Privacy policy
Buddhasothorn Buddhist College (the data controller) explains here what personal data the e-Book Library collects, why, for how long, and your rights under Thailand's Personal Data Protection Act B.E. 2562 (2019).
Last updated 26 Oct 2026
What we collect, why, and for how long
| Data | Details | Purpose and legal basis | Kept for |
|---|---|---|---|
| Account data (members and staff) | Name, email, role, last sign-in time | Providing the service, security (contract / legitimate interest) | While the account is active |
| Sign-in attempts | Email entered, IP address, time, success | Preventing password guessing (legitimate interest) | 90 days |
| Anonymous visit statistics | Page type, book, device type, language, referring website domain, date and time; no IP, browser string or account | Improving the library (legitimate interest) | 400 days |
| Unique-visitor count (only with consent) | A daily one-way code from IP and browser; it changes every day and cannot identify you | Consent | 400 days |
| Problem reports and privacy requests | Message, optional contact, book | Handling your request (legitimate interest / legal obligation) | 2 years after closing |
| Staff activity log | Who published or changed a book or account, when | Accountability (legitimate interest) | For the life of the record |
Reading a public book needs no account. We do not sell or share personal data, use advertising or third-party tracking, or load fonts and scripts from other websites.
Your rights
- Access and get a copy of your data, and know how it was obtained
- Correct inaccurate data, and have data deleted, restricted or made anonymous
- Object to processing, withdraw consent at any time (use “Cookie settings” or the buttons above), and ask for data portability
- Complain to the Personal Data Protection Committee (PDPC) if you think we have broken the law
Or contact the data protection officer at sothorn_ccs@mcu.ac.th. The college replies within 30 days.
Security
Connections use HTTPS, passwords are stored only as one-way hashes, restricted files are never served by direct link, and staff actions are logged. If a breach affects your rights, we will notify the PDPC within 72 hours and inform you without delay.