Privacy Policy

1) Who we are

This Website is operated by Citadel Co., Ltd. We provide information and marketing related to our products and/or services. We are the “data controller” for personal data collected through this Website and related marketing activities, unless otherwise stated.

2) Personal data we collect

We may collect the following categories of personal data:

• Contact details: such as your name, email address, phone number, and any details you provide in enquiries or forms.
• Enquiry and communication data: messages you send to us, call notes, and records of correspondence.
• Website usage data: pages viewed, links clicked, time on page, referring URLs, and other interaction data.
• Device and technical data: IP address, browser type, device identifiers, operating system, and approximate location (e.g., city/region).
• Marketing and advertising data: ad interactions (impressions/clicks), campaign identifiers, and conversion events.

You can choose not to provide certain data, but some features (such as submitting an enquiry) may not work as intended.

3) How we use your data

We use personal data for the following purposes:

• To respond to enquiries and communicate with you.
• To provide and improve our Website, services, and customer experience.
• To measure and improve the performance of our marketing campaigns.
• To run and optimise advertising on platforms such as Google and Meta (Facebook/Instagram).
• To detect, prevent, and investigate fraud or misuse of our Website.
• To comply with legal obligations and enforce our terms.

4) Legal basis

Where applicable, we process personal data under one or more of the following legal bases:

• Consent: where you have given consent (for example, certain cookie categories or marketing preferences).
• Contract: to take steps at your request before entering into a contract, or to perform a contract with you.
• Legitimate interests: to operate, maintain, and improve our Website, and to market our services in a reasonable way.
• Legal obligation: to comply with laws and regulations.

If you have questions about the legal basis for a specific processing activity, please contact us using the details below.

5) Cookies and similar technologies

We use cookies and similar technologies to help the Website function, understand how visitors use the Website, and support marketing and analytics.

Types of cookies we may use

• Strictly necessary cookies: required for the Website to operate.
• Performance/analytics cookies: help us measure traffic and usage (e.g., Google Analytics 4).
• Marketing cookies: used to deliver more relevant ads and measure ad performance (e.g., Google Ads, Meta Pixel).
• Functional cookies: remember preferences where applicable.

You can manage cookies through your browser settings and, where available, through our cookie banner or preference centre. Disabling cookies may affect Website functionality.

6) Advertising and analytics (Google, Meta, GA4)

We use third-party services to run ads and measure Website performance. These services may use cookies, pixels, and similar technologies to collect information about your visits and interactions.

Google Ads

We run advertising campaigns through Google. Google may collect data about ad impressions, clicks, and conversions. Depending on your settings and consent, this may include the use of cookies and identifiers to measure campaign performance and improve ad relevance.

Meta (Facebook/Instagram) Ads

We run advertising campaigns through Meta platforms. If implemented on our Website, Meta technologies (such as the Meta Pixel) can help measure ad performance, build audiences, and optimise delivery. Meta may process data in accordance with its own policies.

Google Analytics 4 (GA4)

We use Google Analytics 4 to understand how visitors use our Website, such as which pages are visited and how users interact with content. GA4 may collect device and usage data and may use cookies or identifiers depending on configuration and consent.

Your choices

• You can adjust cookie settings via your browser and any cookie preference tools on our Website.
• You can review and adjust ad personalisation settings within your Google and Meta accounts.
• You can opt out of certain types of targeted advertising through industry opt-out tools where available.

Note: We do not control how third-party platforms process your data. Please review their privacy policies for more information.

7) How we share your data

We may share personal data in the following circumstances:

• Service providers: vendors who support website hosting, analytics, advertising, CRM, and communications.
• Advertising partners: such as Google and Meta, to measure and optimise ad performance (subject to your settings and consent where required).
• Legal and compliance: where required by law, regulation, legal process, or to protect rights and safety.
• Business transfers: in connection with a merger, acquisition, or sale of assets (subject to appropriate safeguards).

We do not sell your personal data as “personal data sales” in the ordinary meaning of the term.

8) Data retention

We retain personal data only as long as necessary for the purposes described in this policy, including responding to enquiries, meeting legal obligations, resolving disputes, and enforcing agreements. Retention periods may vary depending on the type of data and the context of collection.

9) Security

We use reasonable administrative, technical, and organisational measures to protect personal data. However, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security.

10) Your rights and choices

Depending on applicable law, you may have rights regarding your personal data, such as:

• Request access to personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data in certain circumstances.
• Object to or request restriction of certain processing.
• Withdraw consent (where processing is based on consent).
• Request a copy of your personal data in a usable format (data portability), where applicable.

To exercise your rights, please contact us using the details below. We may need to verify your identity before responding.

11) International transfers

Some of our service providers (including analytics and advertising platforms) may process data outside Thailand. Where cross-border transfers occur, we take reasonable steps to ensure appropriate safeguards are in place consistent with applicable law.

12) Children’s privacy

Our Website is not intended for children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate steps.

13) Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. Your continued use of the Website after changes are posted means you accept the updated policy.

14) Contact details

If you have questions about this Privacy Policy or our data practices, please contact us: