Privacy Notice for Customers

Kingfisher Holdings Limited and the affiliated companies (hereinafter referred to as the “Company”) attach importance and are committed to the protection of personal data of data subjects (hereinafter referred to as “Customers”) who have contacted the Company to purchase its products and services. The Company has therefore established appropriate measures to maintain the security of personal data, especially for the collection, processing, use and/or disclosure of the customers’ personal data including guidelines for compliance with the Personal Data Protection Act 2019 (B.E. 2562) and laws related to personal data. This is for customers to know and understand the protection of their personal data, thus, the Company asks customers to read this Privacy Notice for acknowledgment and understanding of the following details.

Personal data collected by the company

The Company receives the customers’ personal data and has collected and processed it in accordance with this letter of consent to the collection, processing, use and/or disclosure of personal data. The Company has collected and processed personal data as necessary for the purpose of collecting, processing, using, and/or disclosing personal data of the Company. In this regard, the types of personal data are classified as follows.

Types of personal data	Details
Basic personal data	Such as title, first name, surname, nickname, photograph, signature, ID card number, current address, e-mail, phone number, date, month and year of birth, age, marital status, credit information, video.
Data of other persons	Such as spouses, family members, customers, partners.
Technical data for applicants applying through the Company’s website	Such as data about websites and systems accesses, computer traffic data, contact information and communication between data subjects and other users, logging data such as device identifiers, computer IP address, identity number, device, device type, mobile network data, connection data, geolocation data, browser type, logs of various systems or websites accessed before and after, system log data, office time in and out log data, system access log data, transaction log data, data usage behavior, login statistics, visit times collected through cookies or other similar technologies.
Financial data	Such as bank account numbers and tax information, electronic card numbers.
Personal property identification data	Such as vehicle registration number, copy of land title deeds.
Documented information related to operations	Such as work history, professional certificate, diplomas, education information, employment information

Data Collection

1.      Personal data received directly from customers

·         Personal data, health data, financial data that customers have provided during the application process to become an employee of the Company or after. The data provided may include customer application data along with supporting documents and contact information, e.g. copy of personal ID card, house registration, various complaints submitted to the Company or its representative (if any) or the Company’s officer in a form of a letter or by electronic means.

·         Personal data provided by customers in electronic communications or at promotional events of a product, domestic and international exhibition activities, customer meeting activities, customer appreciation activities.

2.      Personal data received from a third party or other sources

·         Publicly available data or data from various agencies.

·         Data obtained from affiliates, activities, or from business partners.

·         Personal data obtained from procurement, distributor, beneficiary, heir, purchaser of goods or services or related persons who carry out transactions with the Company, such as claims from various complaints.

Data Processing Bases and Objectives

The Company will process the customer’s personal data with a scope, purposes, and using methods that are legal, transparent, and fair under the following processing bases.

1.      For the fulfillment of the contract for the purchase of the Company’s products and services or for processing requests prior to becoming a customer of the Company.

2.      For the necessity of complying with the law and for the legitimate interests of the Company which will not infringe upon the fundamental rights or freedoms of the data subject.

3.      To collect data as a company database or statistical data about the number of visitors to the website.

The Company will process the Customer’s personal data as necessary to assess the suitability of the Customer to verify the accuracy of the data provided to the Company.

Data collection objectives	Details
1.     For processing	For processing, administering, processing the distributor application, or transactions filed by the customers with the Company. This includes considering the receipt of compensation, performing and providing services relating to the compensation plan, collection of fees and other liabilities (if any), audits, analysis, processing, payments under the compensation plan including renewal, amendment, change, and termination of status and filing of claims relating to business operations, sales, or customers’ networks.
2.     For product or service management	For the management of the company’s products or services. This includes helping the Company to fulfill its obligations to its customers and to deliver related products and services as announced or agreed upon by customers purchasing products or services.
3.     To use the data for analysis	To use the data to analyze, propose, use, and improve the quality of products and services as well as promotional items for the Company’s products.
4.     For compliance with regulations	To comply with regulations or other legal requirements to carry out reviews and verification of personal data of Customers obtained from agencies or organizations such as hospitals, the Royal Thai Police or other agencies.
5.     To provide information about the service	To provide information about after-sales services to customers, including coordinating follow-up services, solving problems for customers as appropriate, such as product-related services or answering inquiries from customers.

The Company will collect, use, and disclose personal data of Customers with the consent of the customer in the event that consent is required by law. Except in cases where the Personal Data Protection Act 2019 (B.E. 2562) gives the right to collect personal data without the consent of the Customer, for example for the legitimate interests of the Company or another person or juristic person or the Company’s compliancy with the law.

In the event that personal data processed by the Company for the above purposes is data necessary for the performance of a contract or compliance with various applicable laws and the customer does not provide such necessary personal data, it may be a violation of the law and the Company may not be able to administer or manage the contract or facilitate it.

Restrictions on the use or disclosure of personal data

1.      The Company will use or disclose and display customer data only to the extent necessary for the objectives of personal data collection and will care for the personal data of customers or related persons of the Company to strictly ensure that such data will not be disclosed to or used by outsiders or third parties.

2.      The Company will not disclose or display data or make appear any other part of personal data that is inconsistent with the objectives and the extent of the consent of the Customer. The Company will maintain the confidentiality of Customers’ data except as required by law.

3.      The Company may share the customer’s personal data with Kingfisher Holdings Limited and its affiliated companies for business purposes.

Data Subject’s Rights

The rights of Customers as data subjects under the Personal Data Protection Act 2019 (B.E. 2562) are as follows:

1.      The right to be informed by being notified regarding the processing of personal data, methods of collection, to whom it will be given, reasons, and period of storage.

2.      The right to request access and obtain a copy of personal data responsible by the Company or request disclosure of the acquisition of such personal data without consent.

3.      The right to automatically obtain personal data relevant to yourself from the Company and request the transmission or transfer of personal data to the data protection officer or by automated means.

4.      The right to object to the collection, use, or disclosure of personal data related to the personal data subject.

5.      The right to request the Company to delete or destroy or make the data subject non-identifiable from the personal data.

6.      The right to request the Company to suspend the use of personal data.

7.      The right to correct personal data by requesting the Company to rectify the personal data so that it is accurate, current, complete, and not misleading.

8.      The right to withdraw the consent given to the Company for the collection, processing, use, or disclosure of personal data.

Personal data storage period

The Company will retain the customer’s personal data for as long as it is necessary for the purpose of collecting, using, and disclosing personal data set forth in this notice. The criteria used to determine the retention period include the duration that the Company has a relationship with the Customer as a customer of the Company and may continue to retain for the period necessary for the fulfillment of a law or legal term, for the establishment of a statutory claim, a legal performance or exercise of a statutory claim, or raise against legal claims, or for other reasons according to the policies and internal requirements of the Company.

Security Maintenance

The Company requires reasonable and strict measures to maintain security to prevent loss, access, destruction, use, conversion, modification of personal data or to prevent the use of personal data without rights or illegally. The Company has limited the right to access, use, or disclose the customer’s personal data to specifically relevant entities and individuals within the Company only.

Revocation of Consent

Customers, as the personal data subject, may withdraw their consent for the Company to collect, use, or disclose the above-mentioned personal data by notifying the Company and the Company may request for the reason of such request. The revocation of the personal data subject’s consent will not affect the collection, use, or disclosure of personal data that the personal data subject has previously consented to. The data subject acknowledges that the revocation may result in the Company not being able to provide services under the purchasing contract or other contracts effectively.

 

Company Contacts

Customers may contact the Company’s sales and marketing officers with questions and suggestions based on their consent for the collection, processing, use, and/or disclosure of the data or to request the exercise of the data subject’s rights at:

 

Sales and Marketing

Kingfisher Holdings Limited. No. 1, Moo 4, Banplaiklongkhru Road, Nadee Subdistrict, Mueang District, Samut Sakhon 74000; Tel: 034 419 888 ext. 124

 

Southeast Asian Packaging and Canning Limited No. 1, Moo 4, Banplaiklongkhru Road, Nadee Subdistrict, Mueang District, Samut Sakhon 74000; Tel: 034 419 888 ext. 124

 

KF Foods Limited   No. 1, Moo 4, Banplaiklongkhru Road, Nadee Subdistrict, Mueang District, Samut Sakhon 74000; Tel: 034 417 444 ext. 437

 

Data Protection Officer

Kingfisher Holdings Limited No. 1, Moo 4, Banplaiklongkhru Road, Nadee Subdistrict, Mueang District, Samut Sakhon 74000; Tel: 034 419 888 ext. 202

E-mail Address: DPO@kingfisher.co.th

 

The Company will periodically review this announcement in order to comply with relevant practices and laws. If there is any amendment, the Company will announce by disseminating it through the Company’s appropriate notice.

Announced as of May 1, 2022

Kingfisher Holdings Limited and affiliated companies