Privacy Notice
Last Updated: 23/03/2026
BYD AUTO (THAILAND) COMPANY LIMITED and BYD AUTO COMPONENTS (THAILAND) COMPANY LIMITED (hereinafter BYD or “we”, “our”, “us”, or “Company”) may collect, store, process and use your personal data for providing, maintaining and improving our service as well as upgrading the service quality and optimizing service functions. We process, manage, use, and protect your Personal Data in accordance with this Privacy Notice (“Privacy Notice”). Our Privacy Notice covers
http://www.byd.com/en-th.
We highly value and respect our customer’s privacy. This Privacy Notice aims to better explain how we use your personal data and your legitimate rights. It is recommended to read it thoroughly before you accept our service.
1. Personal Data We Collect and Why
2. Legal Basis for processing Personal Data
3. How We Share Your Personal Data
4. Rights in Relation to Personal Data
5. How to Make Requests
6. Retention Period
7. Purpose Limitation
8. Cookies and Other Tracking Technologies
9. Security
10. International Transfer
11. Aggregated data (non-identifiable personal data)
12. Links to External Websites or Services
13. Changes To This Privacy Notice
14. Contact Us
This Privacy Notice does not apply to our authorized retailers, or third parties to whom you directly provide your information including but not limited to, subscription services, insurance companies, or other third parties. These entities are independent of us and responsible for their own collection of information. Please refer directly to those entities and their privacy policies for more information.
1.- Personal Data We Collect and Why
“Personal data” refers to any data or information from which an individual may be directly or indirectly identified (“Personal Data”). When we provide our website, products or services, we have a need to process Personal Data. When you:
1) Access and Use our Website:
We collect your following Personal Data to provide our website to you:
(a) your internet activity information : such as usage information;
(b) your basic information: such as name, telephone number, E-mail address that you enter when you use our service in our Website,
(c) other information: such as the content of your inquiry) when you use our service in our Website.
2) Use of QR Code Function (Thailand Market):
For Thailand market customers/users, we provide a "QR Code" function to facilitate sales follow-up and customer service. When you scan the exclusive QR code shared by our authorized staff members (including sales consultants and branch office employees) via digital channels (such as social media) or offline events (such as exhibitions and roadshows) and voluntarily fill in your personal information, we will collect the following Personal Data:
(a) Basic personal information: such as name, contact phone number, email address;
(b) Location information: such as region and street;
(c) Car purchase-related information: such as intended car model, intended showroom, car purchase budget, expected car purchase time.
We collect the above information for the purpose of, including but not limited to, generating customer leads, facilitating event registration, and enabling authorized BYD staff members to follow up on customer inquiries and provide targeted services on potential car purchase needs and provide targeted services (such as send news and promotional materials, product consultation, test drive reservations), thereby helping to convert potential customers into actual sales.
3) Other Sources:
We may collect your Personal Data from sources other than you, where such sources are legally permitted to disclose it. These may include government authorities, subsidiaries, companies within our corporate group or industry, service providers, co-service providers, business partners, contractors, subcontractors engaged by the Company, as well as publicly available sources such as social media or other public platforms.
2.- Legal Basis for processing Personal Data
The lawfulness of the processing of Personal Data is based on our legitimate interests and the necessity to perform our contractual obligations, including responding to your requests prior to entering into a contract, as well as complying with applicable laws. It may also be necessary for the establishment, exercise, or defense of legal claims. If you do not provide the required Personal Data, we may be unable to perform our contractual obligations to you.
In addition, where required, we will rely on your consent as the legal basis for processing your Personal Data, including for sending promotional communications or marketing materials. You may withdraw your consent at any time.
In cases where we need to process sensitive Personal Data, such as gender, health information, or criminal records, we will obtain your explicit consent and process such data in accordance with applicable Thai laws and under the supervision of competent authorities.
Where we process your Personal Data based on your consent, you have the right to withdraw your consent at any time by contacting us using the details provided in Section 4 and Section 5, unless such right is restricted by law or by a contract that benefits you as the data subject. However, withdrawing your consent may affect your ability to participate in promotions, marketing campaigns, or to use certain services.
The withdrawal of consent shall not affect the lawfulness of any collection, use, or disclosure of Personal Data carried out prior to the withdrawal taking effect.
3.- How We Share Your Personal Data
Personal Data is being accessed or transferred by BYD and other third parties such as BYD's affiliates, embassies, governments, BYD distributors, service providers and collection agencies.
We do not sell your Personal Data to any party for any purpose. We may use, transfer or disclose your Personal Data in a de-identified or aggregated form, which cannot be used to identify you and therefore is no longer considered Personal Data. The table below illustrates who we may transfer or disclose your personal data with:
Categories of Recipients Description Reason for Sharing
Affiliates and subsidiaries Companies that are owned or controlled by BYD, or where we have a substantial ownership interest. To assist, operate, enhance, and fulfil services on our behalf.
BYD contractors and sub-contractors, acting as our Processors and Sub-Processors in accordance with our instructions. Service providers that have entered into relevant agreements with BYD such as telecom providers. To support the provision of our services and perform processing activities on our behalf in accordance with our instructions and applicable laws.
The distributors or dealers of BYD Companies that have entered into relevant agreements with BYD, such as distributors or dealers, which include:
Rever Automotive Co., Ltd. The distributors or dealers will contact you to provide related services, such as booking test rides or test drive service.
Law enforcement and government authorities Disclosure of information as required by law, or when otherwise appropriate. To comply with applicable laws.
Authorized BYD Staff in Thailand (including sales consultants and branch office employees) Authorized BYD personnel in Thailand, including sale consultants and branch office employees, who provide QR codes To enable sales consultants to follow up on customer leads and provide targeted car purchase-related services.
When third parties are given access to your Personal Data, we will take the required contractual, technical and organizational measures to ensure that your Personal Data are only processed to the extent that such processing is necessary.
In all cases, BYD will expressly state why such information is necessary, so that you may provide the information at your own discretion. BYD will not disclose Personal Data provided by you to any party, other than BYD itself, without prior permission from you. For the Personal Data collected via the QR Code function, it will only be shared with the corresponding store sales consultant who provided the QR code, including our service providers, and will not be disclosed to other irrelevant parties without your consent.
4.- Rights in Relation to Personal Data
You have the right to request information regarding the Personal Data processed by us, including the following rights:
(a) Right of access: to request access to, and obtain a copy of, your Personal Data that we hold;
(b) Right to data portability: to receive certain Personal Data in a commonly used, machine-readable format, and to have such data transmitted to another data controller where applicable;
(c) Right to rectification: to request the update or correction of your Personal Data to ensure it is accurate, complete, and up to date;
(d) Right to erasure: to request the deletion, destruction, or anonymization of your Personal Data;
(e) Right to restriction: to request the restriction of the processing of your Personal Data;
(f) Right to object: to object to the processing of your Personal Data, including where such processing is carried out for direct marketing purposes.
You can request a respond to your rights. Where we receive a request to exercise one of these rights, we will provide information on the action we take on the request without undue delay and in any event within 15 workdays of receipt of the request.( This time may be extended by a further [72 hours] in certain circumstances, for example, where requests are complex or numerous. Where we do not carry out your request, we will tell you without delay and in any event within [72 hours] of receipt of the request, and we will explain our reasons for not taking the action requested.)
For electronic, telephone calls or text communications, if you no longer want to receive promotional-related emails, you may opt out of receiving them by clicking the unsubscribe button in your mails. If you would like to stop receiving promotional-related or automated text messages from us, you can follow the instructions in the text message you received. If you receive a marketing-related call from us and do not want to receive similar calls in the future, please ask to be placed on our “do not call” list. Please note that we may still send you safety messages or product service issues even if you opt out of receiving marketing messages.
These rights may be limited in some situations – for example, where we can demonstrate that we have a legal requirement to process your data or if making the information available to you would reveal personal data about another person or if we are legally prevented from disclosing such information. In some instances, this may mean that we are able to retain data even if you withdraw your consent.
We hope that we can satisfy any queries you may have about the way we process your data. If you have any concerns about how we process your data you can contact us as described below in the section IV “HOW TO MAKE REUQESTS”.
In the event you still have unresolved concerns, you also have the right to lodge a complaint with a supervisory authority, in particular the data protection authority in the jurisdiction of your habitual residence or place of work.
Finally, please note that where we require Personal Data to comply with legal or contractual obligations, then provision of such data is mandatory: if such data is not provided, then we will not be able to manage our contractual relationship, or to meet obligations placed on us. In all other cases, provision of requested personal data is optional.
5.- How to Make Requests
If you would like to access, correct, and delete any Personal Data we hold about you, or exercise any other data subject rights available to you under applicable laws or regulations with the purpose of protecting Personal Data (“Applicable Data Protection Law”), you may submit a request via e-mail at [bydthailand@byd.com].
We aim to respond to your request for access, correction, or deletion within the time required by Applicable Data Protection Law. If we need more time to respond to your request, we will let you know of the reason and the extension period in writing.
6.- Retention Period
BYD will not use and store Personal Data longer than necessary to fulfil the above mentioned purposes and shall remove the collected Personal Data after the necessary period to achieve the purposes described in this Policy has passed, or to comply with contractual obligations or as permitted or required by the Applicable Laws.
If we have a relationship with you, we hold your personal information for 1 years from the date our relationship ends. We hold your personal information after our relationship ends to establish, bring or defend legal claims.
Where we have obtained your personal information following a request for information, test drive or any other information on any of our products or services, we hold your personal information for 1 year and 6 months from the date we collect that information. If a business relationship is established with you during that period, your personal information will be retained in accordance with the applicable retention period for such relationship.
7.-Purpose Limitation
The Personal Data may only be processed to the extent necessary for the described purposes. Personal Data may in principle not be processed for other purposes other than that for which the Personal Data were collected. If there is a necessity or need to process Personal Data for other purposes, it shall be investigated by BYD whether the purposes of the intended data processing are compatible with the original purposes. BYD will provide you with information on that other purpose prior to that further processing.
8.- Cookies and Other Tracking Technologies
Our websites also collect information, via cookies, web beacons, pixels, tags or other tracking technologies, such as your Internet Service Provider and Internet Protocol (IP) address, the date and time you access our website, the pages you have accessed while visiting our website, and the Internet Protocol (IP) address from which you accessed our website.
You may refuse or delete cookies. If you refuse or delete cookies, some of our website functionality may be impaired. If you previously accepted cookies and directed us to share your information on one of our sites, you can change your cookie preference by clicking on the cookie settings link in the footer of that site. Please refer to your browser’s Help instructions to learn more about how to manage cookies and the use of other tracking technologies. Some browsers have incorporated Do Not Track (“DNT”) preferences. If you set your browser to signal that you do not wish to be tracked online, we will honour your preference by disabling targeting and social media cookies unless you explicitly consent through our cookie banner to enable these categories. For information on how we use cookies across our digital platforms, please see our Cookie Policy.
We have integrated the consent management tool "consentmanager" (www.consentmanager.net) from consentmanager AB (Håltgelvågen 1b, 72348 Västerås, Sweden, mail@consentmanager.net) on our website to obtain consent for data processing and use of cookies or comparable functions. With the help of "consentmanager" you have the possibility to give your consent for certain functionalities of our website, e.g. for the purpose of integrating external elements, integrating streaming content, statistical analysis, measurement and personalized advertising. With the help of “consentmanager” you can grant or reject your consent for all functions or give your consent for individual purposes or individual functions. The settings you have made can also be changed afterwards. The purpose of integrating “consentmanager” is to let the users of our website decide about the above-mentioned things and, as part of the further use of our website, to offer the option of changing settings that have already been made. By using “consentmanager”, personal data and information from the end devices used, such as the IP address, are processed by consentmanager. In addition, the processed information may also be stored on your device.
Our legitimate interests in processing lie in the storage of user settings and preferences with regard to the use of cookies and other functionalities. "Consentmanager" stores your data as long as your user settings are active. After two years after making the user settings, the consent will be asked again. The user settings made are then saved again for this period.
You can object to the processing. You have the right to object to reasons arising from your particular situation. To object, please send an email to mail@consentmanager.net or contact us as provided in Section 4 and 5 above.
9.-Security
We strive to maintain the highest standards of security and BYD has put in place robust technical and organizational measures for the protection of your data in accordance with the current, general state of technology, especially to protect the data against loss, falsification or access by unauthorized third persons. However, the transmission of information via the internet is not completely secure. So, whilst we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted via our Application. Once we have received your personal data, we will use strict procedures and security features to prevent unauthorized access.
For the Personal Data collected via the QR Code function, we have implemented the following additional security measures:(a) The CRM management storing Personal Data is deployed in Singapore, and the data will not be transmitted back to China; (b) We have set up corresponding permission controls for the batch download function of customer information in the system. Whether to retain the download function will be determined in accordance with subsequent compliance requirements;(c) Detailed export logs will be recorded for all data download operations, including operator, download time, download content and other information, for traceability and audit.
In the unfortunate event that a personal data security incident occurs, we will report it promptly and take remedial measures in accordance with the requirements of the law and regulatory authorities.
However, the transmission of information over the internet and mobile networks is never completely risk-free. It is important that you also take responsibility for protecting your data. In particular, you are responsible for keeping your login information confidential.
10.- International Transfer
We are a global company, and we operate internationally. Your Personal Data will be transferred to and stored at our data center located in Singapore. For the Personal Data collected via the QR Code function in the Thailand market, it will be exclusively stored in the CRM management backend deployed in Singapore and will not be transferred back to China. We comply with Applicable Data Protection Law on the transfer of information between countries to help ensure your Personal Data is protected as described in this Privacy Notice, wherever it may be.
11.-Aggregated data (non-identifiable personal data)
We may share aggregated data to third parties. The aggregated data has in such instances been compiled from information that has been collected through the Service and can, for example, consist of statistics of internet traffic or the geological location for the use of the Service. The aggregated data does not contain any information that can be used to identify individual persons and is thus not personal data.
12.-Links to External Websites or Services
Our services may contain links to third-party websites or services. Such websites or services may have their own privacy policies, which may differ from this Privacy Notice. Accordingly, we have no affiliation with and no control over the data protection measures of such websites or services, and shall not be responsible for any content, policies, damages, or actions arising from such third-party websites or services.
13.-Changes to This Privacy Notice
We may update this Privacy Notice at any tine according to changes in our business functions and measures concerning the protection of Personal Data (including changes related to the QR Code function). If we make changes to this Privacy Notice, we will post the updated Privacy Notice and update the “Last Updated” date. We will also notify you through our website. Where changes to this Privacy Notice will have a fundamental impact on the nature of the processing or otherwise have a substantial impact on you, we will give you sufficient advance notice so that you have the opportunity to exercise any rights you have.
14.- Contact Us
If you have any questions or comments about this Privacy Notice, please do not hesitate to contact us at:
(1) BYD Auto (Thailand) Co., Ltd. and BYD Auto Components (Thailand) Co., Ltd.
: Address: 27/1, 27/2, 27/3, 27/4, Moo 2, Phana Nikhom Subdistrict, Nikhom Phatthana District, Rayong Province.
: Address: 399 Interchange 21 Building, 30th Floor, Room No. 3001-3006, Sukhumvit Road, Khlong Toei Nuea Subdistrict, Watthana District, Bangkok.
: Email: bydthailand@byd.com
(2) Data Protection Officer (DPO)
: Email: lei.yingying@byd.com