Privacy Policy & Terms of Service

PDPA Compliance

Wong Brother Inter-Trade Co., Ltd. · Last Updated: May 18, 2026

1. Privacy Policy

Wong Brother Inter-Trade Co., Ltd. ("the Company", "we"), acting as the Data Controller for the MAXXMA brand, recognises and places the highest importance on your personal rights and the protection of your personal data. This Privacy Policy has been prepared to clarify the details, conditions, and practices regarding the collection, processing, use, disclosure, and technological security measures for protecting your personal data when you visit, interact with, or use services through the website maxxmafilm.com or through the Company's offline channels.

This policy has been updated and is strictly governed by the Personal Data Protection Act B.E. 2562 (PDPA) and is aligned with international personal data protection standards such as the General Data Protection Regulation (GDPR) to the extent applicable to rights and operations outside the Kingdom of Thailand.

2. Personal Data We Collect

To ensure that the Company's services operate smoothly and with maximum efficiency, we may collect your personal data as follows:

2.1 Personal Data You Provide Directly (Active Data Collection)

• Identity and Contact Information: Full name, delivery address, contact telephone number, email address, and social media accounts such as Line ID or Facebook account.
• Warranty-Related Information: Vehicle brand, model, chassis number, licence plate number, installation photographs, and details on receipts or tax invoices, for use in the official MAXXMA product warranty registration.
• Contact Form Data: Questions, comments, or product sample requests submitted through website forms or the Company's official social media channels.

2.2 Technical Data Collected Automatically (Passive Data Collection)

• Computer and Network System Information: IP addresses, device ID / MAC addresses, web browser types, operating systems, and internet service provider (ISP).
• Online Behaviour Data: Clickstream data (page visit history), connection duration, referral URLs, on-site search queries, and cookie data.
• Geographic Data: Approximate or precise location (when you permit GPS coordinate access via your browser, for locating nearby MAXXMA authorised dealers).

3. Purposes for Collecting and Processing Personal Data

The Company processes your personal data for the following specific and lawful purposes:

1. Service Fulfilment and Customer Operations: For registration, recording, and operation of the MAXXMA product warranty system (automotive window film, architectural film, PPF, and roller blinds), warranty document delivery, and product sample dispatch upon request.
2. Cyber Service Improvement: Statistical data and website usage insights for improving system operations, structure, user interface (UI/UX), and network security.
3. Marketing and Communications: Sending promotional information, special offers, trade shows, or marketing news you may be interested in — only where you have provided prior voluntary opt-in consent, and you may opt out at any time.
4. Legal and Compliance Obligations: Tax invoice issuance, accounting operations, reporting to the Revenue Department, or reporting to law enforcement authorities as required by law.
5. Rights Protection and Fraud Prevention: Protecting legitimate business interests, preventing warranty fraud, and preventing unauthorised computer system access.

4. Legal Basis for Processing Personal Data

All personal data processing must be based on a lawful ground under the Personal Data Protection Act B.E. 2562. The Company relies on the following primary legal bases:

• Consent Basis (Section 19): For marketing campaigns and the collection of non-essential cookies for behavioural analytics and advertising purposes.
• Contractual Basis (Section 24(3)): For product delivery, fulfilment, or processing of the MAXXMA warranty system in accordance with customer agreements.
• Legitimate Interests Basis (Section 24(5)): For the Company's legitimate interest in website security and user behaviour analysis for server stability improvement — without overriding your fundamental rights and freedoms.
• Legal Obligation Basis (Section 24(6)): For preparing accounting documents and tax invoices under the Revenue Code, and for providing computer data to authorised government agencies under the Computer Crimes Act with valid court orders or legal process.

5. Data Retention Period

The Company sets retention periods for personal data only as long as necessary for processing purposes or up to the maximum periods required by law:

• Warranty System Data: Throughout the warranty period of the film or product (5–10 years depending on product model) and retained for a further period not exceeding 2 years after warranty expiry, for legal compliance and retrospective claims purposes.
• Customer Inquiry and Service Data: Retained for no longer than 2 years from the date the inquiry or customer service interaction is completed.
• Website Analytics and Cookie Data: Retained for no longer than 2 years from the date the online behaviour was recorded.
• Tax and Accounting Records: Retained for not less than 10 years, in accordance with the Revenue Code and the Accounting Act.

When the retention period has expired or the data is no longer required, the Company will delete, destroy, or anonymise your personal data within 30 business days.

6. Disclosure of Personal Data to Third Parties

The Company strictly controls access to personal data and will not disclose your data to any other party except for the purposes stated below and under written agreements:

• MAXXMA Authorised Dealer and Installation Centre Network: To assist with warranty coordination, entitlement verification, and product installation or replacement under warranty terms.
• External Data Processors: Cloud server providers, statistical analytics tool providers (such as Google Analytics and Meta Analytics), and postal/courier service providers — provided with data only on a minimum-necessary basis and bound by strict Data Processing Agreements (DPA) that prohibit secondary commercial use.
• Law Enforcement Authorities: Police, courts, or government audit agencies where there is a clear and valid legal request or court order under Thai law.

7. International Data Transfer

Where operationally necessary, your personal data may be transferred to and stored in cloud computing databases of overseas service providers whose servers are located outside the Kingdom of Thailand, in accordance with Section 28 of the PDPA. The Company screens and selects only providers with global security standards equivalent to or exceeding ISO/IEC 27001 and international data privacy frameworks.

8. Data Subject Rights Under the Law

Under the Personal Data Protection Act B.E. 2562, you, as a data subject, have the following enforceable legal rights, which you may exercise at any time:

• Right to Withdraw Consent (Section 19): You may revoke any consent previously given for processing your personal data at any time.
• Right of Access (Section 30): You have the right to request inspection, information disclosure, and to receive copies of your personal data held by us, including the right to request disclosure of the source of data obtained without consent.
• Right to Data Portability (Section 31): The right to receive your personal data in a compressed, machine-readable format that can be conveniently transferred to another data controller.
• Right to Object (Section 32): The right to object to processing of your personal data for marketing or other academic purposes.
• Right to Erasure / Right to be Forgotten (Section 33): The right to request deletion, destruction, or anonymisation of your personal data where it is no longer necessary for its original purpose or has been used unlawfully.
• Right to Restriction of Processing (Section 34): The right to temporarily suspend processing of your data while a dispute is under investigation.
• Right to Rectification (Section 36): You have the right to request correction, update, or supplementation of your personal data to ensure it is accurate, complete, current, and non-misleading.
• Right to Lodge a Complaint (Section 73): You have the right to submit a written complaint to the Personal Data Protection Committee (PDPC) when a violation of the PDPA is found.

9. Cookies and Tracking Technology

The website maxxmafilm.com uses cookies to enhance display convenience and collect behavioural data, as follows:

• Strictly Necessary Cookies: Essential for the basic functioning of the website to ensure pages and links operate normally.
• Functional & Performance Cookies: Used to measure and analyse the performance and effectiveness of pages and knowledge articles on the website (e.g. Google Analytics).
• Targeting & Advertising Cookies: Used to track and present MAXXMA promotions or products tailored to your interests (e.g. Google Tag Manager, Meta Pixel).

You may manage, accept, or reject these cookies by adjusting your web browser's privacy settings. Disabling certain cookies may cause some parts of the website to function incorrectly.

10. Advanced Security Measures

The Company implements international-standard security measures across physical, organisational, and technical dimensions, in accordance with Section 37(1) of the PDPA, including:

• Encryption of all data transmitted through the website using high-security technology: SSL/TLS Encryption (HTTPS).
• Installation of comparable cyber defence systems such as firewalls and network threat detection programs.
• Restricted and logged database access rights through secure Access Control Policies.
• A Data Breach Response Policy with measures for reporting to the Personal Data Protection Committee and affected data subjects within 72 hours of discovering a breach, strictly in accordance with the PDPA.

11. Personal Data of Vulnerable Groups

The Company recognises the sensitivity of personal rights of vulnerable groups. Where processing involves the personal data of minors under 20 years of age (unless legally married under the Civil and Commercial Code), incompetent persons, or quasi-incompetent persons, the Company will obtain and verify written prior consent from the legally authorised parent, guardian, or curator, in accordance with Section 20 of the PDPA.

12. Website Terms of Service

By accessing, browsing, or using the website maxxmafilm.com, you accept and agree to be legally bound as a party to these Terms of Service. If you do not accept these terms, please discontinue access and use of the website immediately.

• Product specifications, physical data, heat rejection performance data, data sheets, and pricing displayed on this website are intended for informational and general consumer guidance purposes only.
• The Company reserves the right to modify product specifications, pricing, warranty terms, and to update or remove website content at any time without prior notice to users.
• Users acknowledge that they will access this website only for purposes that are lawful and morally proper.

13. Intellectual Property and Copyright Protection

All content and creative works displayed on this website receive the maximum protection under Thai intellectual property law and all relevant international treaties:

13.1 Copyright Protection (Copyright Act Compliance)

Technical articles, comparative window film data, knowledge hub documentation, text, graphics, original installation photographs, video works, graphic design, user interface (UI/UX), and all programming code are creative works of Wong Brother Inter-Trade Co., Ltd., protected under the Copyright Act B.E. 2537 and its amendments (including B.E. 2558 and the 5th Edition B.E. 2565) and international agreements: the Berne Convention, the WIPO Copyright Treaty (WCT), and the TRIPS Agreement.

13.2 Trademark Protection (Trademark Act Compliance)

"MAXXMA", the MAXXMA logo, product trade symbols, and product names including Black Panther, Refined, Signature, Independent Plus, Polarized, Nano Carbon Ceramic, Clear Guard, and Eco Blind are registered trademarks, service marks, and commercial symbols of the Company, protected under the Trademark Act B.E. 2534 (and its amendments) and the Madrid Protocol.

13.3 Prohibitions on Modification, Publication, and Reproduction

No person may replicate, copy, reproduce, modify, falsify, publicly disclose, transfer, or commercially exploit — in whole or in part — any content or intellectual property of the Company without prior written authorisation signed by an authorised director of the Company. Such actions constitute serious intellectual property violations with the following legal consequences:

• Criminal Penalties: Imprisonment of up to 4 years and/or fines of up to 800,000 Baht under the Copyright Act.
• Civil Penalties: Actual damages, punitive damages, disgorgement of profits from the infringement, and full court costs and attorney's fees.

14. AI and Machine Learning Data Restrictions

15. Computer Crimes Act Compliance

Users agree not to violate the Company's computer systems and networks, strictly in accordance with the Computer Crimes Act B.E. 2550 (and its amendment B.E. 2560). The following actions are prohibited:

• Using automated systems such as bots, scraping tools, spiders, or crawlers to extract, collect, or copy MAXXMA images, data, and product specifications.
• Attempting unauthorised access to server databases (unauthorised hacking access) or exploiting web code vulnerabilities to intrude into the system's backend.
• Introducing false, misleading, obscene, or national-security-threatening data into the Company's computer systems or website pages.
• Releasing viruses, malware, trojans, or conducting DDoS (Distributed Denial of Service) attacks causing damage to website performance.

Violations constitute criminal offences. The Company will report offenders to the Technology Crime Suppression Division (TCSD) for prosecution under the Computer Crimes Act, which carries penalties of up to 5 years' imprisonment and/or fines of up to 100,000 Baht, in addition to civil damages claims for network system harm.

16. Liability Limitations and Indemnification

16.1 Limitation of Liability

The Company presents website content and services on an "as-is" and "as-available" basis. The Company bears no responsibility in any case for damages including, but not limited to, internet disruptions, server performance degradation, cybersecurity theft beyond standard security measures, or errors arising from automated translation systems.

16.2 Indemnification Agreement

Users agree and undertake to indemnify, defend, protect, and hold harmless the directors, employees, agents, and business partners of Wong Brother Inter-Trade Co., Ltd. from all damages, expenses (including attorney's fees), compensation, lawsuits, and out-of-court settlement costs arising from the user's violation of these Terms of Service, intellectual property infringement, violations of the Computer Crimes Act, or the use of website data for fraud or commercial defamation of other persons.

17. Governing Law and Jurisdiction

This Privacy Policy and Terms of Service are governed by, interpreted under, and subject to the laws of the Kingdom of Thailand. In the event of any dispute, claim, lawsuit, or legal interpretation issue arising from or related to this policy document, the parties agree to submit the matter exclusively to the jurisdiction of the courts of Bangkok, Thailand.

18. Data Protection Officer (DPO) Contact

If you have questions, concerns, wish to exercise your data subject rights, or would like information about service security, please contact the Data Controller and Data Protection Officer (DPO) at the following official contact details: