Effective Date: 30th April 2026
Last Updated:
This Privacy Notice explains how Nippon Koei Energy (Thailand) Co., Ltd., a company incorporated under the laws of Thailand, with its registered office at 142 Two Pacific Place Building, 19th floor, Room 1903-05, Sukhumvit Road, Khlong Toei Sub-district, Khlong Toei District, Bangkok 10110, and PT Nippon Koei Energy Indonesia, a company incorporated under the laws of Indonesia, with its registered office at Menara Sentraya, 20th Floor, Jl. Iskandarsyah Raya, No. 1A, Blok M, Jakarta Selatan 12160, Indonesia (Individually and collectively “Company,” “we,” “us,” or “our“), collects, uses, discloses, stores, transfers, and otherwise processes Personal Data through our website located at www.nkeasia.com and any related pages, portals, applications, products, services, communications, and online features that link to or reference this Privacy Notice (collectively, the “Website“).
This Privacy Notice is intended to comply with applicable personal data protection laws, including the Thailand Personal Data Protection Act B.E. 2562 (2019), as amended, and applicable regulations, notifications, and guidelines issued under it (“Thai PDPA“), and Indonesia Law No. 27 of 2022 on Personal Data Protection and its implementing regulations, as amended from time to time (“Indonesian PDP Law“).
By accessing or using the Website, you acknowledge that you have read and understood this Privacy Notice. Where consent is required by applicable law, we will request your consent in the manner required by law.
1. Scope of This Privacy Notice
This Privacy Notice applies to Personal Data collected through the Website when you:
- visit, access, or browse the Website;
- submit an inquiry, request, form, or application;
- subscribe to newsletters, alerts, updates, or marketing communications;
- request information, quotations, demonstrations, or support;
- create or use an account, if available;
- purchase or use our products or services through the Website; or
- otherwise interact with us through the Website.
This Privacy Notice does not apply to third-party websites, applications, or services that are not operated or controlled by us, even if linked from the Website. We recommend reviewing the privacy notices of those third parties separately.
2. Personal Data We Collect
For purposes of this Privacy Notice, “Personal Data” means any information relating to an identified or identifiable individual, whether directly or indirectly, as defined under applicable law.
We may collect the following categories of Personal Data:
2.1 Personal Data You Provide to Us
We may collect Personal Data that you provide directly, including:
- name, title, gender, date of birth, nationality, and other identification details;
- contact details, such as email address, telephone number, mailing address, and company details;
- account and login details, including username, password, and profile information;
- communication records, such as inquiries, complaints, feedback, requests, chat messages, and correspondence with us;
- transaction and order details, such as purchase information, billing details, shipping details, and service history;
- payment-related information processed in connection with a transaction, provided that card and banking information may be processed by third-party payment providers acting on our behalf or independently; and
- any other Personal Data you voluntarily provide to us.
2.2 Personal Data Collected Automatically
When you use the Website, we may automatically collect certain technical and usage data, including:
- IP address, browser type, browser language, device identifiers, operating system, and Internet service provider;
- date and time of access, pages visited, links clicked, referring pages, session duration, and browsing behavior;
- log data, crash data, diagnostic data, and system activity information;
- approximate geolocation data derived from IP address or device settings, where permitted; and
- data collected through cookies and similar technologies, as described in Section 8.
2.3 Personal Data from Other Sources
We may obtain Personal Data from third parties, including:
- our affiliates and group companies;
- service providers, business partners, and contractors;
- analytics and advertising partners;
- social media platforms, if you interact with us through those platforms; and
- publicly available sources, where permitted by law.
3. Purposes of Processing
We may collect, use, disclose, or otherwise process Personal Data for the following purposes:
- to provide the Website and make it available to users;
- to administer, operate, maintain, monitor, and improve the Website and our products and services;
- to create, register, maintain, and authenticate user accounts;
- to process inquiries, orders, requests, payments, refunds, and transactions;
- to communicate with you regarding your use of the Website, our products or services, updates, support, and administrative matters;
- to send marketing communications, promotions, and newsletters, where permitted by law and subject to your choices;
- to analyze usage patterns, user preferences, and Website performance;
- to personalize content, features, and user experience;
- to protect the security and integrity of the Website and our business operations;
- to detect, prevent, investigate, and respond to fraud, unauthorized access, misconduct, or unlawful activities;
- to comply with legal obligations, lawful requests from authorities, court orders, and regulatory requirements;
- to establish, exercise, or defend legal claims; and
- for other purposes notified to you at the time of collection, where permitted by law.
We will not process your Personal Data for purposes that are inconsistent with the purposes notified to you unless permitted by applicable law or with your consent where required.
4. Legal Bases for Processing
To the extent required under applicable law, we process Personal Data on one or more of the following legal bases:
- your consent;
- where necessary for the performance of a contract with you or to take steps at your request before entering into a contract;
- where necessary to comply with our legal or regulatory obligations;
- where necessary for our legitimate interests or those of another person or entity, provided such interests are not overridden by your fundamental rights in accordance with applicable law; and
- other legal bases recognized under the Thai PDPA, Indonesian PDP Law, or other applicable law.
Where consent is required, you may withdraw your consent at any time using the contact details set out in this Privacy Notice or by other means made available by us. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal and may affect our ability to provide certain services or functions.
5. Sensitive Personal Data
We do not intend to collect or process sensitive personal data through the Website unless such collection is necessary and permitted by law.
For purposes of this Privacy Notice, “Sensitive Personal Data” includes categories of data recognized as sensitive under the Thai PDPA, Indonesian PDP Law, or other applicable law, which may include data concerning race, ethnicity, political opinions, religious or philosophical beliefs, sexual behavior or orientation, criminal records, health data, disability, trade union information, genetic data, biometric data, and other data designated by law as sensitive.
If we need to collect Sensitive Personal Data, we will do so only on a lawful basis and, where required, with your explicit consent or as otherwise permitted by applicable law.
Please do not provide Sensitive Personal Data through the Website unless we specifically request it and inform you of the relevant legal basis and purpose.
6. Children’s Personal Data
The Website is not directed to children, incompetents, or quasi-incompetents, except where specifically stated otherwise.
If you are under the age at which you may lawfully provide consent under applicable law, you must obtain consent from your parent, guardian, or other legally authorized representative before providing Personal Data to us, where such consent is required by law.
If we learn that Personal Data has been collected from a child or other person requiring representative consent without valid consent, we may delete that Personal Data or take other appropriate action as required by law.
7. Disclosure of Personal Data
We may disclose Personal Data to the following persons or entities, to the extent necessary for the purposes described in this Privacy Notice and as permitted by law:
- our parent companies, subsidiaries, affiliates, and companies under common control;
- our service providers, including cloud hosting providers, IT service providers, payment processors, customer support providers, marketing providers, analytics providers, logistics providers, and professional advisers;
- business partners, distributors, resellers, and subcontractors involved in providing products or services to you;
- regulators, government authorities, courts, law enforcement agencies, and other public authorities where disclosure is required by law or lawful order;
- actual or prospective buyers, investors, lenders, or other relevant third parties in connection with a merger, acquisition, restructuring, financing, sale of assets, or similar corporate transaction; and
- any other person or entity where you have given consent or where disclosure is otherwise permitted by law.
Where required by applicable law, we will ensure that persons processing Personal Data on our behalf are subject to appropriate contractual obligations relating to confidentiality, security, and lawful processing.
8. Cookies and Similar Technologies
We may use cookies and similar technologies to collect and process Personal Data in connection with your use of the Website.
These technologies may be used for the following purposes:
- essential operation of the Website;
- authentication and security;
- remembering preferences and settings;
- traffic measurement and analytics;
- performance monitoring and troubleshooting; and
- marketing and advertising, where permitted by law.
You may be able to manage cookies through your browser settings or through cookie preference tools made available on the Website. If applicable law requires consent for non-essential cookies or similar technologies, we will request that consent before placing or using those technologies.
Disabling cookies may affect the functionality or performance of certain parts of the Website.
9. Cross-Border Transfer of Personal Data
We may transfer or disclose Personal Data to persons or systems located outside Thailand, Indonesia, or the country in which you are located, including to our affiliates or service providers in other jurisdictions.
Where we transfer Personal Data across borders, we will do so in accordance with applicable law and will implement appropriate safeguards, which may include:
- transferring Personal Data to a destination country that has adequate personal data protection standards as recognized by applicable authorities;
- entering into contracts that require the recipient to provide appropriate protection for the Personal Data;
- obtaining your consent, where required by law; or
- relying on another lawful basis or exemption recognized under applicable law.
By using the Website and providing Personal Data, you understand that your Personal Data may be transferred to and processed in jurisdictions outside your country, subject to applicable legal safeguards.
10. Retention of Personal Data
We will retain Personal Data for as long as necessary to fulfill the purposes for which it was collected, including for legal, regulatory, tax, accounting, dispute resolution, complaint handling, and enforcement purposes.
In determining the retention period, we may consider:
- the nature, sensitivity, and volume of the Personal Data;
- the purposes for processing and whether those purposes can be achieved through other means;
- legal, regulatory, contractual, and operational requirements; and
- the need to establish, exercise, or defend legal claims.
When Personal Data is no longer required, we will delete, destroy, anonymize, or de-identify it in accordance with applicable law and our internal retention practices.
11. Security Measures
We implement appropriate technical, physical, and organizational security measures to protect Personal Data against loss, unauthorized or unlawful access, use, alteration, disclosure, or destruction.
These measures may include access controls, encryption where appropriate, network security controls, system monitoring, secure storage, staff training, vendor due diligence, and incident response procedures.
However, no method of transmission over the Internet or method of electronic storage is completely secure. We therefore cannot guarantee absolute security.
12. Your Rights
Subject to applicable law, you may have the following rights in relation to your Personal Data:
- the right to be informed about the collection and use of your Personal Data;
- the right to access or obtain a copy of your Personal Data;
- the right to request disclosure of how your Personal Data was obtained, to the extent required by law;
- the right to request correction, updating, or completion of inaccurate or incomplete Personal Data;
- the right to request deletion, destruction, or anonymization of your Personal Data in certain circumstances;
- the right to request restriction or suspension of processing in certain circumstances;
- the right to object to the collection, use, or disclosure of your Personal Data in certain circumstances, including direct marketing where applicable;
- the right to withdraw consent at any time where processing is based on consent;
- the right to data portability, where required by applicable law and technically feasible;
- the right to lodge a complaint with a competent supervisory or regulatory authority; and
- any other rights available under the Thai PDPA, Indonesian PDP Law, or other applicable law.
We may require you to verify your identity before processing your request. We may also decline or limit a request where permitted by law.
To exercise your rights, please contact us using the details set out in Section 15.
13. Direct Marketing
Where permitted by law, we may send you information about our products, services, promotions, events, and updates.
Where required by applicable law, we will obtain your consent before sending marketing communications. You may opt out of marketing communications at any time by using the unsubscribe mechanism in the message or by contacting us using the details below.
Even if you opt out of marketing communications, we may still send you service-related or transactional communications where necessary.
14. Data Breach Response
If a personal data breach occurs, we will take steps to assess, contain, investigate, and remediate the breach in accordance with applicable law and our internal procedures.
Where required by law, we will notify the relevant authority and affected individuals within the time period required by applicable law if the breach is likely to result in a risk to the rights and freedoms of individuals or otherwise meets the applicable notification threshold.
15. Contact Details
If you have any questions, requests, or complaints regarding this Privacy Notice or our processing of Personal Data, please contact us at:
Data Controller / Personal Data Contact
Nippon Koei Energy (Thailand) Co., Ltd.
Address: 142 Two Pacific Place Building, 19th floor, Room 1903-05, Sukhumvit Road, Khlong Toei Sub-district, Khlong Toei District, Bangkok 10110
Email: dataprivacy@nke-asia.com
Telephone: +66 2 118 7200
Data Protection Officer or Appointed Contact Person
Name: Tomoe Pisuraj
Email: dataprivacy@nke-asia.com
Address: 142 Two Pacific Place Building, 19th floor, Room 1903-05, Sukhumvit Road, Khlong Toei Sub-district, Khlong Toei District, Bangkok 10110
If required under applicable law, we will identify our data controller, data processor, representative, or designated contact person in the relevant jurisdiction.
16. Changes to This Privacy Notice
We may update this Privacy Notice from time to time to reflect changes in our business, Website functionality, legal requirements, or data processing practices.
If we make material changes, we will provide notice by posting the updated version on the Website, updating the “Last Updated” date above, and taking any additional steps required by applicable law.
Your continued use of the Website after the effective date of the updated Privacy Notice constitutes acknowledgment of the updated Privacy Notice, to the extent permitted by law.
17. Language
This Privacy Notice may be made available in more than one language. In the event of any inconsistency between language versions, the English version will prevail, to the extent permitted by applicable law.