Privacy Policy

To open and run your rental we collect your name and title, your identity document and its number and dates, your date of birth, your nationality, your address and any forwarding address, your email address and telephone number, your preferred language, and the name and contact details of an emergency contact you give us.

We take a photograph of you at registration, and we record each visit you make to the vault — which box, and when.

If you use our website, our customer portal or our chat, we collect the messages you send us and basic technical information such as your IP address, which we use to keep the service working and to prevent abuse.

With your consent we create a mathematical representation of your face from your registration photograph, and use it to confirm your identity when you come to access your box. This is biometric data, which the PDPA treats as sensitive personal data.

We use it for one purpose only: making sure that the person opening a box is the person entitled to open it. It is never used for marketing, never shared, and never used to identify you anywhere other than at our own premises.

Your consent is voluntary and you may withdraw it at any time, in which case we delete the facial data and verify you by your identity document instead. Withdrawing consent does not affect your rental.

We hold your data to perform the rental agreement you have with us, to verify who is entering the vault, to contact you about your rental, to meet our legal obligations including accounting and tax, and — for facial recognition — on the basis of the explicit consent you give at registration.

We do not sell personal data, and we do not share it with third parties for their own marketing.

Some of our suppliers process data on our behalf so that we can run the service: our hosting provider, our email and SMS providers, and our payment processor, which handles card details directly so that we never hold your card number ourselves.

We may disclose data where the law requires it, for example to a court, a regulator or a law enforcement authority acting under proper authority.

We keep your personal data for as long as you rent from us. After that we continue to hold the records the law obliges us to keep — principally accounting and identification records, which Thai law requires to be retained for a minimum period after a business relationship ends.

Facial recognition data is held for one purpose, verifying you at the vault, and for no other. You may withdraw your consent at any time and we will delete it.

Where we no longer need personal data for the purpose it was collected for, and no legal obligation requires us to keep it, we delete it or remove what identifies you from it.

If you would like to know how long we expect to keep a particular kind of information, ask us and we will tell you.

Personal data is held on access-controlled systems, encrypted in transit and at rest. Staff see only what their role requires. Access to identity documents and facial data is restricted further.

Under the PDPA you may ask us for a copy of the personal data we hold about you, ask us to correct it if it is wrong, ask us to delete it or to stop using it, object to a particular use, ask for it in a portable form, and withdraw any consent you have given.

Write to us and we will answer within the time the law allows. If you are not satisfied with our answer, you may complain to Thailand's Personal Data Protection Committee.

Questions about this policy, or to exercise any of the rights above: Siam Secure International Co., Ltd. (company registration no. 0205557014916), 47/71 Moo 9, Welcome Town Shopping Street, Pattaya Klang Road, Nongprue, Banglamung, Chonburi 20150, Thailand. info@siamsecure.co.th, +66 (0) 38 410 314.