Privacy Notice for Customer
Salus Bioceutical (Thailand) Co., Ltd.
In accordance with the Personal Data Protection Act B.E. 2562 (2019) and other applicable laws, including any subsequent amendments thereto, Salus Bioceutical (Thailand) Co., Ltd. (“Company”)
has implemented this Privacy Notice. This document sets forth the Company’s practices regarding the collection, use, disclosure, and handling of personal data that may directly or indirectly identify individuals, including automated and non-automated processing methods for data accessibility, organization, modification, retrieval, transmission, dissemination, combination, restriction, deletion, or destruction (“Notice”).
The Company has established this Notice for website users to protect the privacy of individuals who visit, use, or purchase products through the Company’s website. This Notice may be subject to periodic updates, with all modifications being published on this website.
SCOPE
This Notice governs the Company’s handling of personal data received or collected as a result of your visiting, using, or purchasing products through this website. For purposes of this Notice, personal data shall be defined as any information enabling direct or indirect identification of natural persons, excluding information pertaining to deceased individuals. Such information includes but is not limited to, names, ages, gender, nationality, identification numbers, addresses, and contact information. The scope of this Notice specifically excludes third-party websites linked to or from the Company’s website, and users are advised to refer to the respective privacy policies of such third-party websites.
CATEGORIES OF INDIVIDUALS WHOSE PERSONAL DATA IS COLLECTED BY THE COMPANY
Under this Notice, the categories of individuals whose personal data is collected and processed by the Company comprise:
1. “Customers” refers to individuals who purchase products and/or use services from the Company, and/or may purchase products and/or use services from the Company, or any other persons of similar nature, including but not limited to activity participants, website users, application users, or those who contact for information or services from the Company and its affiliates.
2. “Customer–Related Persons” refers to individuals related to or representing customers, including but not limited to executives, directors, employees, agents, or any personnel of customers who are juristic persons, and includes persons whose personal data appears in various related documents, such as managers, purchasers, recipients, and authorized signatories.
METHODS OF PERSONAL DATA COLLECTION
The Company collects and receives your personal data through various channels as follows:
1.Personal data that you provide directly to the Company, such as:
- When you communicate, inquire, provide feedback or comments to the Company, whether in written or verbal form, through websites, applications, telephone, email, fax, mail, direct meetings, or by any other means
- When you express intent to purchase products or use services from the Company, enter into sales contracts with the Company, or submit various documents containing personal data to the Company
- When you participate in marketing activities, lucky draws, events, or other activities organized by or on behalf of the Company
2.Personal data that the Company receives from third parties, such as:
- Collection from various service providers of the Company, such as website service providers, application providers, e-commerce platform providers, call center service providers, public relations and product/service recommendation providers, and data collection service providers
- In some cases, the Company may collect your personal data from public sources, sources about your business, or commercial sources, whether you disclose the personal data yourself or have given consent to anyone to disclose such personal data
PERSONAL DATA COLLECTED
Your personal data collected and processed under this Notice, whether provided directly to the Company, collected automatically, or received from third parties, includes:
- Personal information such as name, surname, nickname, date/month/year of birth, age, gender, national ID number, photograph, signatures.
- Contact information such as ID card address, house registration address, delivery address, billing address, telephone number, fax, email, Line ID, and emergency contact information.
- Customer business information such as details about the customer’s store or establishment (e.g., name, registration number, location, and contact information).
- Transaction information such as customer code, order details (e.g., desired products, quantity, and quality), and product complaint details (e.g., order date, product type, related branch, and issues found).
- Payment information such as amount, credit limit, payment terms, account number, personal data appearing on invoices, tax invoices, receipts, payment vouchers, and direct debit forms.
- Documentation used as evidence for customer registration or various transactions such as personal data appearing in copies of ID cards, house registration, name change certificates, commercial registration, factory licenses, registration forms, land title deed copies, customer account opening forms, power of attorney, company certification copies, Por.Por. 09/20, maps, security documents (if any) (such as bank guarantees and personal guarantees), sales contracts or other transaction-related contracts, and delivery notes.
- Other information such as product purchasing behavior or trends, voice recordings of conversations, and still and motion picture recordings.
PURPOSES OF PERSONAL DATA COLLECTION, USE, AND DISCLOSURE
- For the purpose of customer registration or account opening, or other similar persons, or using information for customer identity verification.
- For the purpose of analyzing data and surveying the behavior of customers or other similar persons.
- For the purpose of contract execution and product ordering.
- For the purpose of managing customer orders or other similar persons.
- For the purpose of preparing products and/or services and conducting other related operations.
- For the purpose of modifying customer details in the Company’s system.
- For the purpose of receiving complaints from customers, customer-related persons, or other similar persons.
- For the purpose of public relations, offering products and services, including marketing activities of the Company and its affiliates.
- For the purpose of analyzing website, application, or other channel usage to improve the Company’s service quality or for marketing purposes.
- For the purpose of communicating with customers or other similar persons.
- For the purpose of complying with laws related to the Company’s business and lawful orders from government agencies and relevant officials
- For the purpose of claiming legal rights, complying with or exercising legal claims, or raising defenses against the Company’s claims.
- For any operations necessary and beneficial to you, or directly related to any of the above-stated purposes.
COOKIES
The Company may collect and use cookies and other similar technologies on websites under the Company’s supervision or on your devices according to the services you use. This is for security purposes in providing the Company’s services and to ensure that you, as a user, receive convenience and a good experience in using the Company’s services. This information will be used to improve the Company’s website to better meet your needs. You can set up or delete cookies yourself through your web browser settings.
TRANSFER AND DISCLOSURE OF PERSONAL DATA
The Company shall not disclose and transfer your personal data to external parties unless explicit consent is received from you or in the following cases:
- To achieve the purposes stated in this Notice, the Company may need to disclose or share only necessary information with partners, service providers, or external agencies. The Company shall establish personal data processing agreements as required by law.
- The Company may disclose or share personal data with affiliated companies, which will be processed only under the purposes stated in this privacy policy.
- When required by law or legal process to disclose information, or disclosure to government officers, officials, or authorized agencies to comply with lawful orders or requests.
PERSONAL DATA RETENTION PERIOD
The Company shall retain your personal data only for as long as necessary for collection purposes as detailed in the policy, notice, or as required by relevant laws. When the retention period expires and your personal data is no longer necessary for these purposes, the Company shall delete, destroy, or make your personal data unidentifiable according to personal data deletion and destruction standards. However, in case of disputes, exercise of rights, or legal proceedings related to your personal data, the Company reserves the right to retain such data until the dispute is resolved or a final order or judgment is rendered.
PERSONAL DATA PROTECTION
The Company shall implement appropriate technical and administrative measures to protect and maintain the security of your personal data, including encryption for data transmission over the internet and controlling access to your personal data only by relevant persons, both for data stored in documents and electronic forms.
YOUR RIGHTS
You may exercise various rights as prescribed by law and as specified in this Notice as follows:
- Right to withdraw consent: You have the right to withdraw your consent at any time unless otherwise specified by law. The withdrawal of such consent shall not affect the lawful processing of personal data based on consent given before its withdrawal.
- Right to erasure or destruction: You have the right to request the Company to erase or destroy your personal data that is in the Company’s possession or control, or render it unidentifiable.
- Right to data portability: You have the right to request the Company to transfer your personal data in a format that is readable or commonly usable by automated tools or devices to other personal data controllers, subject to legal exemptions.
- Right to object: You have the right to object to the collection, use, or disclosure of your personal data, or request the Company to suspend the use of such personal data. The Company shall proceed with the request in accordance with relevant legal provisions.
- Right to temporary suspension: Right to restrict processing – You have the right to request the Company to restrict processing, where the data controller can continue to store personal data but cannot process it further without your consent or except as legally exempted.
- Right to access: You have the right to access and obtain copies of your personal data. The Company shall process your request within 30 days from the receipt date unless otherwise specified by law.
- Right to rectification: You have the right to request the Company to ensure your personal data is accurate, complete, and current. In all operational steps, the Company shall verify as much as possible to ensure that users’ personal data is accurate, complete, and current.
- Right to complaint: You have the right to complain to officials or supervisory authorities regarding personal data protection if you find that the Company or its personnel use or disclose your data not in accordance with your consent or not in accordance with legal processing rights. You have the right to complain to the Personal Data Protection Committee.
HOW TO CONTACT US
If you have any questions, suggestions, or concerns about the Company’s collection, use, and disclosure of personal data or about this policy, or if you wish to exercise your rights under personal data protection law, you can contact: