PRIVACY POLICY

Kasetphand Industry Co., Ltd. values the protection of your personal information. This Privacy Policy explains the guidelines for collecting, using or disclosing personal data. Including various rights of the owner of personal data. According to the personal data protection law

Collection of Personal Information

We will collect personal information directly received from you through the following channels.

• subscription
• telephone
• email
• Facebook Login
• Google Login
• LINE Login
• Twitter Login
• LinkedIn Login

We may collect your personal information that we access from other sources such as search engines, social media. government agency other outsiders, etc.

Types of personal data collected

personal information such as name, surname, age, date of birth, nationality, identification number passport, etc.

contact information such as address, phone number, email, etc.

account information such as user account usage history, etc.

proof of identity such as a copy of an identity card Passport copy, etc.

transaction and financial information such as order history Credit card details, bank accounts, etc.

technical data such as IP address, Cookie ID, website usage history (Activity Log), etc.

other information such as pictures, animations and any other information that is considered personal data in accordance with the Personal Data Protection Laws.

We will collect, use or disclose the following sensitive personal data when we have your explicit consent. unless the law requires it to be done

• ethnicity
• race
• political opinion
• doctrine
• religion or philosophy
• criminal record
• health information
• disability
• union information
• sexual behavior
• genetic information
• Biometric data, such as facial image data iris simulation data fingerprint simulated data

Any other information that affects your personal data as announced by the Personal Data Protection Committee

minor

If you are under 20 years of age or have legal capacity limitations. We may collect, use or disclose your personal information. We may need your parent or guardian's consent or where permitted by law. If we become aware that personal information has been collected from minors without their parent or guardian's consent. We will proceed to delete that information from our servers.

How to keep personal information

We will retain your personal data in physical and electronic form.

We retain your personal information as follows:

• Our company server in Thailand

Processing of personal data

We will collect, use or disclose your personal data for the following purposes.

• to create and manage user accounts
• to deliver goods or services
• To improve products, services or user experience
• for management within the company
• for marketing and promotion
• for after sales service
• to collect feedback
• to pay for goods or services
• To comply with the terms and conditions (Terms and Conditions).
• to comply with laws and regulations of government agencies

disclosure of personal information

We may disclose your personal information to others under your consent or as permitted by law, as follows:

internal management

We may disclose your personal information within the company as necessary to improve and develop our products or services. We may collect internal information for goods or services under this policy for your benefit and others.

provider

We may disclose some of your personal information to our service providers as necessary to perform tasks such as payments, marketing, product or service development, etc. Service providers have their own privacy policies.

business partner

We may share certain information with our business partners in order to contact and coordinate the provision of products or services. and provide necessary information about the availability of goods or services.

business transfer

We may disclose information including your personal information for organizational restructuring merger or divestiture or other transfers of assets, whereby the receiving party treats your information in a manner consistent with this Policy. Including personal data protection laws

law enforcement

In case of law or government agencies request We will disclose your personal information as necessary to government agencies such as courts, government agencies, etc.

International transfer of personal data

We may disclose or transfer your personal information to individuals, organizations or servers located overseas. We will take measures to ensure that the transfer of your personal data to the destination country meets an adequate standard of personal data protection, or as otherwise required by law.

Period of storage of personal data

We will retain your personal data for the period necessary during your stay as a customer or in a relationship with us, or for the period necessary to fulfill the purposes in connection with this policy. which may need to be preserved afterwards If required by law, we will delete, destroy or anonymize your information. when it is no longer necessary or at the end of such period

Owner's rights of personal data

under the personal data protection law You have the right to do the following:

Right to withdraw consent If you have given consent We will collect, use or disclose your personal information. whether such consent was given by you prior to or after the effective date of the Personal Data Protection Laws; You have the right to withdraw your consent at any time.

Right to access data (right to access) You have the right to request access to your personal data that is under our responsibility and to have us make a copy of that data for you. including requesting us to disclose how we obtained your personal data

Right to data portability You have the right to obtain your personal data in the event that we have made that personal data in a readable or usable form with automated tools or devices and can also use or disclose your personal data. automatic method as well as having the right to request us to send or transfer personal data in such form to another data controller when it is possible by automated means. and have the right to obtain personal data that we send or transfer personal data in such form directly to another data controller. Unless it can't be done because of technical reasons.

right to object (right to object) You have the right to object to the collection, use or disclosure of your personal data at any time. If the collection, use or disclosure of your personal data is done for the necessary performance of our legitimate interests or that of another person or entity. To the extent that you can reasonably foresee it or to carry out a mission in the public interest.

Right to erasure/destruction You have the right to request erasure or destruction of your personal data or to make your personal data non-identifiable. If you believe that your personal information has been collected, used or disclosed unlawfully in accordance with applicable laws or if we are of the opinion that it is no longer necessary for us to retain it in accordance with the relevant purposes in this policy. or when you have exercised your right to withdraw your consent or your right to object as notified above

Right to restriction of processing You have the right to temporarily suspend the use of your personal data in the event that we are in the process of investigating your request for rectification or objection to your personal data, or any other case where we no longer need to delete or destroy the data. your personal information in accordance with applicable laws, but instead you ask us to suspend use.

Right to rectification (right to rectification) You have the right to request that your personal information be corrected, current, complete and not misleading.

Right to lodge a complaint You have the right to lodge a complaint with the relevant legal authority. If you believe that the collection, use or disclosure of your personal information It is an action that violates or does not comply with relevant laws.

You can exercise your rights as a data subject above. By contacting our Personal Data Protection Officer as detailed at the end of this Policy. We will notify you of the outcome within 30 days from the date we receive your request for exercise. In accordance with the form or method specified by us. However, if we decline the request, we will notify you of the reason for the refusal through various means such as text message (SMS), email, telephone, letter, etc.

Advertising and Marketing

for the benefit of obtaining our products or services We use your information to analyze and improve products or services. and to market through Google, Facebook, pixel tracking code, etc. We use such information to tailor products or services to you.

Our website may display advertisements from third parties to facilitate our services, such as Google AdSense, BuySellAds. These third parties may only have access to your personal information to perform these actions. And have the duty not to disclose or use for other purposes.

We may send information or newsletters to your email. The purpose is to offer you something interesting. If you no longer want to receive communications from us via email, you can click “Unsubscribe” in the email link or contact us via email.

Personal Tracking Technology (Cookies)

To make your user experience more complete and efficient, we use cookies or similar technologies. to improve access to goods or services appropriate ads and track your usage We use cookies to identify and track website users and their access to our website. If you do not want cookies to be placed on your computer You can set your browser to refuse cookies before using our website.

Security of personal information

We will maintain the security of your personal information in accordance with the principles of confidentiality (confidentiality), completeness (integrity) and availability. (availability) In order to prevent loss, access, use, change, correction or disclosure, we will also provide security measures for personal information. which covers administrative protection measures (administrative safeguards), technical safeguards and physical safeguards regarding access to or control of the use of personal data (access control);

Notification of personal data breach

In the event of a breach of your personal data We will notify the Office of the Personal Data Protection Commission without delay within 72 hours from the fact that we are aware of the cause as far as we can. where the breach has a high risk of affecting your rights and freedoms We will notify you of the breach without delay, along with remedies, through various channels such as website, text message (SMS), email, telephone, letter, etc.

Amendments to Privacy Policy

We may change this policy from time to time. You can know the requirements. And the amended policy terms and conditions are available through our website.

This policy was last revised and is effective from July 15, 2023.

Privacy Policy of Other Websites

This privacy policy applies only to the offering of products, services and use on the website to our customers. If you visit another website even through our website. The protection of personal information will be in accordance with the privacy policy of that website. which we are not affiliated with

contact details

If you wish to inquire about this privacy policy Including requesting to exercise various rights, you can contact us or our personal data protection officer as follows: