Last Updated: Insert date
Last Updated: [Insert date]
1. Introduction
This policy explains how Maha-EV collects, uses, discloses, and protects your personal data when you use the Platform.
2. Personal Data We Collect
2.1 Data You Provide
- Account data: name, email, phone number, password (stored encrypted/hashed), language
- Profile/settings data: province, favorites, saved searches (if available)
- Dealer data: business name, registration/tax ID, authorized person, identity/business verification documents
- Communications: contact form messages, chat (if available), support requests
2.2 Automatically Collected Data
- Usage data: IP, browser type, pages visited, usage time, referrers
- Cookies/similar technologies: for session and usage analytics
2.3 Listing Data
Listing details, images, and vehicle information submitted by sellers/dealers
3. Purposes of Data Use
- Provide Platform services (registration/login, listings, favorites, contact sellers)
- Verify and authenticate dealer identity/trustworthiness
- User support and service communications
- Security, fraud/spam/abuse prevention
- Analytics and UX/performance improvements
- Legal compliance and government orders
4. Legal Basis for Data Processing (PDPA-style)
- Contract performance (to provide services)
- Legitimate interests (security, fraud prevention, service improvement)
- Consent (e.g., certain marketing types/certain cookies)
- Legal obligations
5. Data Disclosure
We may disclose data to:
- Service providers: hosting, analytics, email/SMS, support, security
- Sellers/dealers: when you contact or submit contact requests
- Government/legal authorities: when necessary
We do not sell your personal data.
6. Retention Period
Retained as necessary for purposes and legal requirements. Dealer verification documents may be retained for appropriate periods for security and verification.
7. Security Measures
We use appropriate measures such as access controls, encryption in transit, and restricted access to verification documents.
8. Data Subject Rights
You may have rights to access, correct, delete, object, restrict use, data portability, or withdraw consent (as permitted by law). Contact us to exercise these rights.
9. Cookies
Used for system operation and usage analytics. You can manage cookies through your browser, but some features may not work fully if cookies are disabled.
10. International Data Transfers
If transferred to cloud service providers abroad, we will use appropriate safeguards as required by applicable law.
11. Policy Changes
We may update this policy from time to time. The "Last updated" date will be shown on this page.
12. Contact Us
- Email: support@maha-ev.co.th
- LINE Official: @maha-ev
- Address: [Company address]