Privacy Policy

Introduction

The Siam Cement Public Company Limited ("SCG", "we", "our", or "us") operates the SMIT mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

Information We Collect

We may collect the following types of information:

2.1 Personal Information You Provide

• Account Information: Name, employee ID, username, and password used to log in to the App.
• Contact Information: Work email address and phone number.
• Profile Information: Job title, department, and organizational unit.

2.2 Information Collected Automatically

• Device Information: Device type, operating system version, unique device identifiers (e.g., device ID), and mobile network information.
• Usage Data: Pages or features accessed within the App, timestamps of access, and interaction logs.
• Log Data: IP address, app crash reports, and diagnostic information.
• Location Information: With your permission, we may collect precise or approximate location data to support work permit and site-related features.

2.3 Information from Third Parties

We may receive information from your employer's internal systems (e.g., HR or ERP systems) that is necessary to authenticate your identity and provide App functionality.

How We Use Your Information

We use the information we collect to:

• Provide and operate the App: Enable core features such as work permit management, e-permit workflows, task assignments, and approval processes.
• Authenticate users: Verify your identity and maintain the security of your account.
• Improve App functionality: Analyze usage patterns to enhance performance, fix bugs, and develop new features.
• Send notifications: Deliver work-related alerts, approval status updates, and operational communications.
• Ensure compliance: Meet internal corporate policies, safety regulations, and applicable legal obligations.
• Support and troubleshoot: Diagnose technical problems and provide customer support.

How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

4.1 Within SCG Group

Your information may be shared with affiliated companies within The Siam Cement Group to the extent necessary to operate the App and fulfill its work permit and operational functions.

4.2 Service Providers

We may engage trusted third-party vendors and service providers who assist us in operating the App (e.g., cloud hosting, analytics, push notification services). These parties are contractually obligated to keep your information confidential and use it only to provide services on our behalf.

4.3 Legal Requirements

We may disclose your information if required to do so by law, regulation, or a valid legal process, or if we believe disclosure is necessary to protect our rights, property, or the safety of our users or others.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction, subject to the same privacy protections described in this Policy.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable laws and regulations. When your information is no longer needed, we will securely delete or anonymize it.

Data Security

We implement industry-standard technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encrypted data transmission (TLS/HTTPS)
• Secure authentication mechanisms
• Access controls limited to authorized personnel
• Regular security assessments

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Your Rights and Choices

Depending on your location and applicable law, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Restriction: Request restriction of processing of your personal information.
• Objection: Object to certain processing activities.
• Withdrawal of Consent: Where processing is based on consent, you may withdraw consent at any time.

To exercise any of these rights, please contact us using the details provided in Section 11.

Children's Privacy

The SMIT App is intended for use by authorized employees and contractors of SCG and affiliated companies. It is not directed to or intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information promptly.

Third-Party Links and Services

The App may contain links to or integrate with third-party services. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies. Our Privacy Policy applies solely to information collected through the SMIT App.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Policy.
• Notify you through the App or by other appropriate means.

Your continued use of the App after any changes constitutes your acceptance of the updated Privacy Policy.

Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the Kingdom of Thailand, including the Personal Data Protection Act B.E. 2562 (2019) (PDPA) and any amendments thereof.