Privacy Policy for Customers

UNI Holding Co., Ltd. prioritizes the protection of your personal data. This privacy policy explains our practices regarding the collection, use, and disclosure of personal data, as well as the rights of data subjects under data protection laws.

Collection of Personal Data
We collect personal data directly from you through the following channels:

Types of Personal Data Collected
• Personal data such as name, surname, age, date of birth, nationality, ID number, passport, etc. Contact information such as address, phone number, email, etc. Account information such as user accounts, usage history, etc. Identity verification documents such as copies of ID cards, passport copies, etc. Transaction and financial data such as purchase history, credit card details, bank accounts, etc. Technical data such as IP address, Cookie ID, website usage history (Activity Log), etc. Analytical data such as usage behavior, for example, Google Analytics and Facebook Pixel data. Other data such as images, videos, and any other data considered personal data under data protection laws.
• Minor: If you are under 20 years old or have legal restrictions, we may collect, use, or disclose your personal information. We may need your parents' or guardians' consent or as permitted by law. If we become aware of the collection of personal information from minors without parental consent, we will take steps to delete that information from our servers.

Data Retention
We retain your personal data in both physical and electronic formats.

We retain your personal data in the following locations:
1. Servers located within our company premises in Thailand.

Processing of Personal Data
We collect, use, or disclose your personal data for the following purposes:
• Creating and managing user accounts.
• Delivering products or services.
• Improving products, services, or user experiences.
• Internal management within the company.
• Marketing and sales promotions.
• Post-sales services.
• Gathering feedback.
• Processing payments for products or services.
• Compliance with terms and conditions.
• Compliance with laws and regulations of governmental agencies.

Disclosure of Personal Information
We may disclose your personal information to others with your consent or as permitted by law, including but not limited to:

Internal Management
We may disclose your personal information within the company as necessary to improve and develop our products or services. We may aggregate data internally for various products or services under this policy for the benefit of you and others.

Service Providers
We may disclose some of your personal information to our service providers as necessary to operate in various areas such as payment processing, marketing, product or service development, etc. These service providers have their own privacy policies.

Retention Period of Personal Data
We will retain your personal information for as long as necessary while you are a customer or have a relationship with us or for the period necessary to achieve the purposes related to this policy, which may require retention thereafter if required by law. We will delete, destroy, or anonymize your data when it is no longer necessary or at the end of the aforementioned period.

Owner's Rights of Personal Data
Under data protection laws, you have the following rights:

If you consent, we will collect, use, or disclose your personal data, whether it is consent given prior to the effective date of the personal data protection law or thereafter. You have the right to withdraw your consent at any time. Right to Access: You have the right to access your personal data under our responsibility and request us to provide you with copies of such data, including requesting us to disclose how we obtained your personal data. Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to request us to transmit or transfer such data to another data controller when it can be done automatically. Right to Object: You have the right to object to the collection, use, or disclosure of your personal data at any time, except when such collection, use, or disclosure is necessary for the performance of tasks carried out in the public interest. Right to Erasure/Destruction: You have the right to request the deletion or destruction of your personal data or to make your personal data unidentifiable if you believe that your personal data has been collected, used, or disclosed unlawfully, or when we no longer need to retain it for the purposes outlined in this policy, or after you have exercised your right to withdraw consent or object as stated above. Right to Restriction of Processing: You have the right to request a temporary suspension of the use of your personal data while we are reviewing your request to exercise your rights to correct your personal data, object to it, or in other cases where it is unnecessary and we are obliged to delete or destroy your personal data under relevant laws, but you request us to suspend its use instead. Right to Rectification: You have the right to request the correction of your personal data to be accurate, up-to-date, complete, and not misleading. Right to Lodge a Complaint: You have the right to lodge a complaint with the relevant legal authority if you believe that the collection, use, or disclosure of your personal data is in violation of or not in compliance with the relevant laws.

You can exercise your rights as the owner of personal data mentioned above by contacting our data protection officer. We will respond to your requests within 30 days from the date we receive your request, through the channels specified by us. If we refuse your request, we will notify you of the reasons for the refusal through various channels such as SMS, email, phone, or mail.

Advertising and Marketing
We may send information or newsletters to your email with the aim of offering you relevant products or services. If you no longer wish to receive communications from us via email, you can unsubscribe through the email link or contact us directly.

Personal Data Tracking Technology (Cookies)
To enhance your user experience and improve the efficiency of our website, we use cookies or similar technologies to develop access to products or services, relevant advertisements, and track your usage. If you do not want cookies on your computer, you can set your browser to reject cookies before using our website.

Ensuring Data Security
We will maintain the security of your personal data in accordance with confidentiality, integrity, and availability principles to prevent loss, unauthorized access, use, alteration, modification, or disclosure. We will implement security measures covering administrative, technical, and physical safeguards for access control.

Notification of Data Breaches
In the event of a data breach involving your personal data, we will notify the relevant data protection authority within 72 hours from when we become aware of the breach. If the breach poses a high risk to your rights and freedoms, we will notify you promptly and provide mitigation measures through various channels such as website, SMS, email, phone, or mail.

Policy Amendments
We may amend this policy periodically. You can be informed of the terms and conditions of the amended policy through our website. This policy is effective from October 23, 2023.

Privacy Policy of Other Websites
This privacy policy applies only to offering products, services, and usage on our website for our customers. If you visit other websites, even if redirected from our website, data protection will be governed by the privacy policy of that website, which we are not responsible for.

Contact Details
If you have any inquiries about this privacy policy or wish to exercise your rights, you can contact us or our data protection officer at the following:

Data Controller:
UNI Holding Company Limited
6/8 Moo 7, Lam Phak Chi, Nong Chok, Bangkok 10530
Email: [email protected]
Phone: 0-2186-0004-7