Privacy Policy

1. Data controller

มหาวิทยาลัยเทคโนโลยีราชมงคลอีสาน นครราชสีมา

Address: 744 ถนนสุรนารายณ์ ตำบลในเมือง อำเภอเมืองนครราชสีมา จังหวัดนครราชสีมา 30000

Email: [email protected]

2. What we collect, and why

Ordinary browsing — you can read about places, stays, restaurants, routes and the map without telling us who you are. We do not ask you to register in order to read.

Your account — the email address and name you give us, used to sign you in and to send you a sign-in link. We do not give you a password to remember and we store none.

Orders — recipient name, delivery address, phone number, the items ordered and proof of payment, so we can deliver goods and keep accounting records.

Event and competition entries — team name; each member's name, stage name, date of birth and role; the coordinator's name and phone number; and proof of the entry fee transfer. Used to run the draw, check age categories, produce passes, prepare the accident-insurance list, and reach you when something changes.

Service logs — ordinary operational records such as request times and request identifiers, kept for security and troubleshooting. Full email addresses and authentication codes are never written into them.

3. Minors

Some competition categories are open to entrants under 20, which is why we collect every member's date of birth: to place them in the right category.

The team coordinator confirms that a parent or guardian has consented before they enter a minor's details into the system.

A parent or guardian may access, correct or withdraw a child's data under section 7.

4. Our legal bases

Consent for event and competition entry, and for sharing your data with another site under section 6.

Performance of a contract for orders and delivery.

Legitimate interest for keeping the service secure and preventing abuse.

Legal obligation for accounting and tax records.

5. How long we keep it

Account data for as long as the account is in use; deleted on request under section 7.

Orders and payment records for at least five years, as accounting and tax law requires.

Entry records for the duration of that edition of the event and one year afterwards, so results can be cited and complaints handled, then deleted or anonymised.

Proof-of-payment files are held in closed storage, separate from ordinary files, and deleted on the same schedule.

Consent records for as long as we may need to show that consent was properly obtained.

6. Who we share it with

kbattlethailand.com — if you choose to sign in there using your visitkorat.com account, we send your name and email address only, and only after you have agreed on a screen that says so plainly. We do not send your order history, delivery address or phone number. You can withdraw that consent at any time from “Connected sites” in your account.

Service providers we need to operate — cloud hosting, email delivery, maps, banks and payment services, and delivery couriers. All of them process data only on our instructions.

The organiser and auditor of an event you enter — only what is needed to run the competition.

Government authorities — where the law requires disclosure.

We do not sell your personal data, and we do not pass it to others for their own marketing.

7. Your rights

You may request access to and a copy of your data, ask us to correct it, delete it, restrict its use, object to processing, ask for it to be ported, and withdraw a consent you previously gave.

Withdrawing consent does not affect processing already carried out lawfully, and in some cases it will end a service — withdrawing consent for a competition entry means we cannot keep that entry.

Write to [email protected]. We reply within 30 days.

If you believe we have got something wrong, you may complain to the Personal Data Protection Committee's office.

8. Security

Data travels over encrypted connections, staff passwords are stored one-way, and access is limited to what each role needs.

Proof-of-payment files are kept in closed storage that cannot be read from outside, and are never rendered on a page that does not require signing in.

9. Cookies

We use only the cookies the site needs to work: one that remembers you are signed in, one that remembers your basket, and one that protects against forged requests.

You can clear cookies in your browser, but clearing the sign-in cookie will sign you out.

10. Changes to this policy

When we change this policy in a way that affects what you agreed to, we change the document's version number and ask for your consent again the next time you use the service concerned.

The current version is 2026-08-20, effective 20 August 2026.