← Legal & Compliance

Sensitive Personal Data Consent Letter

Ref: COMP-017Version: v3.0Effective: 3 กรกฎาคม 2569

You cannot join Veyyā as a Provider without this consent.

Under Thai PDPA §26, identity verification and background screening involve sensitive personal data. Your explicit consent is required before we can lawfully perform these checks.

Preamble

I, the Service Provider named at the time of electronic signature below, hereby provide the following consents under PDPA §26 to Veyya Life (Thailand) Limited (Registration No. 0105569069061, Bangkok, Thailand) ("Veyya").

How long we keep this data

Veyya Life (Thailand) Limited retains Sensitive Personal Data under this Consent Letter as follows:

  • This Consent Letter (signature, timestamp, version) · Retained as part of the executed agreement bundle for the duration of engagement plus 10 years (Tier 2 contract evidence, CCC §193/30).
  • Sensitive-data outcomes (biometric verification, background check pass/fail + date) · Retained for engagement plus 3 years. No re-verification required within this period.
  • Provider verified date · Preserved separately as a Tier 1 audit reference in accounting records (10 years), so the record of "was verified at time of payout" persists for the full financial retention period.
  • Raw biometric data and raw background check reports · NOT retained by Veyya. Processed transiently by AppMan Co., Ltd. and deleted per AppMan's retention policy.
  • Raw Thai National ID card scan · NOT retained by anyone. Captured transiently by AppMan for verification only, then deleted upon verification completion.
  • Redacted Thai National ID card copy (religion and blood type blacked out) · Retained by Veyya for engagement + 10 years as certified tax deduction evidence per Revenue Code §50 and §50 bis.

Specific retention periods are set out in Annex R (PDPA Retention Schedule v2.1), which prevails in case of any discrepancy.

Part A - Identity and Eligibility Verification Consent (§26)

I consent to Veyya Life (Thailand) Limited processing my Sensitive Personal Data via AppMan Co., Ltd. for the purpose of confirming my identity and eligibility to serve as a Service Provider on the Veyyā Platform.

A.1 Biometric Data

  • Facial photograph, liveness detection frames, facial recognition match outcome

A.2 Background Screening Data

  • Criminal record check
  • Bankruptcy check
  • Online fraud check
  • Adverse media check
  • INTERPOL Red Notice check
  • Global sanctions check

A.3 Acknowledgments

I acknowledge that:

  • Raw biometric data and background check reports are processed by AppMan Co., Ltd. and are NOT retained by Veyya
  • Veyya retains only the verification outcome (pass/fail + date) and a verification reference number, for engagement + 3 years
  • No re-verification will be required within this 3-year period
  • My Thai National ID card raw scan is deleted by AppMan upon verification completion and is never retained by anyone
  • A redacted copy of my Thai National ID card (religion and blood type blacked out by AppMan) is retained by Veyya for engagement + 10 years as tax deduction evidence under Revenue Code §50 bis
  • Withdrawing this consent will result in suspension or termination of my Provider account

A.4 Consent selection

[ ] I CONSENT

to the processing of Identity and Eligibility Verification Data (biometric + background screening) as set out in Part A.

[ ] I DO NOT CONSENT

(I understand that without this consent I cannot be onboarded as a Provider on the Veyyā Platform).

Part B - Withdrawal of consent

Under PDPA §19, I may withdraw any consent granted above at any time, with the same ease as consent was given. Veyya has implemented a Withdraw Consent function accessible at any time from my Provider account Settings.

I understand that:

  • Withdrawing this consent will result in suspension or termination of my Provider account, subject to Veyya's statutory retention obligations for tax records (10 years) and the 3-year verification outcome residue
  • Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal

Part C - Tax Compliance Data Acknowledgment (Legal Obligation, not consent)

I acknowledge that Veyya Life (Thailand) Limited is required by Thai law (Revenue Code §50, §50 bis, §87/3, Por.4/2528; Accounting Act B.E. 2543 §14) to collect and retain:

  • My full legal name as registered
  • My Thai National Identification Number (13 digits, which is my Tax Identification Number)
  • My registered address as shown on national records
  • My bank account details for service payout
  • Withholding Tax Certificate (Form 50 bis) issuance details

I acknowledge:

  • This data is collected under Legal Obligation (PDPA §24(6)) and Contractual Necessity (PDPA §24(3)) - no separate consent is required
  • 3% withholding tax will be deducted from each payment to me and remitted to the Revenue Department
  • Veyya will issue a Form 50 bis Withholding Tax Certificate to me for each tax year
  • This data will be retained for 10 years from the date of my final transaction
  • This acknowledgment does not constitute consent for PDPA §26 purposes - Tax Compliance Data is not Sensitive Personal Data

Part D - Related documents

Signature

By ticking the CONSENT box in Part A above and typing my full legal name in the signature field at the point of electronic signature, I confirm that I have read, understood, and agree to this Consent Letter.

Get in touch

Veyya Life (Thailand) Limited · Bangkok, Thailand

Version history

v3.0 (3 July 2026) - Sensitive-data outcome residue extended to 3 years (no re-verification within period). Redacted ID card retention 10 years for tax purposes explicitly noted. Raw ID scan deletion by AppMan explicitly noted. Tax Compliance Data Acknowledgment section added (Legal Obligation basis). 12-month residue references removed.

← Back to Legal & Compliance