PERSONAL DATA PROTECTION NOTICE FOR CUSTOMER
Privacy Policy
This Personal Data Protection Notice for Customer (the “Notice“) is provided to inform the data subjects on the purposes and methods for the collection, use, disclosure, and/or cross-border transfer (if any) of their Personal Data, as well as their rights in relation to such Personal Data, as detailed below.
1. Definitions
“Company” means Jasmin Jewelry Group Co., Ltd.
“Personal Data” means any information relating to a person, which enables the identification of such person, whether directly or indirectly, but not including information of deceased persons in particular.
“Sensitive Personal Data” means any Personal Data classified as sensitive personal data under Section 26 of the Personal Data Protection Act B.E. 2562 (2019), and any other categories that may be prescribed by the Personal Data Protection Commission.
“Data Processing” refers to the collection, use, or disclosure of Personal Data.
“Data Subject” means a natural person which can be identified with Personal Data.
Other terms not specifically specified in this Notice will have the meanings assigned to them under the Personal Data Protection Act B.E. 2562 (2019) and its subordinate legislation.
2. Scope of Application
This Notice applies to the Company’s individual customer and, where the customer is a juristic person, to its employees, personnel, officers, representatives, agents, authorized persons, directors, and other natural persons acting on behalf of such juristic person.
3. Data Collection and Data Processing
3.1 Personal Data Collected, used, disclosed, or cross-border transfer (if any)
The Company will collect, use, disclose, or cross-border transfer (if any) the following Personal Data of the Customers:
(1) General Personal Data such as name-surname, date of birth including any important dates provided to us, email address, telephone number, address, national ID, tax ID, signature, credit card details, social media account information (such as Facebook, Instagram, LINE ID including chat history), photos, motion images from video recording or closed-circuit television (CCTV), and other Personal Data you provide to the Company including measurements and designs preferences necessary for the selection or customization, of our products such as ring size;
(2) Payment information, such as bank account number and details;
(3) Technical data such as the username and password used to access the system, IP address, log files, cookies data, system usage data, website usage data, operating systems and platforms, and other technologies on devices used to access the platform, as well as other Personal Data regarding the use of the Company’s system.
(4) Sensitive Personal Data Nil
(If you provide documents to the Company for identity verification purposes and such documents contain Sensitive Personal Data that is not necessary for the relevant purpose, you may redact such Sensitive Personal Data before submitting the documents to the Company. If such Sensitive Personal Data is not redacted from the documents, the Company reserves the right to redact such information. In such circumstances, the Company will not be deemed to have collected such Sensitive Personal Data from you.)
If you do not provide some Personal Data requested by the Company, the Company may be unable to enter into a contract or perform contractual obligations, or provide certain products, services including after-sale services, or related activities. In addition, the Company may be unable to fulfill one or more of the purposes described in this Notice.
If you provide the Company with Personal Data of or relating to another individual, you represent and warrant that you have the authority to disclose such Personal Data to the Company and to permit the Company to collect, use, disclose, and otherwise process such Personal Data in accordance with this Notice.
3.2 Source of Personal Data
The Company may collect your Personal Data from the following sources.
(1) The Company collects your Personal Data directly from you through various channels, including the Company’s retail stores, official website, email, telephone, and other electronic communication channels, including social media platforms such as Instagram, Facebook, TikTok, LINE, messages and ad lead forms, website forms, cookies and pixels (TikTok Pixel included). Personal Data may also be collected through your registration for, access to, or use of the Company’s information technology systems, websites, applications, products, and services.
(2) The Company may collect your Personal Data from other sources, including coordinators or contact persons of your representative, referrals from existing customers or other persons (if any), publicly available sources, and other third parties, where permitted by applicable law.
3.3 Purposes of the collection, use, disclosure of Personal Data
The Company may process your Personal Data for the following purposes:
1) For order fulfilment and customer services: to verify and authenticate identity of the Data Subject, to process and deliver your orders, to provide after-sales services (including repair, resizing, cleaning, warranty services, and certificate management), to receive and safeguard customer-owned items for customization or repair, and to issue necessary documents such as receipts of goods, delivery receipts, tax invoices and other documents;
2) For customer relationship management and marketing communications: to manage our relationship with you, to respond to inquiries, to provide customer support, and to send marketing communications, including information about new collections, promotions, special events, and birthday or anniversary greetings, subject to your preferences.
3) For digital services, website administration, and advertising: to operate, maintain, and improve our website and online services, analyze website usage and customer preferences, and conduct online advertising, audience measurement, and targeted marketing activities through available channels including social media.
4) To enter into contracts, fulfil contractual obligations such as payment /re-payment;
5) To communicate and facilitate the Company’s operations, both internally and externally;
6) To conduct business assessment, planning, forecasting, and improvement initiatives, including analyzing data for the purpose of enhancing the Company’s products, services, and operational efficiency;
7) To establish, exercise, defend, or enforce legal claims, to be used as evidence in legal proceedings and to comply with court orders, regulatory requirements, or lawful orders of government authorities.
8) To conduct internal audits, monitor compliance, prevent and detect improper activities, investigate complaints or claims, and prevent wrong or illegal acts; and
9) To maintain safety and security of the premises or other areas using closed-circuit television (CCTV) recordings.
3.4 Legal bases for the collection, use, and disclosure of Personal Data
The Company generally processes your Personal Data based on one or more of the following legal bases:
1) Performance of a contract: where Data Processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract with the Company;
2) Legitimate interests: where Data Processing is necessary for the legitimate interests pursued by the Company or a third party, provided that such interests do not override your fundamental rights and freedoms relating to your Personal Data;
3) Legal obligation: where Data Processing is necessary for compliance with legal obligation to which the Company is subject;
4) Other lawful bases: where Data Processing is permitted or required under applicable laws, including any other legal bases under the Personal Data Protection Act B.E. 2562 (2019).
3.5 Disclosure of Personal Data
The Company may disclose your Personal Data (only as necessary) to the following external parties or organizations for the purposes indicated in this Notice.
1) Outsourced service providers relating to the Company’s operations
The Company may disclose your Personal Data to these people, who may act as the data controller or the data processor, such as accounting service providers, banks, information technology solution providers, cloud service providers, data or document storage providers, application service providers. The Company will ensure that those persons maintain the confidentiality of your Personal Data in accordance with the agreement executed with the Company, except for the case that other exception applies as provided by the law.
2) Relevant government agencies
The Company may disclose your Personal Data to relevant government authorities, government agencies, and/or regulators which have the legal authority, or where we receive order from them, such as the Court of Justice, the Revenue Department.
3) Other external parties or agencies
The Company may disclose your Personal Data to external parties or organizations, or allow them to access your Personal Data, such as professional advisors (including legal advisors and external auditors) and external organizations to which the Company would like to carry out public relations for the purposes indicated above.
4. Security Measures
The Company has implemented appropriate technical, administrative, and physical safeguards for the collection, use, and disclosure of Personal Data in compliance with applicable personal data protection laws. Such safeguards cover relevant information systems and related components and are designed to maintain the confidentiality, integrity, and availability of Personal Data, as well as to prevent unauthorized or unlawful access, use, alteration, disclosure, loss, or destruction thereof.
5. Cross-border Transfers of Personal Data
The Company is not intended to transfer Customer’s Personal Data outside Thailand unless such transfer is necessary for the provision of products, services, or related activities. In such case, the Company will rely on the applicable legal basis or Data Subject’s consent (when required). Where Personal Data is transferred to the country that may not have an adequate level of Personal Data protection standards equivalent to those of Thailand, the Company will implement appropriate measures to ensure adequate protection of Personal Data sent or transferred. The Company will also ensure that the recipients have appropriate Personal Data protection standards.
6. Personal Data Storage and Retention Period
The Company stores your Personal Data as described below.
1) The Company stores Personal Data in both physical and electronic formats. Such data may be maintained within the Company’s head office, branches (if any), stores, storage facilities, including shared drives, ECount ERP, Excel files, Google Sheets and Google Drive, LINE OA, company email, social media inboxes, including cloud systems managed by the Company and/or the Company’s service providers (if any), document storage cabinets and facilities, and data warehouse systems used by the Company. Access to Personal Data is restricted to authorized personnel on a need-to-know basis.
2) The Company will retain your Personal Data only for as long as necessary to fulfil the purposes described in this Notice, to comply with applicable legal obligations, or as otherwise permitted by law, and in any event for no longer than 10 years. However, the Company may retain Personal Data beyond such period where it has a lawful basis for continued processing, or where a longer retention period is required or permitted by applicable law.
3) After the applicable retention period has expired, or when it is no longer necessary for the Company to retain your Personal Data, the Company will securely delete, destroy, or anonymize such Personal Data within 90 days after the expiration of the retention period.
7. Rights of the Data Subject
The Data Subject is entitled to the rights provided under the Personal Data Protection Act B.E. 2562 (2019), including, but not limited to, the right to withdraw consent for the collection, use, and/or disclosure of your Personal Data where consent has been given (such withdrawal will not affect the collection, use, or disclosure of Personal Data based on consent before its withdrawal), the right to access and obtain a copy of your Personal Data, the right to rectify of your Personal Data, the right to delete or anonymize of your Personal Data, the right to restrict the use of your Personal Data, the right to port your Personal Data, the right to object to the collection, use, and/or disclosure of your Personal Data, in some cases, and the right to lodge a complaint with the Personal Data Protection Committee, as permitted by laws.
A Data Subject may exercise the rights described above by submitting a written request or email to info@jasmin-jewelry.com Upon receipt of a request, the Company will consider the request and notify the Data Subject of the outcome within 30 days from the date on which the request is received.
8. Contact Channel of the Company
Jasmin Jewelry Group Co., Ltd.
The Emporium Shopping Complex, G Floor, 622 Sukhumvit Road, Khlong Tan, Khlong Toei, Bangkok 10110
Telephone: 02-664-9008-9
Email: info@jasmin-jewelry.com