Data Privacy

Data privacy is a paramount consideration deeply embedded in our business operations. We have fortified our organisational measures and internal systems to align with the stringent requirements of the Personal Data Protection Act B.E. 2562 (PDPA 2019) and other local data privacy regulations in the various countries where we operate.

Our Privacy Policy outlines how we collect, process, transfer, store, and dispose of personal data. This commitment is integral to safeguarding the privacy of our stakeholders.


CUSTOMERS

Dusit takes the privacy of our guests and customers' data very seriously. We have reviewed the essential elements of data privacy obligations and incorporated them into the day-to-day operations of all business units. Our operations enforce two key components:

DATA PRIVACY BY DEFAULT
This means that we only collect the data that is necessary for our business purposes, and we store it for only as long as it is needed. We also notify our guests and customers of their rights and how their data is being processed, and we have made our Privacy Notice available and accessible both online and offline as required by law.
DATA PRIVACY BY DESIGN
This means that we design our processes and systems with privacy in mind. For example, we have adjusted our guest registration process and loyalty membership enrollment process to better handle our guests' personal data.

EMPLOYEES

Employee data is a top priority for Dusit. We apply data privacy to both people management and recruitment processes, where we only collect the necessary data from potential candidates and store it only within a specified timeframe.