1. Information We Collect

At NextForceConnect, we collect various types of information to provide you with personalized financial planning services and improve our platform. The data we gather falls into several categories, each serving specific purposes in delivering our activity-based budgeting tools.

Personal Information

• Full name, email address, and phone number when you register
• Mailing address for service communications and legal notices
• Date of birth and identification details as required by Thai financial regulations
• Employment information and income details for budgeting calculations
• Financial account information when you connect banking services

Technical Data

We automatically collect technical information when you interact with our platform, including your IP address, browser type, device information, and usage patterns. This data helps us maintain security and improve our services.

Financial Data

With your explicit consent, we collect and analyze your financial transactions, spending categories, and budgeting preferences to provide accurate activity-based budgeting recommendations tailored to your lifestyle in Thailand.

2. How We Use Your Information

Your information enables us to deliver comprehensive financial planning services while maintaining the highest standards of data protection. We process your data only for legitimate business purposes and with appropriate legal basis.

1. Service Delivery: Processing transactions, generating budget reports, and providing personalized financial recommendations
2. Communication: Sending service updates, educational content, and responding to your inquiries
3. Security: Protecting your account from unauthorized access and preventing fraudulent activities
4. Legal Compliance: Meeting Thai financial service regulations and tax reporting requirements
5. Platform Improvement: Analyzing usage patterns to enhance our budgeting tools and user experience
6. Customer Support: Providing technical assistance and resolving account-related issues

3. Data Sharing and Third Parties

We maintain strict control over your personal information and only share data with trusted partners when necessary for service delivery or legal compliance. Our sharing practices are governed by contractual agreements that ensure your data receives the same level of protection.

We never sell, rent, or trade your personal information to third parties for their marketing purposes. Any data sharing occurs under strict confidentiality agreements and only to the extent necessary for the specified purpose.

4. Your Rights and Choices

Under Thai privacy laws and our commitment to data protection, you have comprehensive rights regarding your personal information. We've designed our systems to make exercising these rights straightforward and efficient.

Access and Portability Rights

• Request a copy of all personal data we hold about you
• Download your financial data in a portable format
• Receive information about how your data is being processed
• Access your data processing history and consent records

Control and Modification Rights

• Update or correct inaccurate personal information
• Withdraw consent for specific data processing activities
• Opt out of marketing communications while maintaining service updates
• Modify your privacy preferences and data sharing settings

Deletion and Restriction Rights

You can request deletion of your account and associated data, though we may retain certain information for legal compliance. We also offer data processing restrictions for specific scenarios while maintaining your account access.

5. Data Security Measures

Protecting your financial information requires robust security measures at every level of our operations. We employ industry-leading technologies and practices to safeguard your data against unauthorized access, theft, and misuse.

Technical Safeguards

All data transmission occurs through encrypted channels using TLS 1.3 protocols. Your information is stored in encrypted databases with regular security audits and penetration testing to identify and address potential vulnerabilities.

Access Controls

We implement strict access controls ensuring only authorized personnel can access your data on a need-to-know basis. All employee access is logged, monitored, and regularly reviewed for compliance with our data handling policies.

Incident Response

Our security team monitors systems continuously for suspicious activities. In the unlikely event of a data breach, we have established procedures to contain the incident, assess impact, and notify affected users within 72 hours as required by Thai privacy regulations.

6. Data Retention and Deletion

We retain your personal information only as long as necessary to provide our services and comply with legal obligations. Our retention policies balance your privacy rights with business needs and regulatory requirements in Thailand's financial sector.

When you close your account, we begin the deletion process while preserving records required for legal compliance. You'll receive confirmation once the deletion is complete, typically within 90 days of your request.

7. International Data Transfers

While our primary operations are based in Thailand, some of our technology partners and service providers operate from other countries. We ensure all international data transfers meet Thai privacy law requirements and maintain your data protection rights.

When transferring data internationally, we use approved transfer mechanisms including adequacy decisions, standard contractual clauses, and binding corporate rules. These safeguards ensure your data receives equivalent protection regardless of its location.

Data Processing Locations

• Primary servers located in Thailand with local data residency
• Backup systems in Singapore under approved adequacy frameworks
• Analytics processing in the European Union with GDPR compliance
• Customer support tools hosted in approved third countries with contractual safeguards

8. Children's Privacy

NextForceConnect's financial planning services are designed for adults and we do not knowingly collect personal information from individuals under 18 years of age. If you're under 18, please do not provide any personal information through our platform.

If we discover we've collected information from a minor, we'll delete it immediately and notify the parents or guardians as required by Thai law. Parents who believe we may have collected their child's information should contact us immediately for assistance.

9. Updates to This Policy

We review and update this privacy policy regularly to reflect changes in our practices, services, and legal requirements. Significant changes will be communicated through email notifications and prominent notices on our platform at least 30 days before they take effect.

Continued use of our services after policy updates constitutes acceptance of the revised terms. However, we'll obtain separate consent for any material changes that affect how we process your sensitive financial information.