Data Protection Notice for Customers

Klongsuan Cotton Industrial Company Limited

This website www.supercatthailand.com.com is owned and run by Klongsuan Cotton Industrial Company Limited (“SUPERCAT” or “We”). At SUPERCAT, we are committed to protecting and respecting our users’ privacy (“You” or “User(s)”). This Privacy Policy explains the types of personal information we collect, how we use that information, who we share it with, and how we protect that information.

This policy (together with our terms and conditions and any other documents referred to on it) sets out the basis on which any personal information we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal information, and how we will treat it. By continuing to use this website, www.supercatthaland, you are accepting and consenting to the practices described in this policy.

Information Covered by This Policy
This policy covers all personal information collected and used by SUPERCAT. In this policy, “personal information” means information or pieces of information that could identify you. This includes information such as your name, address, username, profile pictures, or email address, but could also include information such as your IP address, or information about your preferences and shopping habits.

Personally Identifiable Information (PII) being processed by the Company for the performance of the Platform
In order to perform the required services and features defined on the website, SUPERCAT would need to collect and process the following PII from the User:
1. Directly Identifiable PII, including without limitation name, age, nationality, and date of birth
2. Contact information, including without limitation, address, phone number, and e-mail address 3. Platform transactional data, including without limitation username, password, transaction number, and history that the User transact on the Platform, including the gathered preference and interest from the Platform transactional behavior
4. Technical PII, including without limitation the IP address number, the Platform usage, setting, and web browser connection that has been connected to the Platform.

Access to Personal Data

We access users’ personal data through 2 main channels:

1. We access personal data directly from the users via the collection during the provision of service including:

User’s account registration, and the submission of application for any services
User’s subscription of any marketing and sales information including advertisement and promotion
User’s consensual agreement when filling out the survey
User’s cookies when accessing the platform
Mutual contact between users and service providers both offline and online such as email inquiries and phone calls
User’s purchase of any particular service or product
User’s log-in on both the service provider’s platform and associated sites such as Facebook and Google
2. We collect personal data of the users indirectly from the third-parties in the following cases: Facebook Login and Google Login

Data Collection Objectives

We may collect and use users’ personal data for any or all of the following purposes:

1. To perform obligations in the course of or in connection with our provision of the goods and/or services requested by the user

2. For post-sale customer services such as promotions and feedback inquiries

3. To verify the user’s identity

4. For marketing research and customer relationship optimization

5. To comply with any applicable laws, regulations, codes of practice, guidelines, or rules, or to assist in law enforcement and investigations conducted by any governmental and/or regulatory authority

6. To transfer data to any unaffiliated third parties including our third-party service providers and agents, relevant governmental and/or regulatory authorities, for the aforementioned purposes

Sharing Personal Data

We may share and disclose your personal data to third parties in the following circumstances:

1. To third-party service providers who require access to personal data in order to assist in the provision of the website, products and services, and other business-related functions such as website analytics providers or our third-party advertisement partners. These third-party service providers are limited to only accessing or using this data to provide services to us and must provide reasonable assurances they will appropriately safeguard the data.

2. We may also disclose visits information to third-parties

3. Where required by law or regulatory requirement, court order or other judicial authorization

4. In response to lawful requested by public authorities including for the purposes of meeting national security and law enforcement requirements

5. In connection with the sale, transfer, merger, bankruptcy, restructuring or other reorganization of a business

6. To protect or defend our rights interests or property, or that of third parties

7. To investigate any wrongdoing in connection with the website or service

8. To protect the vital interests of an individual

9. We may also share Personal Information collected through the Website with third party companies so that they may offer products and services that we believe will be of interest to visitors, as well as third party advertising serving companies to better target the adverts and other content displayed on the website and to provide offers we think may be interests of visitors. The unsubscription of marketing is stated in the “Personal Data and Marketing Activities” section. Personal Data Processing

After the collection of users’ personal data, we may store the data regarding the following processes:

1. Computer System including On-premise

2. We may use the collected personal data with the purposes mentioned in “Data Collection Objectives”

3. We may disclose users personal data:

To staff members under Klongsuan Cotton Industrial Company Limited in order to perform obligations in the course of or in connection with our provision of the goods and services requested by users; or
To third-party service providers, agents, and other organizations we have engaged to perform any of the functions with reference to the above-mentioned objectives and for safety purposes.
Data Storage and Data Retention

We may store users’ personal data using the following systems:

1. Users’ personal data will be saved as soft copy data stored in our computer systems.
2. Users’ personal data will be saved in the service provider’s devices, such as computers, phones, and tablets. This includes the mentioned Computer System (On-premise).
3. Data retention period will be illustrated in the “Data Retention” section below.

Data Retention Period

1.Directly Identifiable PII, including without limitation name, age, nationality, and date of birth

Period: 10 years from the contract termination date

2. Contact information, including without limitation, address, phone number, and e-mail address

Period: 10 years from the contract termination date

4. Platform transactional data, including without limitation username, password, transaction number, and history that the User transact on the Platform, including the gathered preference and interest from the Platform transactional behavior

Period: 5 years from the contract termination date

5. Technical PII, including without limitation the IP address number, the Platform usage, setting, and web browser connection that has been connected to the Platform.

Period: 5 years from the contract termination date

6. Pictures Photos voice records Medical History and Medical records

Period: 5 years from the contract termination date

Data Subject Rights

Data subjects have the following rights:

1. Right to withdraw consent: Users can withdraw their consent and request the processors to stop collecting their personal data.
2. Right of Access: Users can submit data access requests, which oblige processors to provide a copy of any personal data they hold regarding data subjects. This includes a request for a disclosure of platforms and methods from which the processors collected the data.
3. Right of Rectification: Users can request an update on inaccurate or incomplete personal data.
4. Right to Erasure: Users can request that the service provider erase their data in certain circumstances, such as when the data is no longer necessary, the data was unlawfully processed, or is no longer meeting the lawful ground for which it was collected. This includes the instance where the individual withdraws consent.
5. Right to Restriction of Processing: Users can request the service provider to limit the way their personal data is used.
6. Right to Data Portability: Users are permitted to obtain and reuse their personal data for their own purposes across different services.
7. Right to be informed: Users have the right to be notified about the collection of their personal data such as storage periods and purposes.
8. Right to Object: Users can object to the processing of personal data that is collected on the grounds of legitimate interests or the performance of a task in the interest/exercise of official authority.

You may contact our Data Protection Officer if you have any inquiries or feedback on our personal data protection policies and procedures, or if you wish to make any request, in the following manner

For full guidelines, please visit Thailand Data Protection Guideline 2.0, Ministry of Digital Economy and Society website http://www.mdes.go.th, GDPR Guideline https://gdpr.eu/, European Commission https://ec.europa.eu/.

Personal Information Request Form

In the case that you would like to manage your personal data, including:

1. Data access request
2. Data correction request
3. General Consent Withdrawal request
4. Complaint submission
Please contact our Data Protection Officer through the following details in the \"Contact Us\" section down below.

Personal Data and Marketing Activities

To optimize users’ satisfaction, we may distribute information regarding our marketing activities such as promotion, discount, and news. This also includes information related to your preferences. Users can withdraw their consents after the subscription by contacting [email protected].

What are Cookies?

Cookies are text files stored on your computer's browser directory or program data subfolders. Cookies are created when you use your browser to visit a website that uses cookies to keep track of your movements within the site. If you wish to learn more about cookies, visit https://www.allaboutcookies.org/.

How Do We Use Cookies?

1. To increase the efficiency and safety of the user’s log-in process
2. To collect user’s platform usage, content adjustments, and personal settings
3. To research an individual user’s behavior on the platform for satisfaction optimization purposes
4. To research the behavioral trend of all users in order to increase the efficiency of the platform
Types of Cookies

1. Functionality Cookies: Functionality cookies record information about choices you have made in the platform such as personal settings, languages, and fonts. This allows us to tailor our platform to you.
2. Advertising Cookies: Advertising cookies record your on-site behavior and history of sites visited. This allows us to provide you with the services, products, and advertisements that suit your preferences.
3. Strictly Necessary Cookies: These cookies are essential for you to browse the website and use its features, such as accessing secure areas of the site.
4. Performance Cookies: These are cookies used for gathering site visitors’ data anonymously, including the page that is visited most frequently on the website. This allows us to efficiently improve our platform regarding users’ preferences.
5. Third-party Cookies: These cookies will be determined by third parties such as Google Analytics

Cookies Setting

Users can disable cookies on their browsers.

Effect of Notice and Changes to Notice

This Notice applies in conjunction with any other notices, contractual clauses, and consensual clauses that apply in relation to the collection, usage, and disclosure of your personal data by us.

We may revise this notice from time to time without any prior notification. You may determine if any such revision has taken place by referring to the date on which this notice was last updated. Your continual use of our services constitutes your acknowledgment and acceptance of such changes.

Effective date:

10/09/2021

Last updated:

10/09/2021

Contact Us

Data Processor

Name: Klongsuan Cotton Industrial Company Limited

Address:

Klongsuan Cotton Industrial Company Limited 299 Moo 2 Soi Prachauthit 90 Prachauthit Road, Tambon Ban Klongsuan Amphoe Phra Samut Chedi, Samut Prakan 10290 Thailand

Email address: [email protected]