As a data controller, xxxx Company respects your privacy and realizes the importance of keeping your personal data. Therefore, the Company has established this policy to explain the practices regarding the collection, use or disclosure of personal data, including the rights of the data owner under the Personal Data Protection Act.
Collection of Personal Data
The collection of data is for the purpose of providing better services and for the most convenience or benefit to you. The system will collect data received directly from you through the following channels:
- Membership registration
- Telephone
- Facebook Login
- Google Login
- Line Login
- Twitter Login
The Company may collect your personal data that is accessible from other sources, such as search engines, social media, government agencies, other external parties, etc.
Types of personal data collected
Personal data such as name, surname, age, date of birth, nationality, national ID number, passport, etc.
Contact information such as address, phone number, email, etc.
Account information such as user account, usage history, Iceland Spring Thailand Rewards points, etc.
Identity proof such as a copy of ID card, copy of passport, etc.
Transaction and financial information such as purchase history, payment notification Credit card details, bank account, etc.
Technical information such as IP address, Cookie ID, website usage history (Activity Log), etc.
Information awareness information such as your preferences for receiving marketing information from the Company and the desired communication format. We will collect, use or disclose sensitive information only with your explicit consent or where the law allows us to do so.
Other information such as images, animations, information you search for, details of point accumulation, redemption of rewards, and any other information that is considered personal information under the Personal Data Protection Act.
How to store personal information The Company will store your personal information in electronic form as follows:
- Our company server in Thailand
- Our company server abroad
- Server provider in Thailand
- Server provider abroad
Personal tracking technology (Cookies) To enhance your user experience to be more complete and efficient The Company uses (Cookies) or similar technologies to develop access to products or services, appropriate advertising, and track your usage. The Company uses cookies to identify and track website users and access to our website. If you do not want cookies on your computer, you can set your browser to reject cookies before using our website.
Minors
If you are under 20 years old or have legal restrictions, the Company may collect, use or disclose your personal information. The Company may require your parents Or your guardian has given consent or where permitted by law If we know that personal information has been collected from minors without the consent of their parents or guardians, we will delete that information from the Company’s server.
How to use user information
Management The Company will use the user’s personal information only as necessary to contact, provide services, survey opinions, publicize or provide information that is useful to users, including using the information for statistical analysis to improve, develop products and services and conduct marketing activities in various forms or other activities under the supervision of the sponsor.
Business partners The Company may disclose certain information to business partners to contact and coordinate the provision of products or services and provide necessary information about the availability of products or services.
Service providers The Company may disclose some of your personal information to the Company’s service providers as necessary to operate in various areas, such as payment, marketing, product or service development, etc. However, service providers may have their own privacy policies.
Disclosure of information Users have the right to the privacy of their information. The Company will not allow the disclosure of information about your account to third parties, except with the permission of the user.
Disclosure of information The Company will not sell or disclose the personal information provided by users to third parties under any circumstances, unless with the permission of the user.
Request for consent The Company will request your consent before using the information for purposes other than those specified in this Privacy Policy.
Duration of data retention
The Company will retain your personal data for as long as reasonably necessary to fulfil the purposes for which we obtained it and to comply with our legal and regulatory obligations. However, we may retain your personal data for a longer period if required by applicable law.
Data security or sharing
The Company will not share the personal data of users with the Company, organizations and external individuals, except in the following cases:
- 5.1.1. With your consent
- 5.1.2. For legal reasons
The Company will share the personal data of users with the Company, organizations or external individuals if the Company believes in good faith that access, use, preservation or disclosure of such data is reasonably necessary as follows:
- a. Comply with applicable laws, regulations, legal processes or government requests for information
- b. Enforce the provision of services