Arrival Assist - Protecting Your Personal Data in Compliance with Thailand's PDPA

Last updated: July 23, 2025

Privacy Notice: At Arrival Assist (operated by GlobEntry Services LLC), we are committed to protecting the privacy and security of your personal data. This Privacy Policy specifically outlines how we collect, use, disclose, transfer, and otherwise process the personal data of individuals residing in or accessing our services from Thailand, in compliance with the Personal Data Protection Act B.E. 2562 (2019) (PDPA) of Thailand.

Table of Contents

• 1. Introduction and Scope
• 2. Important Information and Who We Are
• 3. The Personal Data We Collect About You
• 4. How Your Personal Data is Collected
• 5. Purposes and Lawful Bases for Processing Your Personal Data
• 6. Disclosure of Your Personal Data
• 7. International Transfers
• 8. Data Security
• 9. Data Retention
• 10. Your Legal Rights Under the PDPA
• 11. Children's Privacy
• 12. Changes to This Privacy Policy
• 13. Contact Us

1. Introduction and Scope

This Privacy Policy applies to all personal data collected and processed by Arrival Assist through your use of our website and services, particularly when you are located in Thailand or when your data is processed in Thailand. It is crucial that you read this Privacy Policy carefully to understand our practices regarding your personal data and how we will treat it. This policy supplements other notices and privacy policies and is not intended to override them.

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of our services after any such changes constitutes your acceptance of the revised Privacy Policy.

2. Important Information and Who We Are

Purpose of this Privacy Policy

This Privacy Policy provides detailed information on how Arrival Assist collects, uses, and processes your personal data when you interact with our website and services. This includes data you provide when you register for an account, apply for services, make a payment, or engage with our customer support.

Data Controller

GlobEntry Services LLC is the data controller responsible for your personal data. This means we determine the purposes and means of processing your personal data. In this Privacy Policy, "Arrival Assist," "we," "us," and "our" refer to GlobEntry Services LLC.

Contact Details

If you have any questions about this Privacy Policy, our data processing practices, or if you wish to exercise your privacy rights, please contact our Data Protection Officer (DPO) at:

Full name of legal entity: GlobEntry Services LLC
Email address: Care@arrival-assist.com
Postal address: 1111B S Governors Ave, #37342, Dover, DE 19904, United States

You have the right to lodge a complaint at any time with the Personal Data Protection Committee (PDPC) in Thailand, the relevant supervisory authority for data protection issues. However, we encourage you to contact us first so we can attempt to resolve your concerns.

3. The Personal Data We Collect About You

Personal data, as defined by the PDPA, refers to any information relating to an identified or identifiable natural person. We may collect, use, store, and transfer various types of personal data about you, which we have grouped as follows:

• Identity Data: Includes first name, last name, username or similar identifier, marital status, title, date of birth, gender, nationality, passport details, visa information, and other identification information required for travel document applications.
• Contact Data: Includes billing address, email address, and telephone numbers.
• Financial Data: Includes bank account and payment card details necessary for processing transactions.
• Transaction Data: Includes details about payments to and from you and other details of services you have purchased from us.
• Technical Data: Includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
• Profile Data: Includes your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.
• Usage Data: Includes information about how you use our website and services.
• Marketing and Communications Data: Includes your preferences in receiving marketing from us and our third parties and your communication preferences.
• Travel Information: Includes flight details, accommodation details, and other travel-related information necessary for processing your applications.

Special Categories of Personal Data: We generally do not collect Special Categories of Personal Data (e.g., data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health data, genetic data, biometric data, data concerning a person's sex life or sexual orientation) or data relating to criminal convictions and offenses, unless it is strictly necessary for the provision of our services and we have obtained your explicit consent or another lawful basis applies.

4. How Your Personal Data is Collected

We use different methods to collect data from and about you, including through:

• Direct interactions: You may provide us with your Identity, Contact, Financial, and Travel Information by filling in forms on our website or by corresponding with us via post, phone, email, or other direct communication channels.
• Automated technologies or interactions: As you interact with our website, we automatically collect Technical Data about your equipment, browsing actions, and patterns using cookies, server logs, and other similar technologies.
• Third parties or publicly available sources: We may receive personal data about you from various third parties and public sources, such as analytics providers, advertising networks, payment service providers, and data brokers.

5. Purposes and Lawful Bases for Processing Your Personal Data

Under the PDPA, we must have a lawful basis to process your personal data. We will only use your personal data when the law allows us to. The table below describes all the ways we plan to use your personal data and which of the lawful bases we rely on to do so:

Purpose/Activity	Type of Data	Lawful Basis for Processing (PDPA)
To register you as a new customer	Identity, Contact	Performance of a contract
To process and deliver your service requests, including managing payments, fees, and charges	Identity, Contact, Financial, Transaction, Travel Information	Performance of a contract, Legitimate interests (for recovering debts due to us)
To manage our relationship with you, including notifying you about changes to our terms or privacy policy	Identity, Contact, Profile, Marketing and Communications	Performance of a contract, Legal obligation, Legitimate interests
To administer and protect our business and this website	Identity, Contact, Technical	Legitimate interests (for running our business, network security, fraud prevention), Legal obligation
To deliver relevant website content and advertisements	Identity, Contact, Profile, Usage, Marketing and Communications, Technical	Legitimate interests (to study how customers use our products/services and grow our business)
To use data analytics to improve our website and services	Technical, Usage	Legitimate interests (to develop our business and inform our marketing strategy)

6. Disclosure of Your Personal Data

We may share your personal data with the parties set out below for the purposes described in Section 5. We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

• Internal Third Parties: Other companies within the GlobEntry Services LLC group acting as joint controllers or processors.
• External Third Parties: Service providers, professional advisers, government authorities, and potential business partners or acquirers.

7. International Transfers

As GlobEntry Services LLC is based in the United States and operates globally, your personal data may be transferred to, stored, and processed in countries outside of Thailand, including the United States, where data protection laws may differ from those in Thailand. Whenever we transfer your personal data out of Thailand, we ensure a similar degree of protection is afforded to it by implementing appropriate safeguards.

8. Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

9. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your personal data, and the applicable legal requirements.

10. Your Legal Rights Under the PDPA

Under certain circumstances, you have rights under the PDPA in relation to your personal data:

• Right to be informed

  You have the right to be informed about the collection, use, and disclosure of your personal data.

• Right of access

  You have the right to obtain from us a copy of your personal data we hold about you.

• Right to rectification

  You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

• Right to erasure

  You have the right to request the erasure or destruction of your personal data in certain circumstances.

• Right to restrict processing

  You have the right to request the restriction of processing of your personal data in certain circumstances.

• Right to data portability

  You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

• Right to object

  You have the right to object to the processing of your personal data in certain circumstances.

• Right to withdraw consent

  Where we rely on your consent, you have the right to withdraw that consent at any time.

If you wish to exercise any of these rights, please contact us using the contact details provided in Section 2. We try to respond to all legitimate requests within one month.

11. Children's Privacy

Our website and services are not intended for children under the age of 10. We do not knowingly collect personal data from children under 10. If we become aware that we have collected personal data from a child under 10 without parental consent, we will take steps to delete that information as quickly as possible.

12. Changes to This Privacy Policy

We keep our Privacy Policy under regular review. This version was last updated on July 23, 2025. Any changes we may make to our Privacy Policy in the future will be posted on this page and, where appropriate, notified to you by email. Please check back frequently to see any updates or changes to our Privacy Policy.

13. Contact Us

For any questions or concerns regarding this Privacy Policy or our data practices, please contact us:

GlobEntry Services LLC
1111B S Governors Ave, #37342
Dover, DE 19904, United States

Email: care@arrival-assist.com