Home / Privacy Policy

Privacy Policy

We collect only the data we need to provide our services, and protect it under Thailand's Personal Data Protection Act B.E. 2562 (2019)

English translation. This page is a translation provided for convenience. The Thai version is the binding version; if the two differ, the Thai version prevails. อ่านฉบับภาษาไทย

Last updated 22 September 2026

1. Data controller

Dragon Hispeed Co., Ltd. (operating as HostParagon, Hosting Hispeed and sister websites)
807/315 Moo 8, Khu Khot, Lam Luk Ka, Pathum Thani 12130, Thailand · Tax ID 0135555002822
Personal data enquiries: admin@dragonhispeed.com · Tel 02-1054225

2. Data we collect

TypeExamplesCollected when
Account dataName, email, phone number, password (stored encrypted)You sign up or order
Billing document dataTaxpayer name, tax ID, branch, addressYou request a tax invoice
Domain registrant dataName, organization, address, email and phone of the domain registrantYou register or transfer a domain
Proofs and documentsTransfer slips, withholding tax certificates, supporting documents for .th domainsYou attach a file
CommunicationsMessages and attachments in support ticketsYou contact us
Account accessIP address, country, browser, device type, login timeEvery time you log in to the customer portal
Website logsIP address, time, pages visited and browser, in our server logsEvery time you visit the website

Credit/debit card data is entered and processed directly in Kasikornbank's payment system. The company does not store card numbers in its own systems.

3. How we use your data

  1. To provide the services under our contract — activating services, registering and renewing domains, issuing invoices, taking payments, sending expiry reminders and helping with problems.
  2. To comply with the law — issuing tax invoices under the Revenue Code, and keeping computer traffic data under the Computer Crime Act.
  3. To keep things secure — detecting unusual logins, preventing account takeover, and investigating security incidents.
  4. To improve our services and for marketing — studying overall service usage for planning, as you have consented (you may withdraw consent at any time).

4. Disclosure of data

We disclose your personal data only as far as necessary, to the following parties:

  • Kasikornbank — to take payments by PromptPay QR and card
  • Domain registration providers and registries (including THNIC for .th domains) — registrant details are required by the domain system
  • The e-Tax Invoice system and the Revenue Department — as required by tax law
  • Government authorities — when there is a warrant or legal order

5. Cookies and third-party services on this website

  • When you first visit, a cookie banner asks for your consent. Analytics and advertising cookies are off by default and are only set if you agree. At the moment this website has no analytics or advertising tags installed; if we add them, they will follow the choice you made. You can change your choice at any time via Cookie settings at the bottom of every page.
  • Your choice is stored for one year in a necessary cookie on this website (dgh_consent).
  • The fonts on this website load from Google Fonts, so Google receives your IP address, as with any file download.
  • When you order or log in, you go to the company's customer portal at accounts.dragonhispeed.com, which uses cookies needed for login and the shopping cart.

6. How long we keep data

  • Account and service data — for as long as you use our services, and afterwards only as long as needed to comply with the law or to exercise legal claims.
  • Accounting and tax documents (receipts, tax invoices) — at least as long as the Revenue Code requires.
  • System logs and computer traffic data — at least 90 days, as required by the Computer Crime Act.

7. Security

The customer portal uses HTTPS on every page, passwords are stored encrypted, and two-factor authentication (2FA) is supported.

8. Your rights

Under the Personal Data Protection Act B.E. 2562 (2019), you have the right to:

  • access your data and get a copy of it
  • have your data corrected and kept up to date (you can edit it yourself in the customer portal)
  • have your data deleted, destroyed or its use restricted, unless the law requires us to keep it
  • receive your data in a machine-readable format
  • object to the use of your data, and withdraw any consent you have given at any time
  • complain to the Office of the Personal Data Protection Committee if you believe we are not complying with the law

To exercise these rights, contact admin@dragonhispeed.com or call 02-1054225. We may ask you to verify your identity first, so that no one else can request your data by pretending to be you.

9. Changes to this policy

We may update this policy from time to time and will show the date of the latest update at the top of this page. For significant changes, we will let you know by email or through the customer portal.

PDPA notice (the version customers have consented to since 1 June 2022)

Translation of the original Thai notice.

In accordance with the NBTC notification regarding the PDPA (Personal Data Protection Act), Dragon Hispeed Co., Ltd. kindly asks customers to give their consent under the PDPA, as detailed below.

The Provider will protect the Customer's personal data as required by law, and the Customer, as the owner of the personal data, has the rights set out in the Personal Data Protection Act B.E. 2562 (2019) and the NBTC notifications. The Customer agrees to allow the Provider to process the Customer's personal data as set out in the contract, as follows:

  1. The Provider will use the Customer's personal data to provide, promote and develop its services — for example, service sign-up, issuing bills, and communicating with the Customer.
  2. The Provider may process the Customer's personal data to keep customer records, or to study customers' service usage as information for marketing plans.
  3. The Provider may disclose personal data under the rules set by law.
  4. The Customer has the right to stop the use or disclosure of their personal data, and to withdraw consent to processing at any time.
LINE