Privacy Policy
This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our website, products, and services. By using our services, you agree to this Policy.
Contents
1) Data We Collect
We collect information you provide directly and data generated when you use our services:
- Account & Identity: name, company, email, phone, shipping/billing addresses.
- Orders & RFQs: product selections, quantities, notes, attachments you upload.
- Usage & Device: IP address, browser type, pages viewed, timestamps, referrers.
- Cookies & Similar tech: necessary, preferences, analytics, and marketing cookies (see Cookies).
- Support & Communications: messages, feedback, and metadata.
We collect data from: (a) you; (b) your devices; and (c) service providers (e.g., analytics, payment, hosting).
2) How We Use Personal Data
- Provide and improve the website, products, RFQ and order processing.
- Personalize content, remember preferences, and optimize user experience.
- Measure performance and understand usage (e.g., analytics).
- Communicate about inquiries, orders, updates, and promotions (with your consent where required).
- Prevent fraud, secure our services, and comply with legal obligations.
3) Legal Bases
Where required (e.g., GDPR/PDPA), we rely on the following legal bases:
- Contract: to perform our contract with you (e.g., fulfilling RFQs/orders).
- Legitimate interests: to operate, secure, and improve our services.
- Consent: for analytics/marketing cookies and certain communications.
- Legal obligation: to comply with applicable laws and regulations.
5) International Transfers
Your information may be processed in countries other than your own. Where required, we use appropriate safeguards (e.g., standard contractual clauses) to protect your data.
6) Data Retention
We retain personal data only as long as necessary for the purposes described here, and as required by law (e.g., tax, accounting). Retention periods may differ by data category and legal requirements.
7) Your Rights & Choices
- Access, correction, deletion, portability: you can request a copy, fix inaccuracies, or ask us to delete where permitted.
- Restriction & objection: you may request to limit or object to certain processing.
- Withdraw consent: you can withdraw consent at any time for activities based on consent.
- Marketing choices: you can unsubscribe or change preferences in our emails.
- Cookie choices: use Manage Cookies or your browser settings.
To exercise rights, contact us at [email protected]. We may verify your identity before responding.
9) Security
We implement technical and organizational measures designed to protect personal information (e.g., encryption in transit, access controls). No method of transmission or storage is fully secure; we cannot guarantee absolute security.
10) Children’s Privacy
Our services are not directed to children under the age required by local law. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us to request deletion.
11) Third-Party Services
- Analytics: Google Analytics (data aggregated to measure usage).
- Email delivery: Transactional/notification emails.
- Hosting & infrastructure: Cloud/servers that store and process data.
- Payment & logistics: Providers involved in order processing and delivery.
These providers process data on our behalf under appropriate contracts and safeguards.
12) Changes to This Policy
We may update this Policy from time to time. The “Last updated” date above reflects the latest changes. If changes are material, we may provide additional notice.
13) Contact Us
If you have questions or requests, contact our privacy team:
- Email: [email protected]
- Phone: +66 86-091-6843
- Address: 300 Soi 5 C, Phraeksa, Samut Prakan 10280, Thailand
14) Jurisdiction-Specific Disclosures
Thailand (PDPA)
Under the Thailand PDPA, you have rights to access, correct, delete, and object to processing, as well as to withdraw consent. You may contact us or our DPO to exercise these rights. We will respond within timelines required by PDPA.
EEA/UK (GDPR)
If GDPR applies, you have rights including access, rectification, erasure, restriction, portability, and objection. You may lodge a complaint with your local supervisory authority.
California (CCPA/CPRA)
California residents have rights to know, delete, correct, and opt out of “sale” or “sharing” for cross-context behavioral advertising. We do not sell personal information. To manage cookie-based sharing, use Manage Cookies.