Thai – Hachiban Co., Ltd. (hereinafter called “Company”) has realized significance of personal data protection and management of personal data to be in line with the personal data protection law under the Personal Data Protection Act B.E. 2562; therefore, the Company has stipulated policies, regulations, and rules. This Personal Data Protection Policy shall apply to personal data of customers or service receivers of the Company according to the details as follows:
1. Personal data
Personal data means any data concerning natural person which enables the identification of such natural person whether directly or indirectly, excluding personal data of the deceased. Sensitive personal data means personal data concerning race, ethnic group, political opinion, beliefs in cult, religion or philosophy, sexual behavior, criminal record, health information, disability, labor union information, genetic data, biological data (such as finger scan, face scan, etc.). The Company shall collect, gather, use, and/or disclose sensitive personal data upon obtaining express consent from you or when the Company needs to proceed as permitted by laws.
Sensitive personal data means personal data concerning race, ethnic group, political opinion, beliefs in cult, religion or philosophy, sexual behavior, criminal record, health information, disability, labor union information, genetic data, biological data (such as finger scan, face scan, etc.). The Company shall collect, gather, use, and/or disclose sensitive personal data upon obtaining express consent from you or when the Company needs to proceed as permitted by laws.
2. Collected personal data
The Company may collect your personal data as follows:
General personal data:
2.1 Personal data of yours or others given by you to the Company such as name and surname, date of birth, place of birth, status, information stated in identification card and passport, copy of identification card or identification number, or others which you allow the Company to access.
2.2 Contact data such as address, telephone number, email.
2.3 Financial data such as bank account, copy of bank passbook and/or others.
2.4 Data from automatic system or equipment such as IP address number, cookies, service usage behavior, service usage history, voice, photo, motion picture, social media account name, Line ID, online social media contact, and chat history in applications.
2.5 Information provided by you when contacting or participating in any activities of the Company, etc.
3. Source of personal data
3.1 The Company gathers the data provided by you when applying for service usage with the Company or online transaction whether through any channels, including the data of participation in activities on online media of the Company, or the provided data when you contact the Company or the Company team.
3.2 When you provide the Company with personal data of other persons, you confirm that you have informed and obtained permission from the data owner for collection, usage, and disclosure of such personal data which shall be used according to the Company’s purpose.
4. Purpose of collection, usage, and disclosure of personal data
The Company shall collect personal data upon obtaining prior consent from owner of personal data, except in the following cases:
4.1 To comply with contract; in case collection, usage, or disclosure of personal data is necessary for rendering service or complying with contract between owner of personal data and the Company.
4.2 To prevent or suppress danger to life, body or health.
4.3 To comply with laws.
4.4 For lawful interests of the Company in case of necessity for legitimate interest of management of the Company; the Company mainly considers rights of owner of personal data such as for fraud prevention, network system security, freedom protection, and benefit of owner of personal data, etc.
4.5 For research or statistics in case of arranging historical documents or archives for public interest, or for research or statistics with proper protection measures to safeguard rights and freedom of owner of personal data.
4.6 To perform official task; in case of necessity for performance of the task for public interest or performance of the task under the official authority vested in the Company.
5. Disclosure of your personal data
The Company shall not disclose your personal data to the third person, except in the following cases:
5.1 To achieve purpose regarding arrangement of historical documents or archives for public interest or for research or statistics which provides proper protection measures to safeguard your rights and freedom.
5.2 For necessity to prevent or suppress danger to life, body or health of persons.
5.3 For necessity to comply with contract to which you are a party or for taking steps in accordance with your request prior to entering into contract.
5.4 For necessity of legitimate interest of the Company or persons or juristic persons other than the Company, except that such interest is overridden by fundamental rights of your personal data.
5.5 For your benefit which permission cannot be obtained at that time.
5.6 For benefit of investigation by inquiry official or adjudication by court.
6. Usage of personal data
Your accurate personal data helps us render service to you smoothly and efficiently corresponding to your experience. We may use collected personal data of yours for:
6.1 Creation and management of your account.
6.2 Verification of your identity.
6.3 Proceeding according to purchase order, payment, and other transactions concerning website.
6.4 Response to product and customer’s request for service.
6.5 Improvement and development of our service and marketing activity.
6.6 Collection of anonymous statistical data, and analysis of data for internal use or with the third person.
6.7 Investigation and analysis of usage and tendency to improve your experience with website.
6.8 Enhancement of efficiency and management of website.
6.9 Fraud prevention, robbery investigation, and crime prevention, including security maintenance for your account.
6.10 Opinion collection, response to complaint, seeking out of guideline to remedy, improve and correct mistake in our product or service.
6.11 Protection of life, body, health, safety, persons, and property of persons.
6.12 Use as evidence for any legal actions, including necessary legal proceedings or compliance with court order or agencies which have authority according to law.
6.13 Investigation of our performance efficiency to improve service quality.
6.14 Compliance with applicable law.
Moreover, for your benefit from using product and/or service, we may use personal data under your selected permission in order to:
1. Contact you to send information concerning product and service which may interest you.
2. Offer new product, service and/or recommendation for you.
3. Survey your opinion or complaint regarding service usage and/or product.
4. Deliver targeted advertisement, news and information about promotion or special activity for you.
7. Retention and retention period of your personal data
The Company shall collect your personal data to the extent that it is necessary for usage according to the Company’s purpose and for compliance with legal requirement and supervision, for example, anti-money laundering law which allows the Company to collect your data for 10 years, from the termination date of the contract between you and the Company, except that the Company exercises the right of claim under law or it is in the process of legal proceedings until the case is final. In case the Company no longer needs to use personal data, the Company shall delete such personal data from system and/or manage such data to become the anonymous data for anonymization of your data, under the obligation to maintain data in accordance with relevant law.
9. Maintenance of personal data
The Company strictly uses internal security measures for security of your personal data to prevent personal data infringement. The Company has stipulated policies, regulations, and rules of personal data protection, including measures to prevent the information receiver to use or disclose the data out of purpose, or the unauthorized or unlawful use or disclosure. The Company has adjusted such policies, regulations, and rules from time to time as necessary and appropriate. In addition, the executives, employees, contractors, representatives, consultants, and receivers of the Company’s information shall have duty of confidentiality of personal data in accordance with confidentiality measures as specified by the Company.
10. Marketing activity and marketing promotion
The Company uses some of your information for marketing which corresponds to your interest in order that you are informed of activity, offer about selling promotion, product, and service that may interest you. You may unsubscribe from such information of the Company.
11. Change of personal data protection policy
The Company regularly reviews the personal data protection policy to conform to the practice guidelines and relevant laws and regulations. In case of change of personal data protection policy, the Company shall inform you through announcement on the Company website.