Updated in February 2026

 

We, Prudential Life Assurance (Thailand) Public Company Limited (hereinafter referred to as “Company” "we", "us", or "our" depending on the context), take the privacy and protection of your Personal Data (as defined below) seriously. 

 

We are using closed-circuit television (CCTV) devices for monitoring our designated space within our premise to protect life, health, safety, and property. We collect personal data of all individuals entering the monitored space within our premise (collectively referred to as "you" or "your") through the use of CCTV devices.  

 

So, we have set out below information about our processing of your Personal Data or when you otherwise interact with us, what rights you have, and how you can get in touch if you want to know more. For the purpose of data protection laws, the data controller of your Personal Data is Prudential Life Assurance (Thailand) Public Company Limited located at 944 Mitrtown Office Tower, 10th, 29th – 31st Floor, Rama 4 Road, Wangmai, Pathumwan, Bangkok, 10330. If you have any questions about anything in this Privacy Notice, or want to exercise any rights you may have, our contact information can be found in the section “Contact Us”.  

 

In order for data subjects to be confident that we process personal data responsibly and comply with the Personal Data Protection Act B.E. 2562 and relevant data protection laws (“Personal Data Protection Laws”), including any other applicable laws, we’ve set out the below information about our processing of your Personal Data, what rights you have, and how you can get in touch if you want to know more.

 

When we say “Personal Data”, we mean any information relating to an individual, which enables the identification of such individual, whether directly or indirectly, as defined in the Personal Data Protection Laws and also as listed in Part A below. We collect Personal Data from you that is necessary for us to maintain the security and safety as described in Part B.

 

You acknowledge and agree that the Company may, from time to time, amend and update this Privacy Notice in order to ensure it is consistent with future developments, industry trends and/or any changes in legal or regulatory requirements. We encourage you to check our Privacy Notice from time to time on our website, as the version of our Privacy Notice which is displayed on our website takes precedence over all previous versions of our Privacy Notice. We will also notify you of changes in accordance with relevant legal requirements.

 

Please note that the purposes set forth in this Privacy Notice supplement but do not supersede any other consent you may have previously provided to us or which you may provide to us in the future.

 

Part A – Personal Data we process  

We capture images and motion within the monitored space i.e. main entrance, common areas that share physical spaces, etc. through the CCTV devices ("CCTV Data"). 

 

Part B – How we use your Personal Data and why

 

Accuracy and protection of personal data

We will take reasonable efforts to ensure that any personal data we have about you is accurate and complete.

 

We will also take reasonable efforts to protect the personal data in our possession by making reasonable security arrangements to prevent unauthorized access, collection, use, disclosure, copying, modification, disposal or any similar risks.

We may collect, use, disclose, and carry out any operation, including but not limited to recording, holding, adapting, altering, modifying, destroying, deleting, retrieving, combining, copying, transmitting, storing, extracting, amending, or adding, related to your CCTV Data and other Personal Data concerning you, for the "CCTV Monitoring Purposes" as listed below: 

  1. to protect your health and personal safety, including your belongings;

  2. to protect our premise facilities and assets from damage, disruption, vandalism, and other crime;

  3. to support law enforcement organizations in the deterrent, prevention, detection, and prosecution of crime;

  4. to assist in the effective resolution of disputes which arise in the course of disciplinary or grievance proceedings;

  5. to assist in the investigation or proceedings concerning a whistleblowing complaint;

  6. to assist in the establishment or defense of any civil litigation, including but not limited to employment proceedings;

  7. to identify the individual; and

  8. to comply with the applicable laws.

 

We will install CCTV devices in plain sight, in our premise. The areas we will not install the CCTV devices are toilets, or rest areas including private areas for employees. 

 

Our CCTV devices are in operation 24 hours a day and 365 or 366 days a year.

 

We will place signage, where possible at the entrance or easily visibly area by people to alert you that a CCTV installation is in use.

 

Part C – Legal bases

We will not collect, use, disclose process, transfer, and carry out any operation, including but not limited to recording, holding, adapting, altering, modifying, destroying, deleting, retrieving, combining, copying, transmitting, storing, extracting, amending, or adding, related to your CCTV Data and other Personal Data concerning you, without consent except for the following:

  1. Vital interest. It is necessary for our prevention or suppression of a danger to a person's life, body, or health & safety;

  2. Legitimate interest. It is in our legitimate interest to protect your health and personal safety, as well as your belongings, our premise, facilities and assets, and to carry out any other acts to achieve the CCTV Monitoring Purposes. We will endeavor on the continuing basis to balance our legitimate interest and that of any relevant third parties, as the case maybe, and your fundamental rights and freedoms related to the protection of the CCTV Data concerning you. We will also endeavor to identify any steps required to achieve the right balance as appropriate;

  3. Legal obligations. We owe a duty to comply with the legal obligations prescribed by the applicable laws, including but not limited to the laws regarding safety and environment in the workplace. We consider the use of the CCTV as a necessary measure to enable us to meet those obligations.

 

Part D – Who we share your Personal Data with and why 

We will keep CCTV Data concerning you confidential and will not disclose it except to our subsidiaries, affiliates, and other carefully selected third parties now or in the future, licensees, joint venture partners, and/or service providers, to achieve the CCTV Monitoring Purposes provided in this policy. 

Third parties to which we may disclose CCTV Data and other Personal Data concerning you include:  

  1. Prudential Group companies. We may disclose CCTV Data and other Personal Data concerning you to Prudential Group companies, as part of our legitimate interest and our affiliates' interest to achieve the CCTV Monitoring Purposes.

  2. Governmental and/or regulatory organizations. We may disclose CCTV Data and other Personal Data concerning you to comply with legal obligations, or to support or assist law enforcement organizations with regard to the investigation and prosecution of civil or criminal proceedings.

  3. Third-party service providers. We may disclose CCTV Data and other Personal Data concerning you as our necessary steps to ensure our protection of your health and personal safety, personal data and belongings.  

 

Part E – International transfer of Personal Data

We may transfer your Personal Data to third parties, such as Prudential Group companies, service providers, and governmental or public authorities (e.g., for the purpose of complying with FATCA), located in other countries (including, but not limited to Republic of Singapore, Hong Kong Special Administrative Region of the People's Republic of China, Republic of India, United States of America, United Kingdom of Great Britain and Northern Ireland, Commonwealth of Australia, Federal Republic of Germany, Japan, Republic of Indonesia, Kingdom of the Netherlands, French Republic, Republic of Ireland, Federation of Malaysia) in order to carry out the purposes specified above. Where there is such a transfer, it will be done in compliance with the applicable laws. 

To the extent we transfer your Personal Data to a country with a level of data protection standards not equivalent to Thailand, we will ensure that an adequate degree of protection is afforded to the transferred Personal Data, or the transfer is otherwise permitted in accordance with the applicable data protection law.

 

Part F – Security of Personal Data

We have implemented appropriate Personal Data security measures as required by applicable law, including the Personal Data Protection Laws. This covers the collection, use, and/or disclosure of Personal Data both in document form, electronic form, and/or any other format consisting of organizational, technical, and physical measures. This is to prevent unlawful or unauthorized loss, access, use, alteration, correction or disclosure of your Personal Data. 

To control access to Personal Data and the use of devices for collecting and processing Personal Data, we have put in place measures that are safe and suitable for the collection, use, and disclosure of Personal Data. We also put in place measures to restrict access to Personal Data and the use of devices for the collection and processing of Personal Data in which we have defined, rights of access for authorized employees, including users’ responsibility to prevent unauthorized access to, disclosure, knowledge, or duplication of Personal Data of theft of devices used in the collection or processing of Personal Data. We also put in place measures to trace access to, changes, deletions, or transfer of Personal Data.

However, please be aware that transmitting information over the Internet is not completely secure, and no data storage system can be guaranteed to be entirely safe. While we strive to protect your Personal Data, we cannot guarantee the security of data transmitted to our sites; any transmission is at your own risk. We encourage you to recognize the important role you play in maintaining the security and confidentiality of your Personal Data. 

 

Part G – We keep your Personal Data for a set amount of time 

We will retain your CCTV Data in our system for ninety days to fulfil our duties to achieve the CCTV Monitoring Purposes prescribed in this policy and it will be automatically deleted by the system accordingly. When we are no longer permitted by the applicable laws to store your CCTV Data, we will remove it from our systems and records. In the event a judicial or disciplinary action is initiated, your CCTV Data may be stored until the end of such action, including any potential periods for appeal, and will then be deleted or archived as permitted by the applicable laws.

 

Part H – Your Rights 

Subject to the provisions of Personal Data Protection Laws, you may have a number of rights regarding the collection, use, disclosure, and/or transfer of your Personal Data, including:

  1. Right to access: you have the right to access and request a copy of your Personal Data or request disclosure of the acquisition of Personal Data without your consent (We have the right to charge a reasonable fee to complete this request where permitted by law.);

  2. Right to rectify: you have the right to request that your Personal Data be rectified to be accurate, up-to-date, complete, and not misleading;

  3. Right to lodge a complaint: you can complain to a data protection authority or the competent authority where you believe our collection, use, and/or disclosure of your Personal Data is unlawful or noncompliant with applicable data protection law where applicable. We would, however, appreciate the chance to deal with your concerns before you approach the authority, so please contact us in the first instance;

  4. Right to request for deletion: you can ask us to delete or destroy or anonymize your Personal Data if it is no longer needed for the purposes set out in this Privacy Notice or if there is no other legal basis for the processing;

  5. Right to objection: you can object to the use of your Personal Data for direct marketing (including related profiling) or other processing based on legitimate interests;

  6. Right to data portability: In some cases, you can request that we provide a copy of your Personal Data in a format which is readable or commonly used by ways of automatic tools or equipment, and can be used or disclosed by automated means, including the right to request that Personal Data in such form be sent or transferred to another data controller by automated means and the right to obtain Personal Data sent or transferred directly to another data controller unless it cannot be done by technical conditions;

  7. Right to restrict the use of personal data: you can limit how we use your Personal Data in certain circumstances; and

  8. Right to withdraw consent: you have the right to withdraw your consents you have given for the processing of your Personal Data any time. 

The withdrawal of consent will not affect the lawfulness of the collection, use, and/or disclosure of your Personal Data and sensitive data based on your consent before it was withdrawn. If you do not provide consent or your Personal Data (or withdraw) your consent, we may not be able to provide certain or all of our services or products to you. 

Your request for exercising any of the above rights may be limited by the laws. There may be certain cases where we can reasonably and lawfully decline your request, for example, due to our legal obligation or court order.

If you want to exercise your rights, or would like an explanation about these rights, we’ve explained how you can get in touch in the "Contact Us" section.

If you do need to speak to us, the data controller of your Personal Data is Prudential Life Assurance (Thailand) Public Company Limited. We may monitor or record calls or any other communication we have with you. This might be for training, for security, or to help us check for quality.

 

Contact us

If you have concerns or questions regarding this policy or if you would like to exercise your rights in relation to your CCTV Data, please contact us in one of the following channel by writing a mail or sending an email to us per the addresses below.

 

Write to us or e-mail us at:

 

Customer Service Center 
Prudential Life Assurance (Thailand) Public Company Limited 
944 Mitrtown Office Tower, 10th, 29th – 31st Floor 
Rama 4 Road, Wangmai, Pathumwan, 
Bangkok, 10330

 

E-mail us at: 

hotline@prudential.co.th 

 

Data Protection Officer

Prudential Life Assurance (Thailand) Public Company Limited 
944 Mitrtown Office Tower, 10th, 29th – 31st Floor 
Rama 4 Road, Wangmai, Pathumwan, 
Bangkok, 10330

E-mail: Thanisa.Pungsupa@prudential.co.th

 

Terms Used

 

Prudential Corporation Asia means Prudential Corporation Asia Limited.

 

The Prudential Group means Prudential Plc, Prudential Holdings Limited and any other affiliates of Prudential plc. Prudential Plc is not affiliated in any manner with Prudential Financial, Inc. a company with principal place of business is in United States of America or with the Prudential Assurance Company, a subsidiary of M&G Plc, a company incorporated in United Kingdom.

 

Business Partners means our service providers, accountants, distributors, auditors, IT service and platform providers, intermediaries, reinsurers, investment managers, agents, pension trustees (and other stakeholders), scheme advisors, introducers, selected third party financial and insurance product providers, and our legal advisers.

 

Marketing Partners means our service providers, intermediaries, pension trustees (and other stakeholders), scheme advisors, introducers and selected third party financial and insurance product providers.

 

Service Providers: e.g., service providers who provide administrative, telecommunications, computer, information technology, data processing and storage, customer satisfaction analysis, payment, printing and logistics, redemption, call center service, emergency service, support and hosting service, claim facilitation, IT service and platform service, data management service, data storage and cloud service, smart underwriting provider, advertising, marketing and market research and analysis service, or other services to us to enable us to operate our business, including other third-party vendors, suppliers and other outsourced service providers that assist us in carrying out business activities; 

 

Others: e.g., professional advisors who may have access to your Personal Data, including medical professionals, accountants, actuaries, auditors, lawyers, legal advisors, and other outside professional advisors, insurance intermediaries, reinsurers, investment managers, agents, brokers, pension trustees (and other stakeholders), scheme advisors, introducers, selected third party financial and insurance product providers, insurers, trustees, medical bill review companies, claims investigations companies, credit card companies, banks and financial institutions who administer our accounts, researchers, third party administrators, credit reference agencies, financial crime prevention agencies, and debt collection agencies.