Collection of personal information
We will collect personal information obtained directly from you through the following channels:
Types of Personal Data Collected
Personal data such as name, surname, age, date of birth, nationality, identification number passport, etc.
Contact information such as address, telephone number, e-mail address, etc.
Account information such as user accounts usage history, etc.
Proof of identity such as a copy of your ID card Copy of passport, etc.
Transactional and financial information, such as order history Credit card details, bank accounts, etc.
Technical information such as IP address, Cookie ID, website usage history (Activity Log), etc.
Other information such as pictures, animations and any other information that is considered personal data in accordance with the Personal Data Protection Act.
If you are under 20 or have legal limitations. We may collect, use or disclose your personal information. We may need your parent or guardian’s consent or where the law allows. If we become aware that personal information has been collected from minors without the consent of their parents or guardians. We will delete that information from our servers.
Methods for retaining personal information
We will retain your personal data in hardcopy and electronic form.
We keep your personal information as follows:
Overseas Server Providers
Processing of personal data
We will collect, use or disclose your personal information for the following purposes:
to create and manage user accounts
to deliver goods or services
to improve a product, service or user experience
for management within the company
for marketing and promotion
for after sales service
to collect feedback
to pay for goods or services
to comply with the Terms and Conditions
to comply with the laws and regulations of government agencies
Disclosure of personal information
We may disclose your personal information to others under your consent or as permitted by law, as follows:
We may disclose your personal information within the Company to the extent necessary to improve and develop our products or services. We may collect internal information for products or services under this policy for the greater benefit of you and others.
We may disclose some of your personal information to our service providers as necessary to carry out various tasks such as payment, marketing, product or service development, etc. Service providers have their own privacy policies.
We may share certain information with business partners to contact and coordinate the provision of goods or services. and provide necessary information about the availability of goods or services
In case of law or government agency request We will disclose your personal information as necessary to government agencies such as courts, government agencies, etc.
Transfer of personal data abroad
We may disclose or transfer your personal information to an individual, organization or server located in a foreign country. We will take various measures to ensure that the transfer of your personal data to the destination country has adequate standards of personal data protection or other cases as required by law.
Storage period of personal data
We will retain your personal data for the necessary periods of time during which you are a customer or relationship with us or for the period necessary to fulfill the purposes related to this Policy. which may need to be preserved afterwards Where required by law, we will delete, destroy, or otherwise anonymize your personally identifiable information. when it is no longer necessary or at the end of the said period
Rights of personal data subject
under the Personal Data Protection Law You have the right to:
Right to withdraw consent if you have given your consent We will collect, use or disclose your personal information. Either the consent you have given before the date on which the Personal Data Protection Law comes into force or thereafter. You have the right to withdraw your consent at any time.
Right to access You have the right to request access to your personal data that is under our responsibility and to ask us to copy it for you. including asking us to disclose how we obtained your personal information.
Right to data portability You have the right to obtain your personal data in the event that we provide it in a form that is readable or usable by means of a working device or device. automatic and can use or disclose personal information by automated means We also have the right to request that we transmit or transfer personal data in such form to another personal data controller whenever possible by automated means. and have the right to obtain personal data that we transmit or transfer personal data in such form directly to another personal data controller Unless it can’t be operated due to technical reasons.
Right to object You have the right to object to the collection, use or disclosure of your personal data at any time. If the collection, use, or disclosure of your personal data is made for the purpose of carrying out necessary activities under our legitimate interests or of another person or entity. without exceeding the limits that you can reasonably expect or to carry out missions in the public interest
Right to erasure/destruction You have the right to request erasure/destruction of your personal data or to make personal data non-identifiable to you. If you believe that your personal data has been unlawfully collected, used or disclosed in connection with any applicable law or you deem it necessary for us to maintain it for the relevant purposes in this policy or when you have exercised the right to withdraw your consent or exercise your right to object as stated above
Right to restriction of processing You have the right to request a temporary suspension of the use of your personal data in the event that we are investigating your right to rectification or objection request, or otherwise we are obliged and obliged to delete or destroy your personal data in accordance with applicable law but you request that we suspend its use instead.
Right to rectification You have the right to request that your personal data be correct, current, complete and not misleading.
Right to lodge a complaint You have the right to lodge a complaint with the relevant legal authority. If you believe the collection, use or disclosure of your personal information It is an act that violates or fails to comply with the relevant laws.
You can exercise your rights as the above personal data subject. By contacting our Personal Data Protection Officer as detailed at the end of this policy. We will notify you of the results within 30 days from the date we receive your request to exercise your rights. If we decline a request, we will inform you of the reason for the refusal via various channels such as text message (SMS), email, phone call, letter, etc.
Advertising and Marketing
We may send information or newsletters to your email address. Its purpose is to offer you something that is of interest to you. If you no longer wish to receive communications from us via email, you can either click “uncontact” in the email link or reach out to our email address.
Personal tracking technology (Cookies)
Maintaining the security of personal data
We will maintain the security of your personal data in accordance with the principles of confidentiality (confidentiality), accuracy, completeness (integrity) and condition for use (availability) in order to prevent loss, access, use, change, alteration or disclosure. We will also provide measures to maintain the security of personal data. This covers the measures to prevent management. Administrative safeguards, technical safeguards and physical safeguards regarding access control
Notification of personal data breach
In the event of a breach of your personal data We will notify the Office of the Personal Data Protection Commission without delay within 72 hours from the time we are aware of the cause as practicable. Where the infringement has a high risk of affecting your rights and freedoms We will notify you of violations with remedies without delay through various channels such as website, text message (SMS), email, phone call, letter, etc.
We may revise this policy from time to time. You can find the revised terms and conditions of this policy through our website.
This policy was last revised and effective as of May 30, 2022.
Personal Data Controller
Thai Wellness Products Company Limited
180/238 Soi Phahonyothin 50, Anusawari Bang Khen, Bangkok 10220