Customer Personal Data Protection Policy
Jaspal Company Limited and its Affiliates
As Jaspal Company Limited and its Affiliates (collectively referred to as the “Company”) recognize the importance of the protection of personal data which you have provided or will provide, therefore, the Company has prepared this Personal Data Protection Policy for your understanding and acknowledgement of the procedures of the Company in relation to the collection, use, and disclosure of your personal data subject to the Personal Data Protection Act B.E. 2562 (2019).
1. Scope of the Policy
This Policy covers the personal data which the Company has obtained or collected from your visit to the Company’s stores, purchase of goods and services, membership application, making suggestions, comments, or complaints, completing surveys or questionnaires, or performing any activities as required via the Company’s websites, mobile phone applications, social media channels, and stores of the Company. This Policy does not cover your use of websites, mobile phone applications, and/or social media channels of third parties which can connect to the website, mobile phone applications and/or social media channels of the Company and stores which are not managed and supervised by the Company. For these reasons, the Company advises you to read this Personal Data Protection Policy in order to understand and acknowledge the methods, procedures, and purposes of the Company in relation to the collection, use, and disclosure of your personal data.
2. Definitions
“Company” Jaspal Company Limited and its affiliates, e.g. Jaspal & Sons Company Limited.
“Personal Data” Any information relating to a Person, which enables or may enable the identification of this Person, whether directly or indirectly, but not including the information of a deceased Person.
Personal Data includes, but is not limited to, name, surname, age, gender, nationality, date of birth, national identification number, passport number, taxpayer identification number, address, telephone number, and e-mail address.
“Data Subject” A person whose personal data is collected. This term refers to “you” as a customer in this Policy.
“Person” A natural person. Any legal entities incorporated under any laws, including but not limited to, companies, associations, foundations, or other organizations, are excluded.
“Company’s Website” Websites of the Company and its affiliates.
“Company’s Store” Any stores under the management or supervision of Jaspal Company Limited and its affiliates.
3. Collection of Your Personal Data by the Company
During your access to or use of the Company’s Websites, mobile phone applications, social media channels, e-mail, phone calls and/or visits to the Company’s Stores, the Company may be required to collect or obtain Personal Data which may enable the identification of a Person, as follows:
The Company will strictly collect Personal Data only to the extent necessary subject to the purposes specified in Clause 4 of this Personal Data Protection Policy.
For the collection, use, or disclosure of your personal data, the Company will make a written request for explicit consent or a request via electronic means prior to or during the collection of the Personal Data. A Person has the right not to consent and provide such data however, deciding not to consent or withdrawing any consent, may result in the Company being unable to render services to you.
For the collection of data of any minor, partially impaired or impaired person, the Company will collect the foregoing Personal Data only if the Company obtains a written consent from its relevant legal guardian. If it is explicitly known by the Company, the Company will not collect Personal Data from any Person whose age is below twenty (20) or who is partially impaired or impaired person unless consent is obtained from such legal guardian in the event that consent must be obtained. If the Company is aware that it has unintentionally collected Personal Data from any person below the age of twenty (20), or who is partially impaired or impaired person, without obtaining consent from its legal guardian, the Company will promptly delete such Personal Data or process only that part of the Personal Data which the Company is entitled to process based on any legal basis other than the request of consent.
The Personal Data given to the Company by a Person must be correct, complete, and true and will not cause any confusion. A Person must keep his/her Personal Data up-to-date and inform the Company of any changes via the contact channel specified in Clause 11. If you decide not to provide the Company with your Personal Data or if you choose to withdraw consent for the use of your Personal Data, it may result in the Company no longer being able to render services to you.
4. Purposes of the Collection, Use, and Disclosure of Personal Data
The Company collects Personal Data for the following purposes:
5. Disclosure of Personal Data to any Third Parties
The Company may disclose your Personal Data to any third parties to the extent necessary in order to comply with the purposes specified in this Policy. The Company will send your Personal Data to the following third parties:
With regard to third parties to which the Company will disclose Personal Data, the Company will have appropriate measures to ensure that Personal Data is protected and secure, including but not limited to, execution of agreements with conditions that third parties are entitled to use Personal Data to the extent stipulated in the agreements and the execution of Non-disclosure Agreements for the purposes of confidentiality of the obtained Personal Data for business operation.
6. Your Rights as the Data Subject
If the Company collects, uses, or discloses your Personal Data subject to the purposes specified in this Policy, you have the following rights pursuant to the Personal Data Protection Act B.E. 2562 (2019):
If you wish to exercise the foregoing rights, you are required to make a written statement. The Company will use its best efforts to perform actions in due course and no later than the period prescribed by law. The Company will strictly comply with the laws concerning your rights as the Data Subject.
The exercising of rights to request the erasure, destruction, or anonymization of your Personal Data, temporary restriction of use, or withdrawal of consent may result in the Company being unable to render services to you.
7. The Period for which Personal Data will be Retained
The Company will retain your Personal Data within the period necessary for the purposes specified in this Policy except for the case that the longer period of retention is required by laws. After the expiration of the retention period, or if your Personal Data is no longer required, the Company will erase, destroy, or anonymize such Personal Data.
8. Personal Data Protection Measures
The Company provides appropriate security measures for preventing the unauthorized or unlawful loss, access to, use, alteration, correction, or disclosure of Personal Data, and such measures will be reviewed by the Company when it is necessary, or when the technology has changed in order to efficiently maintain the appropriate security and safety.
9. Revision of the Personal Data Protection Policy
The Company reserves the rights to revise and amend this Personal Data Protection Policy as deemed necessary and appropriate. Any revision or amendment will be announced and published on the Company’s Website or by any other appropriate method.
10. Information about Cookies
The Company’s Website uses cookies and other tools to help distinguish you from other users of the website. This allows the Company to improve the website and to provide you with a quality experience when using the website. By continuing to use this website, you are agreeing to cookies being placed on your computer.
11. Contact the Company
If you have any queries in relation to this Personal Data Protection Policy or if you wish to exercise the rights specified in Clause 6, or if you wish to withdraw the consent for the collection, use, or disclosure of your Personal Data, please contact the Company at:
Jaspal Company Limited
Data Protection Officer (DPO) at e-mail: dpo@jaspal.co.th
This Personal Data Protection Policy is prepared in accordance with the Personal Data Protection Act B.E 2562 (2019) and published in both Thai and English. If there are any discrepancies in terms of meanings or interpretations between the Thai and English versions, the Thai version must prevail.
This Policy is announced on 26 May 2020.