FWD General Insurance Public Company Limited ('FWD General Insurance', 'we', 'us' or 'our') cares about your privacy and is fully committed to protect the privacy of your personal data.
Your personal data means any information relating to you that can identify you, whether directly or indirectly, from that data alone or in a combination with other identifiers we possess or can reasonably access, except information about the deceased. The types of personal data we collect will depend on the scope of services and/or type of products that you are interested in and we provide to you.
Depending on the type of products or services you select or your relationship with us, FWD General Insurance may collect and hold the following personal data:
In addition, we may also collect and hold your sensitive data such as:
If you do not or are unable or decline to provide certain personal data or consent us to collect, use, and disclose certain personal data which is necessary for us to make a relationship with you or provide our services and/or products to you, we may not be able to stay in contact with you, enter into a contract with you or perform our obligations resulting from a contract entered with you.
We only collect, use, disclose or process your personal data by fair and lawful means to the extent necessary for the specific purposes. We have also set out some lawful reasons why we may process your personal data. These depend on what kind of personal data we are processing.
We normally process personal data it is required or allowed by any law that applies (legal compliance), to provide the services/products set out in a contract (contracts), if it is necessary to prevent danger to a person's life, body and health (vital interests), if it is in our legitimate interests (legitimate interest) or we have your permission (consent).
For more information about this and the reasons we may need to process your personal data, please see below.
Note that when the data subject is classified as a minor, quasi-incompetent or incompetent, consent will be requested from their legal representatives, guardians or curators.
We will always notify you, before or at the time of collecting your personal data, about our purpose for processing. However, in some circumstances, it is not necessary for us to inform you about our processing of your personal data, such as when:
We collect your personal data in different ways which include in writing, by electronic or hard copy form, by telephone, email, in person, and over the internet such as via our website, cookies, online forms or social media.
We may collect your personal data directly from you. For example, you provide us with your personal data when you fill in an application form, deal with us over the telephone, send us a letter or use our website.
We may also collect your personal data indirectly from publicly available sources of information and/or from other parties including:
If you provide personal data about another individual to us, you agree to:
Your personal data may be transferred or disclosed to, accessed by or shared on a need to know basis with the following parties and for the following purposes.
These exceptions are:
You have rights to your personal data, and according to the PDPA these rights include:
In order to exercise your rights stated above, you may refer to our contact’s details under “How to contact us” stated hereinbelow. If you make a request, we will ask you to confirm your identity (if necessary), and to provide information that helps us to understand your request better. We expect to respond to your request within 30 days of the receipt of your request.
We have full rights and sole discretion to either fulfil or decline your request or charge a reasonable fee to fulfil your request in the case where you have made more than 3 consecutive requests within 10 working days, or in the event that the requests are obviously excessive or unfounded. We are entitled to refuse your request on statutory grounds and we will notify you of the refusal and our grounds.
If you have any questions or would like to exercise any rights relating to your personal data, please contact us via the provided details in the ‘How to contact us’ section.
The period we keep your personal data is often linked to the prescription and enforcement periods under law. We will not keep your personal data longer than is necessary for the purposes for which that personal data was collected, held and processed, except when the retention period is determined by other laws and regulations, which in many cases is up to 11 years after the end of our relationship with you.
After this time, we will only keep your personal data if we must do so to comply with a legal obligation, or if existing claims or complaints reasonably require us to keep your personal data, or for regulatory or technical reasons. If we do need to keep your personal data for a longer period, we will continue to protect that personal data.
We will delete, destroy, permanently anonymise, or otherwise dispose of all personal data at the end of the retention period, or when we must comply with your request for erasure of your personal data.
If you have any questions, please contact us at the provided details in the ‘How to contact us’ section.
As part of our products and/or service, we may use your personal data to identify a product or service that may benefit you. We may contact you occasionally to let you know about new or existing products or services.
We may also disclose your personal data to our related entities or business partners to enable them to tell you about a product or service. The marketing delivery channels may be through electronic means, email, telephone, text and other forms of communication.
For direct marketing, FWD General Insurance intends:
If you change your mind about how you would like us to contact you or you no longer wish to receive any of the above information, you can tell us anytime by following our withdrawal process.
To keep your personal data safe and secure, we use a range of measures, which include encryption and other forms of security. We require our employees and third parties who carry out work on our behalf to comply with appropriate privacy standards including obligations to protect against the leakage of information and to apply appropriate security measures for the processing of information.
We maintain and update our security procedures and measures to ensure a level of security for the personal data appropriate to the respective risk and the ability to ensure the ongoing confidentiality, integrity, availability and resilience of processing, including to prevent loss and unauthorised collection, access, use, modification, correction or disclosure of personal data. Our security measures apply to all types of data processing regardless of whether the personal data is processed electronically or in paper form.
FWD's website may include hyperlinks to third-party websites. FWD General Insurance has no control over the content, accuracy, expressed opinions, and links provided at these third party websites or how these third party websites deal with your personal data. You should visit these third party websites for details of their privacy policies in relation to their handling of your personal data.
FWD General Insurance may use 'cookies' to improve our internet service. Cookies are small data files that are automatically stored on the web browser in your computer which can be retrieved by FWD General Insurance's website. Cookies enable FWD General Insurance's website to remember you and your preferences when you visit the website and enable us to tailor the website to your needs.
The information collected by cookies is anonymous personalised settings information that contains no name or address information, or any information that will enable anyone to contact you via telephone, e-mail or any other means. No customer personal data is stored in cookies. However, you can disable cookies by changing your web browser settings. Please note that this it may affect how you use our website or online services. It may make it difficult for you to transact with us through our website and we may require time to request additional information.
If you have any comments, suggestions, questions, complaints or want to exercise your rights regarding your personal data, please contact:
Name: Data Protection Officer
Email address: firstname.lastname@example.org
44/1 Rungrojthanakul Building, 12th Floor, Ratchadapisek Road, Huaykwang, Bangkok 10310