Policies and Legal Compliance

Personal Data Protection Policy (Privacy Policy)

Nongraviang Subdistrict Administrative Organization places great importance on protecting personal data under Thailand’s Personal Data Protection Act B.E. 2562 (2019). This policy explains how we collect, use and safeguard your information.

1. Personal Data We Collect

We may collect personal data when you use an E-Service, contact us or register through the website, including:

• Identity data, such as your full name and national identification number
• Contact data, such as your address, telephone number and email address
• Technical data, such as your IP address, browser type and cookie data

2. Purposes of Collection

• To provide services, receive complaints and process requests through the E-Service system
• To communicate with you, send notifications and answer your enquiries
• To analyse data and improve the website and municipal services
• To comply with applicable laws and public-sector regulations

3. Disclosure of Personal Data

We will not disclose, sell or exchange your personal data with third parties except in the following circumstances:

• You have given explicit consent
• To comply with a court order, warrant or legal process
• To refer your request to another relevant government agency for action or resolution

4. Your Personal Data Rights

You may request access to, a copy of, correction of or deletion of personal data held by us, subject to the legal restrictions applying to public authorities. To exercise these rights, please contact us through the municipality’s official contact channels.

5. Cookies

This website uses cookies to remember preferences and analyse usage so that we can provide a better experience. You can configure your browser to reject cookies.

Website Security Policy

Nongraviang Subdistrict Administrative Organization has implemented robust website security measures to protect data from unauthorised access, alteration or destruction.

1. Technical Measures

• Data encryption (SSL/TLS): The website uses HTTPS to encrypt data transmitted between your browser and our servers, helping prevent interception.
• Intrusion protection (Firewall): Firewalls and cyber-threat protection systems are used to filter and block abnormal access.
• System updates: Software and database systems are regularly updated with security patches.

2. Access Control

• Access to the website’s back-office system is limited to authorised staff whose duties require it.
• Administrators must authenticate with secure passwords, and access logs are retained under strict controls.

3. Monitoring and Auditing

Server access and activity logs are retained for the period required by law so that cyber-security incidents can be investigated.

4. Incident Response

If a data breach or system attack is detected, the municipality will contain the incident, assess its impact and notify affected parties and regulators as required by law.