Privacy Policy

Information We Collect

We collect several types of information to provide and improve our services. The data we gather falls into categories based on how you interact with our platform.

Personal Identification Information

When you register for an account or contact us, we collect basic details that help us verify your identity and communicate with you effectively:

• Full name and preferred contact name
• Email address and phone number
• Physical address for regulatory compliance
• Date of birth and nationality
• Government-issued identification numbers (as required by Thai financial regulations)

Financial and Trading Information

Because we operate in the trading liquidity space, we need certain financial details to process transactions and maintain regulatory compliance:

• Bank account details and payment information
• Trading history and transaction records
• Account balances and position data
• Investment preferences and risk tolerance assessments
• Source of funds documentation

Technical and Usage Data

Our systems automatically collect technical information when you access our platform. This helps us maintain security and improve user experience:

• IP address and device identifiers
• Browser type and operating system
• Login timestamps and session duration
• Pages visited and features used
• Error logs and system diagnostics

Communication Records

We keep records of your interactions with our support team and any correspondence you send us, including emails, chat messages, and phone call recordings (where permitted by law).

How We Use Your Information

Your data serves specific purposes tied directly to our ability to provide trading liquidity services. We don't use your information beyond what's necessary for these functions.

Service Delivery

We use your personal and financial information to execute trades, process deposits and withdrawals, and maintain accurate records of your account activity. This forms the core of our relationship with you.

Security and Fraud Prevention

Your technical data helps us detect unusual activity patterns that might indicate unauthorized access or fraudulent behavior. We analyze login locations, transaction patterns, and system interactions to protect your account.

Legal and Regulatory Compliance

Thai financial regulations require us to collect and retain certain information about our users. We use your data to fulfill reporting obligations to the Securities and Exchange Commission of Thailand and other regulatory bodies.

Platform Improvement

Aggregated, anonymized usage data helps us understand how people interact with our platform. We use these insights to fix bugs, add features, and enhance overall functionality.

Data Sharing and Third Parties

We don't sell your personal information to anyone. However, we do share data with specific partners and service providers who help us operate our platform.

Service Providers

We work with companies that provide essential services like payment processing, identity verification, cloud hosting, and customer support tools. These partners can only access the data they need to perform their specific functions, and they're bound by confidentiality agreements.

Financial Institutions

Banks and payment processors receive the information necessary to execute your transactions. This includes account details, transaction amounts, and identification data required for anti-money laundering checks.

Regulatory Authorities

When legally required, we disclose information to Thai government agencies, financial regulators, and law enforcement. This includes responding to court orders, regulatory inquiries, and investigations.

Business Transfers

If Prudent Mindset undergoes a merger, acquisition, or sale of assets, your information may be transferred to the new entity. You'll receive notice before your data becomes subject to a different privacy policy.

Data Storage and Security

Your information lives on secure servers located in Thailand and Singapore. We use multiple layers of protection to prevent unauthorized access.

Security Measures

Our infrastructure includes encryption for data in transit and at rest, multi-factor authentication requirements, regular security audits, intrusion detection systems, and strict access controls limiting who can view sensitive information.

Data Retention Periods

We keep your information for different periods depending on the type of data and legal requirements:

Data Breach Response

If we experience a security incident that affects your personal information, we'll notify you within 72 hours through email and platform notification. We'll explain what happened, what data was involved, and what steps we're taking to address the situation.

Your Rights Under Thai Law

Thailand's PDPA gives you specific rights regarding your personal data. Here's what you can do and how to exercise these rights.

Access and Portability

You can request a copy of all personal information we hold about you. We'll provide this in a structured, commonly used format within 30 days. If you want to transfer your data to another service, we'll help facilitate that where technically possible.

Correction and Updates

You can update most of your personal information directly through your account settings. For changes to identity documents or financial information, contact our support team with proper verification.

Deletion and Erasure

You can request deletion of your account and personal data. However, we must retain certain information for regulatory compliance periods mandated by Thai financial law. We'll delete everything we're legally permitted to remove.

Objection and Restriction

You can object to specific uses of your data, like marketing communications. You can also request we restrict processing in certain situations, such as while we verify data accuracy after you've disputed it.

Withdrawal of Consent

For processing activities based on your consent rather than legal obligation, you can withdraw that consent anytime. This doesn't affect the lawfulness of processing before you withdrew consent.

Cookies and Tracking

Our platform uses cookies and similar technologies to function properly and improve your experience. You have control over most of these.

Essential Cookies

These are necessary for the platform to work. They handle things like session management, security features, and load balancing. You can't disable these while using our services.

Analytics Cookies

We use these to understand how people use our platform – which features get used most, where people encounter problems, and how we can improve. These don't identify you personally but track general usage patterns.

Preference Cookies

These remember your settings like language choice, dashboard layout, and notification preferences so you don't have to reconfigure everything each visit.

Managing Cookies

You can adjust cookie preferences through your browser settings. Keep in mind that disabling certain cookies might affect platform functionality. Our cookie banner lets you manage non-essential cookies when you first visit.

International Data Transfers

While we primarily store data in Thailand and Singapore, some of our service providers operate globally. When your information crosses borders, we ensure adequate protection.

We use standard contractual clauses approved by Thai authorities and verify that recipient countries provide adequate data protection. For transfers to jurisdictions without adequacy decisions, we implement additional safeguards like encryption and access restrictions.

If you're accessing our platform from outside Thailand, your data may be transferred to and processed in Thailand, where our primary operations are based. By using our services, you consent to this transfer.

Children's Privacy

Our services aren't designed for anyone under 20 years old (the age of majority in Thailand). We don't knowingly collect information from minors.

If we discover we've inadvertently collected data from someone under 20, we'll delete it immediately. If you believe we have information about a minor, please contact us right away.

Changes to This Policy

We review and update this privacy policy regularly to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we'll notify active users through email and platform notification.

The "Last Updated" date at the top of this policy shows when we made the most recent changes. Continued use of our services after updates take effect means you accept the revised policy.

For major changes that affect how we handle your data in fundamental ways, we'll ask for your explicit consent before implementing them.

Automated Decision-Making

We use automated systems for certain processes like fraud detection, risk assessment, and transaction monitoring. These systems analyze patterns in your trading behavior and account activity.

You have the right to request human review of any automated decision that significantly affects you. If our systems flag your account or decline a transaction, you can contact support to have a person review the situation.

We don't use your personal data for automated decisions about credit worthiness or financial scoring that would affect your access to services outside our platform.