What Is Personal Data?
“Personal data*” means “information relating to a person which enables the identification of that person, whether directly or indirectly, but does not include the information of a deceased person in particular.”
Personal Data We Collect
We collect the following personal data:
- Personal data such as first name, last name, age, date of birth
- Contact information such as email address, telephone number, company name, branch, delivery location coordinates, address, delivery address, and address for issuing receipts/tax invoices
- Account information such as username, unique user ID, password, usage history, etc.
- Identity verification documents such as a copy of a national ID card, a copy of a passport, etc.
- Transaction and financial information such as credit card details, bank account, order history, payment notifications, and money transfer slips
- Technical data such as IP address, cookie ID, website usage history (activity log), etc.
- Other information that you consent to provide to us, such as articles, photographs, videos, feedback, and any other information deemed to be personal data under personal data protection law, etc.
You may choose not to provide your personal data to us; however, you will not receive the full convenience of using certain functions of the Phattharinfood website and services. Users who are unsure which personal data is necessary may contact us to inquire.
Sources of Personal Data
We may receive your personal data through the following 2 channels:
- We receive personal data directly from you. We collect your personal data through the following service processes:
- The process of registering for our services or the process of submitting a request to exercise your rights with us
- From your voluntary participation in surveys, or correspondence via email or other communication channels between us and you
- Collected from your use of our website through your browser’s cookies
- We receive your personal data from third parties as follows:
- We do not receive personal data from any third party.
- The data is received through the following methods:
- We do not receive personal data via email forms or documents.
Purposes of Data Processing
- We collect your personal data in order to provide services to you as a customer ordering our products and services, including sending news and promotions regarding products and services from Phattharinfood.
Processing of Personal Data
Once we have received personal data from the sources of personal data described above, we will process your personal data as follows:
- Collect it securely
- To create and manage user accounts
- To process and manage orders
- For internal company management
- Newsletter distribution system
- To contact customers regarding promotions, products, and services
- To improve the user experience
- To respond to legal claims and to prevent damage
- To send marketing communications or sales promotions
- For after-sales service
- To deliver products or services
- To collect feedback
- To process payments for products or services
- To update delivery information, including cases where customers require additional services
- To comply with the Terms and Conditions
- To provide information on related products and services
- To comply with laws and regulations of government authorities
- To provide information via the Phattharinfood website that you may wish to know further about our products and services beyond the website
Disclosure. The persons or entities to whom we may disclose your personal data are as follows:
Disclosure of Personal Data
Internal Organizational Management
We may disclose your personal data within the company to the extent necessary to improve and develop our products or services. We may compile internal data for the various products or services under this policy for the greater benefit of you and others.
Service Providers
We may disclose certain personal data of yours to our service providers to the extent necessary to carry out various operations, such as payment processing, marketing, and product or service development, etc. Such service providers have their own privacy policies.
- We may send your personal information, including your name, address, company name, and telephone number, to shipping companies.
- We have never sold your data to any other person.
Retention and Retention Period of Personal Data
Retention of Personal Data
We will retain your personal data for as long as necessary while you remain a customer or maintain a relationship with us, or for as long as necessary to achieve the purposes related to this policy, which may need to be retained further thereafter if required by law. We will delete, destroy, or anonymize your data so that it can no longer identify you once it is no longer necessary or once such period has ended.
The data controller retains your personal data as follows:
1. Method of storage Stored as soft copy and hard copy
2. Storage location: stored on the cloud provided by Ruk-com Hosting, or stored as files on computers, including printed on paper for use in the delivery of products and services.
3. Storage period: as specified under the heading “Period of Processing of Personal Data.”
4. Once the storage period has expired, or once we no longer have the right or a legal basis to process your personal data, we will destroy such personal data by deleting it from our systems, and this will be completed within 90 days from the end of such period.
Retention Period of Personal Data
We will retain your personal data for the period necessary to comply with our legal obligations, resolve disputes, and enforce our contracts and terms and conditions, unless it is necessary to retain it further or as required by law. We may use aggregated data derived from the collection of your personal data that has been updated or deleted. Once the retention period expires, the personal data will be deleted. Therefore, the right to access, the right to erasure, the right to rectification, and the right to data portability will no longer be enforceable once the retention period has expired.
Data processing and retention period: 5 years from the date of contract termination
Rights of the Data Subject
You have the right to take the following actions:
(1) Right to withdraw consent: You have the right to withdraw your consent to the processing of personal data that you have given to us, at any time throughout the period your personal data remains with us.
(2) Right of access: You have the right to access your personal data and to request that we provide you with a copy of such personal data, as well as to request that we disclose how we obtained personal data for which you did not give us consent.
(3) Right to rectification: You have the right to request that we correct inaccurate data or complete incomplete data.
(4) Right to erasure: You have the right to request that we delete your data on certain grounds.
(5) Right to restriction of processing: You have the right to request the restriction of the use of your personal data on certain grounds.
(6) Right to data portability: You have the right to transfer the personal data that you have provided to us to another data controller, or to yourself, on certain grounds.
(7) Right to object: You have the right to object to the processing of your personal data on certain grounds.
You may contact our DPO/relevant department to submit a request to exercise the rights above. (Contact details appear under the heading “Contact Channels” below.)
You are not required to pay any fees to exercise the above rights. We will consider your request and notify you of the outcome of our
consideration of your request within 30 days from the date we receive such request.
Marketing Activities and Promotions
While you are using our services, we will send you information regarding marketing activities and promotions of our products and services that we believe may be of interest to you, in order to provide you with the fullest and most effective service. If you have agreed to receive such information from us, you have the right to withdraw such consent at any time. You may unsubscribe from receiving such information by clicking the “Unsubscribe” link in the email you received.
Cookies
What Are Cookies?
Cookies are text files stored on your computer that are used to store details of your internet usage logs or your website visiting behavior. You can learn more about cookies at https://www.allaboutcookies.org/
How Do We Use Cookies?
We collect website visit data from all visitors through cookies or similar technologies, and we use cookies to improve the efficiency of access to our services via the internet, as well as to improve the efficiency of using our services via the internet. This is used for the following purposes:
- To study your website usage behavior, in order to develop it to be easier, faster, and more efficient to use
Types of Cookies We Use
We use the following cookies for our website:
- Functionality – cookies used to remember choices customers make as preferences, such as the language used, etc.
- Advertising – cookies used to remember what customers have previously visited, in order to present relevant products, services, or advertisements that match the interests of users
Analytical/Performance Cookies
These cookies enable us and third-party services to collect data for statistical purposes regarding how our visitors use the website. These cookies do not contain personal data such as name and email address, and are used to help us improve your website experience.
Social Media Cookies
Third-party cookies from social media websites (such as Facebook, Twitter, and others) help us track social media users when they visit our website, using tagging tools provided by those social media platforms.
These cookies are also used for event tracking and for online advertising purposes. Any data collected through these tagging tools will be used in accordance with our privacy policy, and we will not collect or share any personal data that can identify users.
- Google Analytics – generates anonymous statistics on how visitors use the website. These cookies are used to distinguish between users. We use these cookies solely to improve the user experience on our website and to understand which website content receives the most attention, views, or clicks. (Name: _gid (expires in 24 hours); Name: _ga (expires in 2 years))
Managing Cookies
You may set your browser not to accept our cookies. Instructions on how to manage cookies can be found at https://www.wikihow.com/Disable-Cookies or via the links specified below.
– Apple Safari
https://support.apple.com/en-gb/guide/safari/sfri11471/mac
– Google Chrome
https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=en
– Microsoft Edge
– Microsoft Internet Explorer
– Mozilla Firefox
– iPhone or iPad (Chrome)
https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DiOS&hl=en&oco=1
– iPhone or iPad (Safari)
https://support.apple.com/en-us/HT201265
Please note that if you choose to disable cookies on your browser or device, it may affect certain functions of the Phattharinfood website, which may not operate or provide services normally.
Phattharinfood shall not be liable for, and Phattharinfood is not affiliated with, the websites and their content mentioned above.
Privacy Policies of Other Websites
This privacy policy applies only to the offering of products, services, and website usage for our customers. If you visit another website, even through a link on our website, the protection of your personal data will be governed by the privacy policy of that website, with which we are not involved.
Changes to the Personal Data Protection Policy
We will regularly review this privacy policy to ensure it remains consistent with practices and relevant laws and regulations. If there are any changes to this privacy policy, we will notify you by updating the information on our website as soon as possible.
This privacy policy was last reviewed on [27/05/22].
Contact Channels
Data Controller Details
Phattharinfood
190/73 Moo 8, Nai Khlong Bang Pla Kot Sub-district, Phra Samut Chedi District, Samut Prakan Province 10290
Contact channel:
phattharinfood@gmail.com
Regulatory Authority Details
In the event that we or our employees or staff violate or fail to comply with the law relating to personal data protection, you may file a complaint with the regulatory authority as detailed below:
Name: Office of the Personal Data Protection Committee