Community

1. Scope of this notice

This notice explains how personal data is collected, used, disclosed and retained for applicants, members and visitors using JK Community on jk.tours, including the forum, member profiles, garages, vehicle history, activities, marketplace and member communications.

2. Personal data we may collect

• Account and contact data: display name, username, email address, language and WordPress account information.
• Profile and community data: profile images, biography, posts, comments, reactions, follows, reports and content you choose to publish.
• Vehicle and activity data: vehicle details, images, ownership history, service records, timelines, places, garages, mechanics, map links and marketplace information you submit.
• Communications: member messages, message requests, administrator contacts and complaint information.
• Technical and usage data: dates and times, pages and sections viewed, sessions, device class, language, searches, pseudonymous visitor identifiers and records needed for security or spam prevention.

Please avoid publishing licence plate numbers, chassis or engine numbers, addresses or another person's data in public areas unless you have an appropriate right or permission.

3. Sources of data

We generally receive data directly from you when you register, edit a profile, publish content, add a vehicle, send a message or contact an administrator. Technical data is collected automatically when you use the site. We may also receive data from another member through mentions, authorised vehicle-history transfers or content reports.

4. Purposes and lawful bases

• To create and maintain accounts, authenticate users and provide requested community functions or services.
• To publish content, connect profiles and vehicles, and operate follows, messages, authorised history transfers and member activities.
• To secure the service, prevent spam, fraud and rule violations, and investigate reports based on our legitimate interests.
• To analyse usage and improve the service using only necessary information and pseudonymous identifiers where appropriate.
• To comply with law, lawful authority requests, and establish, exercise or defend legal claims.
• To act on consent where the law requires it or for an optional activity. Consent may be withdrawn subject to applicable law.

5. Disclosure of data

Information set as public or members-only is shown according to your selected visibility. We may disclose data as necessary to hosting, email, backup and technical service providers, developers or system administrators, professional advisers, authorised transaction parties and competent authorities. We do not sell members' personal data. Embedded content or links to third-party services such as YouTube, Vimeo or Google Maps may allow those providers to receive data when you use them. Please also review the provider's own notice.

6. International transfers

Some infrastructure or third-party providers may process data outside Thailand. Where such a transfer occurs, we will follow applicable legal conditions and use appropriate safeguards where relevant.

7. Retention

Account and content data is retained while the account remains active or for as long as reasonably needed for community purposes, security, dispute resolution and legal obligations. Community analytics is generally retained for 365 days or the period configured by the administrator. Backups and security logs may remain for a reasonable period before deletion or overwrite. When data is no longer needed, it will be deleted, destroyed or anonymised as appropriate.

8. Security

We use appropriate technical and organisational measures such as access controls, file-type validation, request protection, password hashing and backups. No online service can guarantee absolute security. Members should use a strong password and protect their sign-in details.

9. Your rights

Subject to applicable law, you may have rights to withdraw consent, access or obtain a copy, receive or transfer data where supported by law, object to processing, request erasure or anonymisation, restrict processing and correct inaccurate data. You may also complain to the Personal Data Protection Committee if you believe processing does not comply with applicable law.

10. Children and minors

The service is not directed specifically at children. A minor should obtain guidance or consent from a person exercising parental responsibility where required by law before registering or publishing personal data.

11. Cookies and analytics

The site may use cookies required for sign-in, security and language preferences. Community analytics uses random identifiers that are hashed on the server, does not store raw IP addresses or full user-agent strings in the analytics table, and respects the browser's Do Not Track setting. Hosting and third-party providers may maintain their own technical logs.

12. Changes and contact

We may update this notice when the service or law changes. The current effective date and document version are shown on this page. To exercise a right, ask a question or make a complaint, contact the controller using the details above. Further information about rights and complaints is available from Thailand's Personal Data Protection Committee.