Privacy policy

Data controller

EBOX Co., Ltd. (“EBOX”, “we”) manages sales and marketing for the GOO brand and is the data controller for personal data collected through this website. GOO technology is researched and developed by Smart Grand Corporation Co., Ltd.

For any personal-data matter, contact us at info@ebox.co.th.

Data we collect

We only collect what we need to respond to you and to run the website:

• Details you enter in our forms: name, organization, job title, email, phone number, and project details (solution of interest, waste volume, project location, timeline, and message)
• Figures from the savings calculator, when you choose to send an estimate with your request
• Contact details and messages when you reach us by phone, LINE, WhatsApp, or email
• Technical data such as IP address and browser details in server logs for security, plus cookieless, aggregated visit statistics that do not identify you

Purposes and legal basis

We use your data only to:

• Answer questions, assess your project, prepare a quotation, and arrange a site assessment you request (steps taken at your request before entering into a contract, Section 24(3))
• Follow up on your request, keep the website secure, and improve it (legitimate interests, Section 24(5))
• Comply with applicable law (legal obligation, Section 24(6))
• We will not send you marketing unrelated to your request without your consent

Sharing

We do not sell your personal data. We share it only as needed with:

• Smart Grand Corporation Co., Ltd., as technology owner, when assessing a project or preparing a technical proposal
• Service providers acting for us, such as Cloudflare, Inc. for website hosting, database, notification email, and visit statistics
• Public authorities where the law requires it

International transfers

Our service providers may process or store data on servers outside Thailand. We use providers with appropriate personal-data safeguards, as required by Sections 28 and 29 of the PDPA.

Retention

We keep your data only as long as needed to handle your request. If no contract follows, we delete or anonymize it within 2 years of our last contact. If a contract follows, we keep it for the life of the contract and for the periods required by accounting and tax law.

Your rights

You have the following rights under the PDPA. Email info@ebox.co.th to use them; we respond within 30 days.

• Access your data and obtain a copy
• Correct inaccurate or outdated data
• Request erasure, restriction, or portability of your data
• Object to processing, and withdraw consent where we rely on it
• Complain to the Office of the Personal Data Protection Committee

Security

Traffic between your browser and this website is encrypted with HTTPS, and access to your data is limited to staff who need it to handle your request.

Cookies and changes to this policy

Details of cookies and of what the website stores on your device are in our cookie policy.

We may update this policy from time to time. The date of the latest update is shown at the top of this page.