Privacy Policy

Thaithonmall.com values the protection of your personal information. This privacy policy explains the guidelines for collecting, using, or disclosing personal information including various rights of the owner of personal data, according to the personal data protection law.

Collection of personal information

We will collect personal information received directly from you through the following channels.

  • Membership Registration

Types of personal information collected

Personal information such as first name, last name, age, date of birth, nationality, national identification number, passport, etc.

Contact information such as address, telephone number, email, etc.

Account information such as user accounts, usage history, etc.

Transactional and financial information such as order history, credit card details, bank accounts, etc.

Technical information such as IP address, Cookie ID, website usage history (Activity Log), etc.

Other information such as pictures, animations and any other information that is considered personal information according to personal data protection laws.

Minor

If you are under 20 years of age or have limited legal capacity. We may collect, use or disclose your personal information and may require your parent or guardian's consent or where permitted by law. If we become aware that personal information has been collected from a minor without parental or guardian consent. We will proceed to delete that information from our servers.

How to store personal information

We will maintain your personal information in paper and electronic formats.

We store your personal information as follows:

  • Server service provider in Thailand

Processing of personal data

We will collect, use or disclose your personal information for the following purposes.

  • To create and manage user accounts.
  • To deliver goods or services.
  • To improve products, services or user experience.
  • For internal management of the company.
  • For marketing and promotional purposes.
  • For after-sales service.
  • To collect feedback.
  • To pay for goods or services.
  • To comply with the terms and conditions.
  • To comply with laws and regulations of government agencies.

Disclosure of personal information

We may disclose your personal information to others with your consent or where permitted by law, as follows:

Management within the organization

We may disclose your personal information within the company as necessary to improve and develop our products or services. We may collect internal information for various products or services under this policy to better benefit you and others.

Personal data storage period

We will retain your data for the period necessary while you are a customer or relationship with us or for the period necessary to fulfil the purposes related to this policy. This may need to be preserved thereafter, where required by law. We will delete, destroy or anonymize your personally identifiable information when it is no longer necessary or the said period ends.

Rights of the owner of personal data

Under the Personal Data Protection Law, you have the right to do the following:

Right to withdraw consent If you have given your consent, we will collect, use or disclose your personal information. Whether your consent was given before the effective date of the Personal Data Protection Law or after, you have the right to withdraw your consent at any time.

Right to access: You have the right to request access to your personal information which is under our responsibility and to request that we make a copy of that information for you, including asking us to disclose how we obtained your personal information.

Right to data portability: You have the right to request your data in cases where we have made it available in a format that can be read or used by a tool or device that can be operated automatically and can use or disclose personal information by automatically means, including the right to request that we send or transfer personal data in such form to another data controller when this can be done by automatic means and have the right to request personal data that we send or transfer personal data in such form directly to another data controller unless unable to proceed due to technical reasons.

Right to object: You have the right to object to the collection, use or disclosure of your data at any time. If the collection, use, or disclosure of your data is carried out through operations necessary under our legitimate interests or those of another person or legal entity to the extent that you can reasonably expect it or to carry out our mission in the public interest.

Right to erasure/destruction: You have the right to request erasure/destruction of your data or to make your data non-identifiable. If you believe that your personal information has been collected, used or disclosed in violation of applicable laws, or you consider that we no longer need to retain it for the purposes involved in this policy or when you have exercised the right to withdraw consent or exercised the right to object as stated above.

Right to request the restriction of processing: You have the right to request a temporary suspension of the use of your data in cases where we are investigating your request for correction of your data or your objection or any other case where it is no longer required and we must delete or destroy your personal information under relevant laws but you request us to suspend use instead.

Right to rectification: You have the right to request correction of your personal information to be accurate, current, complete and not misleading.

Right to complain: You have the right to complain to the relevant legal authority. If you believe that the collection, use or disclosure of your personal information is an act in a manner that violates or fails to comply with relevant laws.

You can exercise your rights as the owner of the personal data above by contacting our Personal Data Protection Officer according to the details at the end of this policy. We will notify you of the results within 30 days from the date we receive your request to exercise your rights through the form or method that we specify. However, if we reject the request, we will inform you of the reason for the denial via various channels such as text message (SMS), email, phone call, letter, etc.

Advertising and marketing

For the benefit of receiving our products or services, we use your information to analyze and improve our products or services and marketing through Google, Facebook, pixel tracking code, etc. We use that information to tailor products or services to you.

We may send information or newsletters to your email. The objective is to present interesting things to you. If you no longer wish to receive communications from us via email, you can click “unsubscribe” on the email link or contact us via email.

Personal tracking technology (Cookies)

To make your experience more complete and efficient, we use cookies or similar technologies to develop accessibility to products or services suitable for advertising and track your usage. We use cookies to identify and track website users and their access to our website. If you do not want cookies to be placed on your computer. You can set your browser to refuse cookies before using our website.

Maintaining the security of personal information

We will maintain the security of your personal information following the principles of confidentiality, integrity and availability to prevent loss, access, use, change, modification or disclosure. In addition, we will provide measures to maintain the security of personal information which covers administrative safeguards, technical safeguards, and physical safeguards regarding access or control of the use of personal data.

Notification of personal data breach

If there is a violation of your personal information, we will notify the Office of the Personal Data Protection Commission without delay within 72 hours, from becoming aware of the incident, as far as possible. Where the breach has a high risk of adversely affecting your rights and freedoms, we will notify you of violations and provide remedies without delay through various channels such as websites, text messages (SMS), email, phone calls, letters, etc.

Changes to the Privacy Policy

We may change this policy from time to time. You can know the revised terms and conditions of this policy through our website.

This policy was last revised and is effective as of November 12, 2022.

Privacy policies of other websites

This Privacy Policy applies only to the offering of products, services, and functionality on this website to our customers. If you visit another website even through our website, the protection of various personal information will be according to the privacy policy of that website which we are not involved with.

Contact details

If you would like to inquire about this privacy policy, including requests to exercise various rights, you can contact us or our Personal Data Protection Officer as follows,

Personal data controller

Website Development team at thaithonmall.com
Thaithonburi Corporation Company Limited No. 119
BIS Building, 1st Floor, Room 1 C22, Mahesak Road
Suriyawong Subdistrict, Bang Rak District, Bangkok 10500

Email: thaithonburicorp@gmail.com

Personal Data Protection Officer

Admin team at thaithonmall.com
Website Development team at thaithonmall.com
Thaithonburi Corporation Company Limited No. 119
BIS Building, 1st Floor, Room 1 C22, Mahesak Road
Suriyawong Subdistrict, Bang Rak District, Bangkok 10500

Email: thaithonburicorp@gmail.com