Data Subject Rights Handbook

Information Regarding Your Personal Data
Muangthai Capital Public Company Limited and Its Subsidiaries

Dear Data Subject,

The personal data protection provisions of the Personal Data Protection Act B.E. 2562 (2019) became effective on June 1, 2022. Muangthai Capital Public Company Limited (the “Company”), Muangthai Leasing Company Limited, Muangthai Leasing Insurance Broker Company Limited, and Muangthai Pay Later Company Limited (collectively, the “Subsidiaries”), as controllers of your personal data, recognize the importance of your rights. We conduct our business transparently and ethically and strictly comply with the regulations of the Bank of Thailand and other applicable laws and regulations. We therefore wish to ensure that you are aware of your personal data rights.

The Company and its Subsidiaries collect, use, and disclose (collectively, “process”) personal data such as your name, address, telephone number, and other information necessary to perform product or service agreements, employment agreements, contracts for services, other contracts, or other legal relationships, including those involving shareholders or joint-venture partners. This includes personal data collected and held before the PDPA became fully effective.

To explain the purposes and other relevant details of processing your personal data, as well as your rights as a data subject under the PDPA, the Company and its Subsidiaries have prepared and published privacy policies on muangthaicap.com. Please review the information carefully for your own benefit.

You may exercise your data subject rights through the Company’s website or contact the Company and its Subsidiaries at DPO@muangthaicap.com. Upon receiving your request, the Company and its Subsidiaries will consider and process it in accordance with the PDPA. Exercising rights in relation to information essential to, or necessary for, performing a contract—such as your full name or national identification number—may prevent the Company and its Subsidiaries from performing a hire-purchase agreement, employment agreement, contract for services, or another agreement with you. The Company and its Subsidiaries reserve the right to handle such requests as permitted by the PDPA.

If the Company and its Subsidiaries did not hear from you before June 1, 2022, they will continue processing your personal data, including collecting, using, and disclosing it to third parties, as permitted under the PDPA and their Personal Data Protection Policies.

Sincerely,

Muangthai Capital Public Company Limited and Its Subsidiaries