Privacy Policy
Bangkok Sportwear Co., Ltd.
Bangkok Sportwear Co., Ltd. ("we" or "Bangkok Sportwear") is committed to protecting your personal data and privacy. The following outlines how we handle your personal data, including collection, use, disclosure ("processing"), and protection of the personal data you provide to us when visiting our website kappa.in.th or using our applications or receiving services from us. This privacy policy covers any information that can directly or indirectly identify you, whether obtained directly from you or indirectly from third parties ("Data" or "Personal Data"). For health-related personal data, in addition to complying with this policy, we will adhere to applicable laws, regulations, directives, or rules from relevant authorities or any amendments. As the data controller of your personal data, we have established this Personal Data Protection Policy as part of the terms and conditions for using our website and applications, as well as accessing our services. By using our services each time, you are deemed to have read and agreed to accept this Privacy Policy.
- Collection of Personal Data
We collect your personal data as necessary when you provide it directly to us, such as when you provide information to receive services from us through our website, mobile applications, or other channels. Examples include job applications, procurement requests, online transactions, newsletter subscriptions, requesting special assistance, and offline transactions such as service registration at counters. Additionally, we may receive your personal data from third parties, such as family members or close associates, insurance companies, our service providers, or government agencies, if you have provided consent for such disclosure or as required by law.
- Personal Data We Collect
The types of personal data we collect depend on the purposes for processing the data as outlined in this Personal Data Protection Policy. The following are examples of personal data that we collect directly from you or from third parties:
- Identity information, such as name and surname.
- Contact information, such as address, phone number, and email.
- Information for newsletter subscription and participation in marketing activities, such as registration for marketing events.
- Statistical information, such as the number of service users and website visits.
- Information from your use of our website, such as IP address, cookies, and online appointment system data.
- Feedback or information from other social media.
We will not collect or use sensitive information about you, such as race, ethnicity, political opinions, beliefs, religion or philosophy, sexual behavior, criminal history, health information, disabilities, labor union membership, genetic information, biometric information, or any other information that may impact your privacy, unless required by applicable regulations or laws, or with your explicit consent.
We may process your data based on your consent, contractual agreements, legal obligations, or other legal bases as specified in the Personal Data Protection Act of 2019. The purposes of data processing include:
3.1 Service-related Purposes:
- Providing and delivering our services, both online and offline.
- Coordinating and forwarding information to other service providers to expedite service delivery.
- Financial and accounting purposes, such as verifying credit card transactions, billing, and refund processes.
- Ensuring security, including safety within office premises or service branches.
- Compliance with company policies and legal requirements, regulations, directives, or requests from government agencies, such as complying with legal subpoenas or court orders.
3.2 Sales and Marketing Purposes:
We will process data for these purposes only if you have provided consent. Examples include:
- Providing benefits and convenience to our members.
- Marketing, sales promotion, and customer relationship management, such as sending information about promotions, products, and services, as well as conducting market research and statistical analysis.
- Communication channels for addressing questions, responding to complaints, and resolving service-related issues.
3.3 Operational Management Purposes:
Data processing related to various aspects of company operations, such as:
- Accounting and financial management.
- Information technology management and business support data.
- Inventory and logistics management, including shipping.
These purposes support our business operations and may involve personal data related to these functions.
4. Individuals to Whom Personal Data May be Disclosed
We may disclose or transfer your personal data to third parties, whether within or outside of Thailand, in countries that have adequate data protection standards and comply with legal requirements. We will take necessary and appropriate measures or comply with regulations and laws to fulfill the purposes stated above. The following individuals or entities may receive your personal data:
- Affiliated companies, business partners, and business associates.
- Agents, service providers, or partners who provide services on our behalf, such as technology service providers.
- Business partners, such as program partners for loyalty points and benefits.
- Banks and payment service providers, such as credit card companies.
- Security and safety authorities and customs authorities.
- Government agencies, regulatory bodies, or other entities as permitted by law or as required.
- Websites of third parties linked to our website or mobile applications. Please note that our Privacy Policy does not cover these third-party websites, and we are not responsible for their actions or privacy practices.
It's important to note that when you follow links to third-party websites, the processing of your personal data is beyond our control, and we disclaim any responsibility or liability for the actions of such third parties.
Your personal data will be retained for as long as necessary for the purposes outlined in this Privacy Policy or as required by law. Once the specified retention periods have passed, if you do not provide consent for us to continue processing your personal data, we will proceed to destroy the relevant data using our established data destruction procedures promptly.
We implement technical and organizational measures to protect and maintain the security of your personal data that we collect. For example, we use Secure Sockets Layer (SSL) protocols for encrypting data over the internet. We limit access to your information, stored both in internet-based systems and in document format, to only essential personnel who need to process that personal data. Furthermore, we store data in locations with restricted access to individuals who can access personal data, whether stored electronically or in document format.
These security measures are designed to prevent unauthorized access to your personal data. We employ practices such as data encryption, limited access, and secure storage locations. We continually update and review our security measures to ensure the ongoing protection of your personal data.
You have the following rights concerning your personal data, and you can contact us/data protection officer/relevant personnel to exercise these rights:
1. Access Rights:
- You have the right to access your stored data, request a copy of your information, and ask for the transfer of your personal data that you provided to us to another data controller.
2. Objection and Restriction:
- You have the right to object to or restrict the collection, use, or disclosure of your personal data.
3. Correction and Deletion:
- You have the right to request the correction of inaccurate or incomplete data and may ask for the deletion or destruction of your data or the disclosure of the origin of your information if it was not provided by you.
4. Complaints:
- If you believe that we or our staff are processing your information not in accordance with your consent or legal rights, you have the right to file a complaint with the Personal Data Protection Committee.
5. Withdrawal of Consent:
- You have the right to withdraw your consent for the processing of your personal data at any time. However, withdrawing consent may impact our ability to provide services, subject to legal restrictions or contractual obligations.
Please note that if you withdraw consent, it may affect our ability to process your personal data for the stated purposes. Additionally, there may be limitations on your right to withdraw consent under the law or contractual agreements that provide benefits to you.
If you wish to exercise any rights under this privacy policy, please submit a written request along with supporting documents to verify your identity. If you have questions, suggestions, or complaints regarding this privacy policy, you can contact our Data Protection Officer via email at cs@passionfruitmkt.net.
The information to be included in your communication should cover:
- Full name
- Subject of inquiry
- Details of the error or issue
- Contact number and address for communication, including your email address
- Any changes to the privacy policy will be periodically reviewed and updated to align with changes in our services and operations. Your suggestions and feedback, as well as relevant legal requirements, will be considered in this process. The latest version of the policy will be published on our website at kappa.in.th to keep you informed of the guidelines we follow in protecting your personal data.
This privacy policy is effective as of June 1, 2022.
Privacy Notice for Customers or Service Users of Bangkok Sportswear
Dear Customers,
Bangkok Sportswear Limited ("the Company") values privacy and is committed to protecting your personal data ("Personal Data") in accordance with Thai laws.
This privacy notice provides details on the following:
1. Types of Personal Data Collected by the Company:
- Data provided by you to the Company regarding yourself or individuals related to your business ("you").
- Data received by the Company as you engage with its products and services.
- Data obtained from insurance or other documents.
- Customer feedback survey data.
- Data collected when participating in contests or marketing promotions.
- Data collected through the Company's website, mobile apps, and online activities.
2. How the Company Uses Your Personal Data:
- Processing data for product purchases or service requests.
- Communicating with you, including records of phone calls, letters, emails, and other forms of communication.
- Utilizing data gathered from website and mobile app usage, including cookies and other tracking mechanisms, for analysis and advertising purposes.
3. Disclosure of Personal Data by the Company:
The Company may disclose your Personal Data to third parties in certain circumstances, such as collaborating with external parties not under the Company's umbrella.
4. Options Provided by the Company:
The Company provides options for you, including how to access and update your Personal Data, as well as choices regarding data processing.
5. Your Rights Regarding Your Personal Data:
You have the right to access your data, object to or suspend data processing, request corrections, additions, deletions, or disclosure of the source of your data. You also have the right to complain to the Data Protection Committee.
6. Duration of Personal Data Storage:
The Company retains Personal Data for a period of 15 years. After this period, the Company will delete or destroy the Personal Data or render it non-identifiable.
For any questions or requests regarding your Personal Data, please contact the Company's Data Protection Officer at kappathailand@bkksw.co.th.
This Privacy Notice is effective as of June 1, 2022.
[Note: The translation is provided based on the information given. Please review the translation for accuracy and applicability to your specific context.]
|
Objectives of Processing Personal Data |
Legal Basis |
|---|---|
|
2.1 To process orders, conduct pre-delivery order verification, and handle financial transactions, including payment compensation. |
• Performance of Contract
|
|
2.2 To enhance various services such as delivery, customer assistance, efficient complaint handling, conducting surveys, and promoting sales-related activities. |
|
|
2.3 To develop the Company's online service channels for the highest quality, speed, and convenience/ |
|
|
2.4 To enable access or transfer of data within accounts, membership numbers, or personal codes through more than one device and enhance the efficiency of monitoring account access. |
|
|
2.5 To provide information on interesting topics and beneficial activities, including sales promotions. |
|
|
2.6For marketing purposes, analyzing data, digital programs, and loyalty programs. |
|
|
2.7 For participation in membership and reward programs and related activities, along with communication by the Company, its subsidiaries, affiliated companies, and business partners. |
|
|
2.8 To measure the effectiveness of the Company's marketing policies and advertising through various online media. |
|
|
2.9 To settle disputes or conflicts that may arise between the Company and you related to its services. |
|
|
2.10 For legal obligations and as necessary to achieve the Company's service objectives as the data owner. |
|
In cases where the Company relies on its legitimate interests to process Personal Data, it will carefully consider whether those interests outweigh your reasonable expectations and ensure that the benefits do not exceed what you might reasonably anticipate as the data owner.
3. Disclosure of Personal Information
The company may disclose your personal information to third parties in cases permitted by law, including the following situations:
- Necessary to comply with the terms of the agreement.
- Required by law to act (e.g., to investigate and prevent fraud, tax evasion, financial crimes, etc.).
- Necessary for legal reporting, litigation, legal rights enforcement, or legal protection.
- Done for the benefit of the business in compliance with the law (e.g., managing risks, confirming identities, providing requested services, assessing your suitability for products and/or services, internal reporting, data analysis, operational management, etc.).
Additionally, your consent may be obtained for such disclosure, and the company may disclose your personal information to the following entities:
- Subsidiaries, affiliated companies, and other companies within the group.
- Entities providing services to or working for the company, including contractors, agents, or service providers.
- Persons delegated to manage any of your benefits.
- Anyone you have made payments to or received payments from.
- Financial institutions and payment service providers.
- Persons or companies related to corporate restructuring, consolidation, merger, or acquisition activities involving the company.
- Legal and regulatory authorities, courts, supervisory agencies, auditors, or anyone appointed or requested by regulatory authorities to examine the company's operations.
- Others involved in any disputes, including disputes related to transactions.
- Anti-corruption agencies using the information to detect and prevent corruption and financial crimes and to confirm your identity.
- Persons or entities managing or acting on your behalf concerning products or services.
- Persons the company received instructions from you to disclose your personal information.
- Other business partners or affiliates of the company.
When the company discloses personal information to third parties, your data will be protected according to the third party's privacy policy, and you are encouraged to read their privacy policy for details on how they handle your information.
In the event of transferring or disclosing data to other countries, the company ensures that the destination country has adequate data protection measures comparable to those of Thailand. If additional data processing, use, or disclosure is intended beyond what is stated in this privacy notice, the company will seek your consent before proceeding.
4. Data Retention
The company will retain your personal information for the duration of your customer relationship with the company and after the termination of such relationship (e.g., after closing an account with the company, the completion of transactions, or if the company rejects your service application or if you request the termination of the company's services). The company will store personal information for an appropriate and necessary period for each type of personal data and purpose, as stipulated by the Personal Data Protection Act.
The company will retain personal information for the period specified by relevant laws or as necessary under applicable laws (e.g., business laws, financial institution laws, securities and capital market laws, anti-money laundering laws, laws on combating the financing of terrorism, laws on preventing and suppressing criminal activities related to weapons of mass destruction, accounting laws, tax laws, labor laws, and other laws that the company must comply with, both in Thailand and abroad). Additionally, the company may need to retain records from closed-circuit television cameras at main offices, branches, and/or call center voice recordings for security purposes, fraud prevention, and to investigate suspicious transactions reported by you or related parties.
In all cases, personal data will be kept secure and handled in compliance with applicable privacy laws. If the company needs to retain, use, or disclose personal information beyond what is stated in this privacy notice, the company will seek your consent before proceeding.
5. Accuracy of Your Personal Data
You are responsible for ensuring that your personal data held by the company is current, complete, and accurate. You must notify the company if there are any changes to your personal data. You can update and correct your personal data through the website, or the company may request you to periodically update your information to ensure that it is current, accurate, and complete.
6. Your Rights as a Data Subject
- Right to Withdraw Consent: You have the right to withdraw your consent for the company to process your personal data at any time. The company may continue processing your personal data if it has other legal grounds for doing so.
- Right to Access Personal Data: You have the right to request a copy of your personal data from the company.
- Right to Correct Personal Data: You have the right to request the correction of your personal data to ensure it is accurate, current, and complete.
- Right to Erase Personal Data: You have the right to request that the company deletes, destroys, or makes your personal data unidentifiable if there are no reasonable grounds for the company to continue processing your personal data. You may exercise this right along with your right to object to processing in the next point.
- Right to Object: You have the right to object to the processing of your personal data by the company, especially if the company processes your data for its legitimate interests or profiling related to marketing purposes.
- Right to Restrict Processing: You have the right to request the temporary suspension of the processing of your personal data. For example, when you want the company to correct your personal data or when you request the company to prove the necessity or legal basis for processing your personal data.
- Right to Data Portability: You have the right to request the transfer of your personal data to another party.
- Right to Lodge a Complaint: You have the right to lodge a complaint with the relevant government agency, including the Personal Data Protection Committee.
Please note that these rights are subject to certain conditions and limitations under applicable laws. If you wish to exercise any of these rights, you can contact the company directly.
Handling Complaints
If you wish to file a complaint regarding how the company processes your personal data, you can contact the company, and your request will be promptly considered. Filing a complaint with the company does not impact your rights to file a complaint with government authorities or the Personal Data Protection Committee.
7. Exceptions and Service Limitations
Linked Websites and Other Services
When the company's website or applications link to external websites or third-party sites, you acknowledge that the company does not have control over, specify, or review the privacy policies, data protection practices, or the use or processing of your data on those websites. The company is not responsible for any damages that may occur to your data on those linked websites.
8. Security of Your Personal Data
Your data is considered an asset of the company, and therefore, the company places significant importance on the security of your personal data. The company implements up-to-date physical and technical measures to safeguard the security of your personal data. The company has internal policies and controls to ensure that your personal data is not lost, intentionally destroyed, used inappropriately, disclosed, or accessed by unauthorized individuals. Employees receive training to manage personal data securely, and non-compliance may result in disciplinary actions.
9. Your Responsibilities
You are responsible for verifying the accuracy and currency of the personal data you provide to the company. You must notify the company promptly if there are any changes to your personal data. Failure to fulfill these responsibilities may result in the loss of legal rights. You are required to provide certain personal data, such as contact information and payment details, to enable the company to enter into a contract with you. Failure to provide such data may affect the effectiveness of contractual obligations.
10. Privacy Policy Amendments
The company regularly reviews and may amend this privacy policy. The latest version can be checked by referring to the date at the top of the privacy policy.
11. Contact Information
If you have concerns about the protection of your personal data or wish to exercise any rights, please contact the company through:
Data Protection Officer: Customer Service Department
Email: kappathailand@bkksw.co.th
Phone: 098-990-5500
