This page explains how to request deletion of personal data held by Exito Group Co., Ltd. (“Exito Group”, “we”), including data received through applications connected to Facebook, Messenger, Instagram and WhatsApp Business (“Meta platforms”). You may request deletion at any time, free of charge, under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).
1. Data we may hold
- Platform user identifiers (Page-Scoped ID / Instagram-Scoped ID), display name and profile picture
- Messages and media exchanged with a connected page or account, including chatbot conversation history
- Phone numbers used to contact us via WhatsApp Business
- Information you submit in a form or tell the chatbot, such as name, email and product interest
- For page administrators: account email, the list of connected pages/accounts, and access tokens (stored encrypted)
- Page and ad statistics (Insights / Marketing API), which are mostly aggregated and non-identifying
2. How to request deletion
Option 1 — Email us (primary channel)
Write to [email protected] with the subject “Data Deletion Request” and include:
- the Facebook page, Instagram account or WhatsApp number you interacted with;
- your display name on the platform, or anything else that helps us locate your conversation (for example the date you last messaged);
- whether you want all data deleted or only part of it.
Option 2 — Ask in the chat
Send the message “delete my data” (or “ขอลบข้อมูลของฉัน”) in the conversation with the page or bot. Our team will pick it up and follow the same process.
Option 3 — Remove the app yourself
If you have logged in or granted permissions to our app, you can revoke access yourself:
- Facebook: Settings & Privacy → Settings → Apps and Websites (or Business Integrations) → select the Exito Group app → Remove
- Instagram: Settings → Website Permissions / Apps and Websites → Remove
- Connected page: Page Settings → Business Integrations → remove the app from the page
Revoking access stops any new data collection immediately, but data already stored is erased only once you send a request under Option 1 or 2.
3. Timeline
- We acknowledge your request within 7 business days and may ask for details to verify your identity.
- Data is deleted from live systems within 30 days of the request being confirmed.
- Data in backups is removed on the backup rotation cycle, within 90 days.
- We confirm in writing once deletion is complete.
4. Data we may need to retain
We may keep limited data where the law permits or requires it: accounting and tax records, data needed to establish or defend legal claims, and anonymised or aggregated statistics that can no longer be linked back to you.
5. If the data sits in a client's system
On many projects Exito Group acts as a data processor for a corporate client that is the data controller (the owner of the page or account you contacted). If your request concerns data in a client's system, we forward it to that client within 7 business days, act on the controller's instructions, and give you their direct contact details.
6. Data held by Meta
Messages and data stored on Meta's own systems — such as your Messenger/Instagram inbox or the chat history in your WhatsApp app — are outside our control. Please manage those through Meta's privacy settings directly.
7. Contact us
Exito Group Co., Ltd. (data protection contact)
1 Empire Tower, Floor 47, Room 4703, South Sathorn Rd., Yannawa, Sathorn, Bangkok 10120
Email: [email protected] · Tel: +66 (0) 85 099 3971
See also: Privacy Policy · Terms of Service