  Personal Data We Collect and Why
II.  How We Share Your Personal Data
III.  Rights in relation to Personal Data
IV.  How to Make Requests
V.  Retention Period
VI.  Purpose Limitation
VII.  Cookies and Other Tracking Technologies
VIII. Security
IX.  International Transfer
X.  Changes To This Privacy Policy
XI.  Contact Us
This Privacy Policy does not apply to our authorized retailers, or third parties to whom you directly provide your information including but not limited to, subscription services, insurance companies, or other third parties. These entities are independent of us and responsible for their own collection of information. Please refer directly to those entities and their privacy policies for more information.
I.- Personal Data We Collect and Why
“Personal data” refers to any data or information from which an individual may be directly or indirectly identified (“Personal Data”). When we provide our website, products or services, we have a need to process Personal Data. When you:
 
Access and Use our Website: We collect your following Personal Data to provide our website to you:
(a) your Internet Protocol (IP) address,
(b) your location information (such as may be determined from your Internet Protocol (IP) address),
(c) your internet activity information (such as usage information),
(d) your basic contact information (such as name, telephone number, E-mail address) that you enter when you use our service in our Website,
(e) other information (such as the content of your inquiry, reservation, Forms submission) when you use our service in our Website.
.
II.- How We Share Your Personal Data
Personal Data is being accessed or transferred by BYD and other third parties such as []'s affiliates, creditors, embassies, governments, BYD distributors, service providers and collection agencies.
We strictly adhere to applicable laws and do not sell your Personal Data to any third party.. We may also use or share your Personal Data in a de-identified or aggregate manner. The table below illustrates who we may share your personal data with:
Categories of Recipients Description Reason for Sharing
BYD’s global affiliates and subsidiaries, including our parent company, overseas offices, and cross-border group entities that are directly or indirectly owned, controlled, or substantially invested in by BYD. The sharing of information includes the internal transfer, centralized hosting, or granting of system access privileges to your data across our corporate group network, executed via encrypted enterprise channels and unified data governance platforms. Centralized Hosting & Cybersecurity: To store, host, and manage personal data within central corporate group databases and global CRM systems, ensuring unified data architecture, IT infrastructure stability, and robust cybersecurity protocols across []’s global network.
Global Supply Chain & Logistics: To facilitate global supply chain coordination, vehicle manufacturing customization, international logistics tracking, and customs clearance necessary to fulfill specific vehicle configurations ordered by the data subject.
Corporate Governance & Legal Compliance: To conduct mandatory corporate auditing, risk assessment, financial compliance reviews, anti-money laundering (AML) screening, and legal dispute management in accordance with group-level corporate governance policies and applicable multinational regulations.
The distributors or dealers of BYD,as well as selected service providers who have entered into formal data protection and cooperation agreements with BYD. The sharing of information includes the transfer and transmission of your contact details and preferences to these authorized networks through BYD's secured customer relationship management (CRM) systems or secure data transmission protocols.

Lead Dispatch & Localized Services: To dispatch sales leads to authorized local networks, enabling localized distributors and dealers to contact the data subject directly to arrange, coordinate, and execute requested services, including but not limited to, booking test rides or test drives.Vehicle Delivery & Registration: To enable local dealerships to handle vehicle preparation, final delivery, vehicle registration with the Thailand Department of Land Transport (DLT), and to assist the data subject with localized auto-financing or insurance applications.
After-Sales & Telematics Support: To administer after-sales maintenance, process warranty claims, activate localized telematics/eSIM services, and dispatch urgent safety recall notifications to ensure driver safety and vehicle roadworthiness.
Law enforcement and government authorities
Including but not limited to judicial authorities, tax bureaus, and industry regulators.


Disclosure of information as required by law, or when otherwise appropriate.

Statutory Compliance: To comply with applicable laws, judicial rulings, administrative orders, or mandatory regulatory reporting requirements.
Other Third-Party Partners
Including IT and infrastructure hosting providers, payment gateways, financial institutions, logistics partners, and professional advisors (e.g., lawyers and auditors). The sharing of information includes the transfer, transmission, or opening of access to your data to these designated third parties through secured integration channels, website features, or verified service platforms. Contractual Necessity: We disclose this information solely as a strict contractual necessity to perform our services, maintain our website operations, execute transaction requests, or take essential pre-contractual steps at your direct request.
When third parties are given access to your personal data, we will take the required contractual, technical and organizational measures to ensure that your personal data are only processed to the extent that such processing is necessary.
In all cases, BYD will expressly state why such information is necessary, so that you may provide the information at your own discretion. BYDwill not disclose Personal Data provided by you to any party, other than BYD itself, without prior permission from the you.
III.- Rights in Relation to Personal Data
You generally have the right to ask us:
(a) for access to and a copy of your personal data that we hold; further including to request disclosure of the source of your personal data collected without your consent, to access privacy notices and Records of Processing Activities (RoPA) related to you.
(b) that some of your personal data is provided to you or sent to another data controller in a commonly used, machine readable format;
(c) to update or correct your personal data in order to make it accurate;
(d) to delete your personal data from our records in certain circumstances;
(e) to restrict the processing of your personal data in certain circumstances;
(f) to object to us processing your personal data in certain circumstances(e.g. in case we process your data for direct marketing purposes).
(g) withdrawal consent for marketing;
You have the right to submit a request to exercise your rights under the PDPA. Where we receive such a request, we will provide information on the action taken without undue delay and in any event within the applicable statutory period prescribed by the Applicable Data Protection Law (such as within the period required under the Thailand PDPA) after successfully verifying your identity and receiving all necessary documentation.If we refuse to comply with your request or require an extension as permitted by law, we will notify you of such decision and the specific reasons thereof within the timeframe required by the Applicable Data Protection Law, and record such actions accordingly.
Obtaining basic electronic copies of your personal data is generally free of charge. However, we may charge a reasonable administrative fee if your request involves special physical media, delivery costs, or if the requests are manifestly unfounded or excessive.

For electronic, telephone calls or text communications, if you no longer want to receive promotional-related emails, you may opt out of receiving them by clicking the unsubscribe button in your mails. If you would like to stop receiving promotional-related or automated text messages from us, you can follow the instructions in the text message you received. If you receive a marketing-related call from us and do not want to receive similar calls in the future, please ask to be placed on our “do not call” list. Please note that we may still send you safety messages or product service issues even if you opt out of receiving marketing messages.
These rights may be limited in some situations – for example, where we can demonstrate that we have a legal requirement to process your data or if making the information available to you would reveal personal data about another person or if we are legally prevented from disclosing such information. In some instances, this may mean that we are able to retain data even if you withdraw your consent.
We hope that we can satisfy any queries you may have about the way we process your data. If you have any concerns about how we process your data you can contact us as described below in the section IV “HOW TO MAKE REUQESTS”.
In the event you still have unresolved concerns, you also have the right to lodge a complaint with a supervisory authority, in particular the data protection authority in the jurisdiction of your habitual residence or place of work.
Finally, please note that where we require personal data to comply with legal or contractual obligations, then provision of such data is mandatory: if such data is not provided, then we will not be able to manage our contractual relationship, or to meet obligations placed on us. In all other cases, provision of requested personal data is optional.
IV. PRIVACY CLAUSE FOR MINORS AND PROTECTED PERSONS
Scope and Definitions
This Section governs the processing of personal data of special categories of data subjects in Thailand under the Personal Data Protection Act (PDPA):
Minors: Individuals under 20 years old who are not married.
Incompetent Persons: Individuals under court-appointed Guardianship.
Quasi-incompetent Persons: Individuals under court-appointed Curatorship.
Our website, vehicle services, and applications (collectively, "Automotive Services") are strictly intended for individuals who have reached the legal driving age and possess full legal capacity.
Capacity-Based Consent Mechanisms
We implement the following consent procedures based on the data subject's legal status:
Minors Under 10: We do not knowingly collect their data. Any processing must obtain the sole consent of the parent or legal guardian.
Minors Aged 10 to 20: Processing must obtain the joint consent of both the minor and the parent/guardian. Exception: Minors cannot submit online requests for physical test drives or vehicle purchases without the explicit joint consent and physical accompaniment of a parent/guardian.
Incompetent Persons: Processing must obtain the express consent of their legal Guardian.
Quasi-incompetent Persons: Processing must obtain the express consent of their legal Curator.
Age Verification and Data Deletion
We deploy reasonable technical measures (such as age-gating and driving license checks) to verify user capacity prior to data collection.
If we discover that we have inadvertently collected data from a minor or protected person without the required legal consent, we will immediately suspend the account/service and permanently delete such data, unless an alternative lawful basis under the PDPA applies.
Exercise of Rights by Guardians
Authorized parents, guardians, or curators may act on behalf of the data subject. They can contact our Data Protection Officer (DPO) at any time to exercise statutory rights under the PDPA, including the right to access vehicle usage logs, rectify accounts, erase location history, withdraw consent, and request data portability.
V.- How to Make Requests  
If you would like to access, correct, and delete any Personal Data we hold about you, or exercise any other data subject rights available to you under applicable laws or regulations with the purpose of protecting Personal Data (“Applicable Data Protection Law”), you may submit a request via e-mail at [[]thailand@[].com].
You may submit your request by physical channels:
In-Person Submission: You may submit a written request in person at our business premises located at: 399 Interchange 21 Building, 30th Fl., Room No. 3001-3009, Sukhumvit Road, Khlong Toei Nuea Sub-district, Watthana District, Bangkok 10110 Thailand.
Registered Mail: You may send your signed request form and identity verification documents via registered mail to: bydthailand@byd.com. 
VI.- Retention Period
BYD will not retain Personal Data longer than necessary to fulfil the purposes for which it was collected. We shall delete, destroy, or permanently anonymize the collected Personal Data after the necessary period to achieve the purposes described in this Policy has passed, or to comply with contractual obligations, or as permitted or required by the Applicable Laws.
[] will retain your Personal Data for the duration necessary to fulfill the purposes outlined in this Policy. Specifically, we retain your data for the duration of your relationship with us, and for an additional period of up to 10 years following the termination of such relationship, in order to comply with statutory accounting and tax retention requirements under Thai law, and to maintain necessary records for the establishment, exercise, or defense of legal claims within the applicable statutory limitation periods.
VII.-Purpose Limitation
The Personal Data may only be processed to the extent necessary for the described purposes. Personal Data may in principle not be processed for other purposes other than that for which the Personal Data were collected. If there is a necessity or need to process Personal Data for other purposes, it shall be investigated by [] whether the purposes of the intended data processing are compatible with the original purposes. [] will provide you with information on that other purpose prior to that further processing.
VIII.-Cookies and Other Tracking Technologies
Our websites also collect information, via cookies, web beacons, pixels, tags or other tracking technologies, such as your Internet Service Provider and Internet Protocol (IP) address, the date and time you access our website, the pages you have accessed while visiting our website, and the Internet Protocol (IP) address from which you accessed our website. Some cookies exist only during a single session and some are persistent over multiple sessions over time. We use these technologies to remember user preferences, maximize the performance of our website and services, provide you with offers that may be of interest to you, measure the effectiveness of our email campaigns and to personalize online content.
You may refuse or delete cookies. If you refuse or delete cookies, some of our website functionality may be impaired. If you previously accepted cookies and directed us to share your information on one of our sites, you can change your cookie preference by clicking on the cookie settings link in the footer of that site. Please refer to your browser’s Help instructions to learn more about how to manage cookies and the use of other tracking technologies. Some browsers have incorporated Do Not Track (“DNT”) preferences. If you set your browser to signal that you do not wish to be tracked online, we will honour your preference by disabling targeting and social media cookies unless you explicitly consent through our cookie banner to enable these categories. For information on how we use cookies across our digital platforms, please see our Cookie Policy.
We have integrated the consent management tool "consent manager" (www.consent manager.net) from consent manager AB (Håltgelvågen 1b, 72348 Västerås, Sweden, mail@consentmanager.net) on our website to obtain consent for data processing and use of cookies or comparable functions. With the help of "consent manager" you have the possibility to give your consent for certain functionalities of our website, e.g. for the purpose of integrating external elements, integrating streaming content, statistical analysis, measurement and personalized advertising. With the help of “consent manager” you can grant or reject your consent for all functions or give your consent for individual purposes or individual functions. The settings you have made can also be changed afterwards. The purpose of integrating “consent manager” is to let the users of our website decide about the above-mentioned things and, as part of the further use of our website, to offer the option of changing settings that have already been made. By using “consent manager”, personal data and information from the end devices used, such as the IP address, are processed by consent manager. In addition, the processed information may also be stored on your device.
Our legitimate interests in processing lie in the storage of user settings and preferences with regard to the use of cookies and other functionalities. "Consent manager" stores your data as long as your user settings are active. After two years after making the user settings, the consent will be asked again. The user settings made are then saved again for this period.
You can object to the processing. You have the right to object to reasons arising from your particular situation. To object, please send an email to mail@consentmanager.net or contact us as provided in Section XI below.
IX.- Security 
We strive to maintain the appropriate of security and [] has put in place robust technical and organizational measures for the protection of your data in accordance with the current, general state of technology, especially to protect the data against loss, falsification or access by unauthorized third persons. However, data transmission risks over the internet cannot be eradicated. While we strive to effectively mitigate such risks and appropriately manage access control, absolute security cannot be guaranteed. Once we have received your personal data, we will use strict procedures and security features to appropriately manage unauthorized access. In the unfortunate event that a personal data security incident occurs, we will report it promptly and take remedial measures in accordance with the requirements of the law and regulatory authorities.
X.- International Transfer
We are a global company, and we operate internationally. Your Personal Data will be transferred to and stored at our data center located in Singapore. We comply with Applicable Data Protection Law on the transfer of information between countries to help ensure your Personal Data is protected as described in this Privacy Policy, wherever it may be.
We may rely on various legal grounds to collect, use, and otherwise process your information, including but not limited to: your consent; that the information is necessary for providing our website to you; to comply with a legal obligation; to protect your, or someone else’s vital interests; or for a legitimate interest that is balanced against your rights and interests.
XI.-Changes to This Privacy Policy
We may update this Privacy Policy according to changes in our business functions and measures concerning the protection of personal information. If we make changes to this Privacy Policy, we will post the updated Privacy Policy and update the “Last Updated” date. We will also notify you through our website. Where changes to this Privacy Policy will have a fundamental impact on the nature of the processing or otherwise have a substantial impact on you, we will give you sufficient advance notice so that you have the opportunity to exercise any rights you have.  
XII.- Contact Us
If you have any questions or comments about this Privacy Policy, please do not hesitate to contact us at:
E-mail: bydthailand@byd.com
Postal: 399 Interchange 21 Building, 30th Fl., Room No. 3001-3009, Sukhumvit Road, Khlong Toei Nuea Sub-district, Watthana District, Bangkok 10110 Thailand