Changan Privacy Notice
(1) Changan Auto Southeast Asia Co., Ltd., (2) Changan Auto Sales (Thailand) Co., Ltd., and (3) Changan Auto Components (Thailand) Co., Ltd. (collectively referred to as “Changan”, “we”, “us”, or “our”) are committed to protecting your privacy. This Privacy Notice (“Privacy Notice”) explains how we collect, use, disclose, and safeguard your personal data in relation to your interaction with us as a customer, prospective customer, visitor, director, influencer, officer, member of the media, candidate, or in any other capacity.
How we collect your personal data
Personal data that we collect
Personal Data of third party
We collect your personal data through various channels, including:
Direct Interactions: We collect your personal data when you interact with us directly, such as when you request a test drive, book a service appointment, purchase a vehicle, or make payments. We also collect your data through after-sales services, vehicle maintenance, roadside assistance, customer support requests, complaints, or other communications related to this Privacy Notice.
Online Engagements: We collect your personal data through our websites, mobile applications, and online platforms. This includes data collected via online chat functions, service portals, or participation in customer satisfaction surveys.
Third-Party Sources: We may receive your personal data from other sources, such as business partners, automotive marketplaces, publicly available sources (e.g., search engines), or social media platforms when you interact with our content or advertisements.
Promotional Activities: We collect personal data when you participate in our marketing campaigns, promotional events, or product and service feedback surveys.
We collect various types of personal data when you interact with us, whether online or during your stay. This personal data includes:
Personal Information: We collect your name, address, email address, phone number, nationality, social media account ID, passport or ID number, driver’s license, visa, or other government-issued identification, as well as your signature.
Vehicle Information: We collect details about your vehicle, including the vehicle identification number (VIN), license plate number, brand, model, color, engine type, purchase or registration date, and linked account identifiers. We may also collect service history, warranty status, and in-vehicle system data such as telematics, diagnostics, usage patterns, setup history, component status, mileage, speed, gear position, battery status, and parking duration. Additionally, we may process data from vehicle cameras, radar, voice commands (including recordings), and accident or collision events.
Vehicle Purchase and Registration Details: We collect information related to your vehicle purchase and registration, such as the dealer’s name, sales representative’s name, receipt or invoice number, proof of purchase, vehicle registration documents, and the vehicle variant or specification.
Payment Information: We collect your credit or debit card details, billing address, bank account information, and transaction records in connection with your purchases.
Communication Preferences: We collect and record your preferences regarding marketing communications, surveys, promotions, and contests, as well as any correspondence with us.
Technical, Usage, and Location Data: We automatically collect data when you interact with our websites and mobile applications. This includes usage data (such as browsing history, interactions, and preferences), technical information (such as device type, operating system, browser type, and IP address), as well as location data, based on your IP address or device settings.
Security Data: We collect CCTV footage from our premises and records of your visits, including entry logs and access times, to ensure the safety and security of our customers, staff, and property.
Sensitive Data: With your consent, we may collect sensitive personal data, such as blood type or religion as shown on your identification card. Where we collect, use, and/or disclose sensitive personal data based on your consent, we will obtain explicit consent prior to or at the time of collection, or as otherwise permitted by law.
If you submit any personal data about any third party to us or our service providers, such as when making a reservation for another individual, you represent and warrant that you have the authority to do so by (i) informing such other persons about this Privacy Notice; and (ii) obtaining consent where required by law or necessary to permit us to use such Personal Data in accordance with this Privacy Notice.
Purpose of our collection, use, or disclosure of personal data
Your privacy is important to us, and we will only use your personal data as permitted by law. We collect, use, or disclose your personal data on the basis of one or more of the following legal bases depending on the circumstances: (i) to fulfill our contractual obligations in providing the services you have requested; (ii) to comply with our legal obligations under applicable laws, regulations, court orders, or other legal processes; and (iii) to pursue our legitimate interests and those of third parties, ensuring such interests are proportionate to your interest and fundamental rights and freedoms to protect your personal data.
We may use your personal data for the following purposes:
Provision of Products and Services: To verify your identity, create and manage your customer account, and provide you with our products and services. This includes processing payments, communicating with you regarding service provision, and fulfilling our contractual obligations. We also use your data to manage your vehicle systems—such as software updates, service notifications, and post-service follow-ups—and to provide assistance, including roadside support and troubleshooting. Additionally, we process data to enable in-vehicle internet and connectivity features.
Personalization: To personalize your experience with our products and services by tailoring content and offers based on your preferences and past interactions. We also collect feedback and service data to continuously improve our offerings and enhance overall customer satisfaction.
Marketing, Promotions, and Public Relations: To send you promotional materials, special offers, newsletters, and other marketing communications. We also plan and conduct marketing campaigns, customer segmentation, demographic analysis, and market research to better understand our customers and improve outreach efforts. In some cases, we may process your data as part of our public relations or brand engagement activities, including those involving influencers and event participants.
Data Analytics and Business Operations: To process your data for internal business purposes such as service quality analysis, operational reporting, audit processes, and data analytics. We use this information to develop new products, assess system performance, improve our website and mobile platforms, and better understand usage trends. We also store your personal data in secure databases to support business continuity and operational efficiency.
Safety and Security: To ensure the safety and security of our vehicles, systems, facilities, customers, staff, and visitors. This includes managing physical and digital safety systems, monitoring access, and responding to safety-related incidents.
Recruitment and Talent Acquisition: To assess your qualifications, verify your background, and evaluate your suitability for employment opportunities during the recruitment process.
Compliance: To meet our legal obligations and regulatory requirements and to comply with court orders, regulatory authorities, or law enforcement agencies.
Third-Party Services: To share your information with trusted third-party service providers who assist us in delivering our services, subject to confidentiality agreements.
We may also use your data for other purposes, which will be communicated to you at the time of collection or with your consent.
Where we need to collect, use, and disclose your personal data as required by law or for the performance of a contract with you and you fail to provide that personal data to us, we may not be able to perform the contract we have or are trying to enter into with you.
How we share your personal data
To provide you with excellent service and to operate effectively, we may share your personal data with various parties based on the services you use and your interactions with us. The main categories of recipients with whom we may share your personal data include:
Affiliates and Partners: We may share your personal data with our affiliated companies and trusted business partners to support our operations and provide you with our products and services.
Service Providers: Your data may be processed by third-party service providers that support our business operations. These include IT and technical support providers, data storage and cloud service providers, telecommunications and communication service providers, payment processors, marketing and advertising agencies, research and analytics firms, as well as providers of roadside assistance services and car insurance-related services.
Professional Advisors: We may share your personal data with professional advisors, such as legal counsel and auditors, to help manage our business operations and ensure compliance with applicable legal and regulatory obligations.
Legal and Regulatory Compliance: We may disclose your personal data as required to comply with applicable laws, regulations, or to protect the rights, property, and safety of our customers, staff, and the public.
Business Transfers: In the event of a merger, acquisition, reorganization, joint venture, assignment, transfer, or other disposition of all or part of our business, assets, or shares, your personal data may be transferred to the relevant successor, assignee, or transferee of our rights and/or obligations.
In certain cases, we may request your consent to share your personal data with some parties.
Cross-border transfers
Your personal data may be transferred to countries outside Thailand, including jurisdictions that may not provide the same level of data protection. When we make these transfers, we ensure that your personal data is protected in accordance with this Privacy Notice and applicable data protection laws. This includes putting appropriate safeguards in place, such as data transfer agreements based on clauses approved by regulators. If required by law, we will obtain your consent before transferring your personal data.
Security measures
We prioritize the security of your personal data through various administrative, organizational, and technical safeguards to protect it from unauthorized access, acquisition, disclosure, destruction, alteration, accidental loss, misuse, or damage. We regularly review and monitor these safeguards and security measures.
How long do we keep your personal data
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Notice, unless a longer retention period is required or permitted by law.
It is estimated that your personal data may be retained for no more than ten years from the end of your stay or the termination of our services.
The criteria for determining our retention periods include:
The specific purpose for which we process your personal data;
The duration of our ongoing relationship with you and the services provided (for example, as long as you continue to receive marketing communications);
Our legal obligations that require us to retain records for reporting purposes; and
Statutes of limitations, litigation, or regulatory investigations.
When we no longer need your personal data, we will securely delete it, remove it from our systems, or anonymize it to ensure that you can no longer be identified, as permitted by applicable law.
Cookies and tracking technologies
We use cookies and similar technologies to enhance your experience on our website by keeping you signed in and helping us understand your interactions with the site. In some cases, third parties may collect personal information using these technologies. For more details on how we use cookies and how you can manage your preferences, please refer to our Cookie Policy.
Changes to this Privacy Notice
We may update this Privacy Notice from time to time. We will notify you when significant changes are made to it.
Your data subject rights
As a data subject, you have certain rights regarding your personal data under applicable data protection laws. These rights include:
Right to Access: You have the right to request a copy of the personal data we hold about you.
Right to Rectification: You have the right to request corrections if your personal data is inaccurate or incomplete.
Right to Erasure: You may request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected or if you withdraw your consent.
Right to Restrict Processing: You can request that we limit the processing of your personal data under certain circumstances.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
Right to Object: You may object to the processing of your personal data, particularly if we are processing your data for direct marketing purposes.
Right to Withdraw Consent: If we are processing your personal data based on your consent, you have the right to withdraw that consent at any time.
Right to Lodge Complaint: You have the right to make a complaint to a competent authority under applicable data protection laws.
You may exercise any of these rights by contacting us using the details provided in this Privacy Notice.
Contact details
Should you have any questions or concerns regarding this Privacy Notice, or if you would like to exercise your rights as a data subject, please contact us through the following details:
Changan Auto Southeast Asia Co., Ltd.
Changan Auto Sales (Thailand) Co., Ltd.
Changan Auto Components (Thailand) Co., Ltd.
Registered Office is located at 616/51 Eastern Seaboard Industrial Estate 4 Moo 1, Maenamkhu, Pluak Daeng, Rayong
Bangkok Branch Office is located at No.9 G Tower Grand Rama 9, 22nd Floor, Unit GN2201-04, Rama 9 Road, Huaykwang Sub-district, Huaykwang District, Bangkok
The contact details of our Data Protection Officer are as follows:
Email: compliance@changan.co.th
