Last updated: 26 September 2026
CT14 GARAGE CO., LTD ("CT14 Garage", "we", "us" or "our") respects your privacy and is committed to protecting your personal data in accordance with the Personal Data Protection Act B.E. 2562 (2019) of Thailand ("PDPA") and applicable regulations issued under it.
This Privacy Policy applies to the STEUER14 website (steuer14.com), the STEUER14 customer web panel, the STEUER14 desktop application for macOS and Windows, the service status page (status.steuer14.com) and our related services (together, the "Services"). When you use the Services, contact us, create an account, make a payment, or otherwise interact with us, we may collect and process certain personal data.
This Privacy Policy explains how we collect, use, disclose, retain and protect that information.
The controller responsible for your personal data is:
CT14 GARAGE CO., LTD
2004 Thepharak Soi 4, 10270, Bangkok, Thailand
Email: [email protected]
For questions relating to this Privacy Policy or the processing of your personal data, you may contact us using the details above.
We may collect personal data including:
a) Account and customer information. Information you provide when registering for the Services, creating or editing an account, purchasing products or services, applying for the workshop plan, requesting quotations, issuing invoices or otherwise doing business with us. This may include your name, username, email address, telephone number, country, date of birth (optional), workshop or company name and details, tax identification number, billing information, your workshop logo and your preferred language.
b) Account security information. Your password, which we store only as a one-way cryptographic hash; if you turn on two-factor sign-in, the authenticator secret (stored encrypted) and your recovery codes (stored only as hashes); the computers and browsers registered to your account, including a device identifier and the public part of a device key; and a record of sign-ins and security-relevant account actions, including the IP address and time.
c) Transaction and billing information. Information necessary to process payments, issue invoices, maintain accounting records and comply with tax and other legal requirements. Card payments are processed by our payment service provider; we do not receive or store your full card details.
d) Technical information. When you access the Services, we may automatically receive technical information transmitted by your browser, device or software client. This may include IP address, device information, operating system and version, browser information, application version, access time, system logs and information necessary to establish and maintain the requested connection or service.
e) Vehicle and diagnostic information. When you use the desktop application with a vehicle, we process information about that vehicle that is necessary to provide the Services, such as the vehicle identification number (VIN), the control units present and their software and hardware versions, fault memory and freeze-frame data, measured values you choose to record, high-voltage battery readings, vehicle order (equipment) data, coding and programming actions together with the backups taken before them, and the diagnostic reports you create. A VIN and the history of a vehicle may be personal data where they can be linked to you or to the vehicle's owner.
f) Communications. When you contact us by email, telephone, messaging application, support ticket, contact form or another communication channel, we may retain the information you provide, including attachments, and our correspondence with you for the purpose of responding to your inquiry, providing support and maintaining appropriate business records.
g) Content you share with other users. If you publish a fix for a fault code in the community section of the Services, the fix, the fault it relates to and the vehicle platform are visible to other users, together with your workshop name if you have entered one (otherwise the fix is shown as coming from a STEUER14 user). The VIN of the vehicle is not shown.
h) Crash reports and application logs. If the desktop application closes unexpectedly, it automatically sends us a crash report the next time it starts. The report contains the application version, your operating system, technical details of the error and the complete application log of the session in which the error occurred. That log records what the application did during the session, including the vehicle identification numbers (VINs) of connected vehicles, data read from or written to the vehicles' control units, the connection to the vehicle and to our servers, and errors. If you were signed in, the report is linked to your account. We use crash reports only to find and fix faults in the Services and keep them only for as long as needed for that purpose.
i) Acceptance records. When you accept our Terms and Conditions in the desktop application, we record the version you accepted, the time, your IP address and the application version.
We collect, use and disclose personal data only where permitted under the PDPA and other applicable laws.
Depending on the circumstances, we may process your personal data for the following purposes:
a) Performance of a contract. To provide the products or Services requested by you, manage your account, register and secure your devices, store your vehicle and diagnostic history, process orders and payments, provide technical support, communicate regarding the Services and perform our contractual obligations.
b) Compliance with legal obligations. To comply with applicable accounting, taxation, regulatory, court, law-enforcement and other legal obligations.
c) Legitimate interests. Where permitted by law, we may process personal data where reasonably necessary for our legitimate business interests, including:
Where we rely on legitimate interests, we will consider those interests against the rights and interests of the data subject.
d) Consent. Where consent is required under the PDPA, we will request consent before processing the relevant personal data. Where processing is based on consent, you may withdraw your consent subject to applicable law. Withdrawal does not affect processing lawfully carried out before the withdrawal.
We will not process personal data in a manner incompatible with the purposes described above unless permitted or required by law. We do not use your personal data for automated decision-making that produces legal or similarly significant effects for you.
We do not sell personal data.
We may disclose personal data where reasonably necessary to:
Where another party processes personal data on our behalf, we will take appropriate steps required under the PDPA to ensure that the information is handled securely and only for the permitted purposes.
Where disclosure is required by law or for a specific purpose, we will disclose only personal data reasonably necessary for that purpose.
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected or as required by applicable law.
Billing, accounting, taxation and transaction records may be retained for the period required by Thai accounting, taxation or other applicable laws.
Other personal data will normally be retained for as long as:
When personal data is no longer necessary and there is no lawful reason to retain it, we will delete, destroy or anonymise it in accordance with applicable requirements.
You can ask us to delete your account at any time by writing to [email protected] from the email address registered to the account. We will delete or anonymise your account data, devices, vehicle and diagnostic history and support correspondence, except where we must keep certain records — for example invoices and payment records required by tax law, or information needed for the establishment, exercise or defence of legal claims. Deleting your account also ends any car licences and plans on it.
The website and the web panel do not use advertising or analytics cookies. The web panel stores your sign-in session, a random identifier for your browser and your language choice in your browser's local storage so that it can keep you signed in and show your registered devices. Our network provider, Cloudflare, may set strictly necessary cookies to protect the Services against abuse. The desktop application stores your session and settings on your computer, using your operating system's secure storage where available.
We implement appropriate technical and organisational security measures designed to protect personal data against accidental or unlawful loss, access, use, alteration, disclosure or destruction. These include encrypted connections, password hashing, optional two-factor sign-in, device keys and restricted access to our systems.
Access to personal data is restricted to persons who reasonably require such access for legitimate business purposes.
No electronic storage or communication system can be guaranteed to be completely secure. However, we take reasonable measures appropriate to the nature and risk of the personal data we process.
If a personal data breach occurs, we will assess the nature and potential impact of the breach and take appropriate action in accordance with the PDPA.
Where required by law, we will notify the Office of the Personal Data Protection Committee within the period prescribed by the PDPA and applicable regulations and will notify affected data subjects where the breach is likely to result in a high risk to their rights and freedoms.
Subject to the conditions and exceptions provided under the PDPA, you may have the right to:
Certain rights are subject to legal limitations. For example, we may be required to retain information notwithstanding a deletion request where retention is necessary to comply with law or establish, exercise or defend legal claims.
To exercise your rights, please contact CT14 GARAGE CO., LTD at [email protected]. We may request reasonable information necessary to verify your identity before acting on a request.
You also have the right to lodge a complaint with the Office of the Personal Data Protection Committee of Thailand (PDPC) in accordance with applicable law.
Our servers are located in Singapore. Some of our service providers, technical infrastructure, cloud systems or other recipients — including our payment, email and network providers — may process personal data in other countries.
Where personal data is transferred outside Thailand, CT14 Garage will take appropriate measures to ensure that the transfer complies with the PDPA and applicable regulations, including where applicable:
We will take reasonable measures to ensure that personal data transferred outside Thailand receives an appropriate level of protection.
The Services may interact with third-party websites, payment processors, software platforms or other services.
Those third parties may process personal data independently under their own privacy policies. CT14 Garage is not responsible for the privacy practices of independent third-party controllers.
We encourage you to review the privacy policies of any third-party services you use.
The Services are intended for automotive professionals and vehicle owners and are not directed at minors. We do not knowingly collect personal data from persons under 20 years of age without the consent of their legal guardian where such consent is required by the PDPA. If you believe a minor has provided us with personal data, please contact us and we will take appropriate steps.
We may update this Privacy Policy from time to time to reflect changes to the Services, our business practices or applicable laws.
The current version will be made available on steuer14.com. Where required by law, we will provide additional notice of material changes, for example in the web panel, in the desktop application or by email.
For questions, concerns or requests relating to your personal data or this Privacy Policy, please contact:
CT14 GARAGE CO., LTD
2004 Thepharak Soi 4, 10270, Bangkok, Thailand
Email: [email protected]