Privacy Policy

Millimed BFS Company Limited (“the Company”, “we”) respects and protects your personal data. This Privacy Policy explains how we collect, use, disclose and safeguard the personal data of visitors to millimedbfs.com, in accordance with Thailand’s Personal Data Protection Act B.E. 2562 (PDPA).

This website presents corporate information, manufacturing standards and product information only. It has no member registration, no shopping cart and no online payment. The only data we receive from you is what you submit through our contact form, together with website usage data.

2.1 Data you provide directly — when you contact us through the website contact form or other channels such as telephone, email or LINE, we collect:

• Full name
• Email address
• Telephone number
• Company / organisation name (if provided)
• Subject and content of your enquiry

2.2 Data collected automatically through website usage

• IP address and approximate country/province-level location
• Browser type and version, operating system and device type
• Pages viewed, time spent and navigation path
• Referral source and data from cookies

We do not collect sensitive personal data such as health, religious, racial or biometric data through this website, nor do we collect credit card or any financial information.

Where we rely on consent, you may withdraw it at any time via the “Cookie Settings” link in the footer of every page. Withdrawal does not affect processing already carried out.

Our website uses cookies to function correctly and to analyse usage statistics. All non-essential cookies (analytics and marketing) are activated only after you give consent.

For details of cookie categories, third-party providers and how to manage your consent, please see our Cookie Policy.

We do not sell, rent or trade your personal data to third parties for commercial purposes. We may disclose your data only in the following cases:

• Service providers we use — website hosting and platform providers, analytics providers (Google Analytics via Google Tag Manager) and advertising platforms (Meta, TikTok), which process data on our instructions and under confidentiality obligations
• Companies within our group, for responding to enquiries and coordinating manufacturing matters
• Government or regulatory authorities, where disclosure is required by law
• Professional advisers such as legal counsel or auditors, where necessary

Some service providers may process or store data outside Thailand. Where this occurs, we ensure appropriate safeguards as required by law.

• Contact form data — retained for no more than 2 years from your last contact, unless a longer period is required for business or legal purposes.
• Website usage and analytics data — retained according to the analytics provider’s retention period, generally no more than 26 months.
• Cookie consent records — retained as proof of consent for no more than 12 months.

Once these periods expire, we delete, destroy or anonymise the data.

We apply appropriate technical and organisational measures to prevent unauthorised access, alteration, disclosure or destruction of data, including:

• HTTPS/SSL encryption of data transmitted through the website
• Restricting data access to employees with a genuine need, using role-based permissions in our back-office system
• Periodic access reviews and activity logging in the back-office system
• Confidentiality agreements with external service providers

However, transmission of data over the internet can never be guaranteed to be fully secure, so please exercise care when sending information online.

Under the PDPA, you have the following rights:

• Right of access and to obtain a copy of your personal data
• Right to rectification of inaccurate or outdated data
• Right to erasure where retention is no longer necessary
• Right to restrict processing temporarily
• Right to object to collection, use or disclosure
• Right to data portability to another data controller
• Right to withdraw consent at any time
• Right to lodge a complaint with Thailand’s Personal Data Protection Committee (PDPC)

To exercise your rights, contact us using the details in section 11. We will respond within 30 days of receiving your request and may ask for identity verification documents to protect your data.

This website is intended for business partners and adults. We do not knowingly collect personal data of individuals under 20 years of age without parental consent. If you believe a minor’s data has been submitted to us, please notify us so that we can delete it.

We may update this policy from time to time to reflect changes in law and practice. The latest version will be published on this page together with its revision date. For material changes, we will provide notice through appropriate channels on the website.

Last updated: 23 August 2026

If you have questions, wish to exercise your data subject rights, or want to raise a complaint regarding personal data protection, please contact:

Millimed BFS Company Limited (Head Office)
174, 179 Moo 8, Pha Ngam Sub-district, Wiang Chai District, Chiang Rai 57210, Thailand
Telephone: 02 945 9555

Or submit a request via our contact form, marking the subject as “PDPA rights request”.