Privacy Policy Page
Privacy Policy for Customers
888Skin Co., Ltd. places importance on protecting your personal data. This Privacy Policy explains our practices regarding the collection, use or disclosure of personal data, including the rights of personal data owners under the Personal Data Protection Act.
Personal Data Collection
We will collect personal data received directly from you through the following channels:
- First name, Last name
- Address
- Country
- Date of birth
- Membership
- Telephone
Types of personal data collected
Personal data such as first name, last name, age, date of birth, nationality, national ID number, passport, etc.
Contact information such as address, telephone number, email, etc.
Account information such as user account, usage history, etc.
Identification evidence such as copies of national ID cards, copies of passports, etc.
Transaction and financial information such as purchase history, credit card details, bank accounts, etc.
Technical information such as IP address, Cookie ID, website usage history (Activity Log), etc.
Other information such as images, animations, and any other information considered personal data under the Personal Data Protection Act.
We will collect, use or disclose sensitive personal data as follows when we have received your explicit consent. Unless required by law
- Race
Any other information that affects your personal data as announced by the Personal Data Protection Commission
Minors
If you are under 20 years of age or have limited legal capacity, we may collect, use or disclose your personal data. We may need your parent or guardian's consent or where permitted by law. If we learn that personal data has been collected from a minor without parental or guardian consent, we will take steps to delete that information from our servers.
How we keep personal data
We will keep your personal data in both paper and electronic form.
We keep your personal data as follows:
- Our company server in Thailand
- Our company server overseas
- Server providers in Thailand
- Server providers overseas
Personal data processing
We will collect, use or disclose your personal data for the following purposes:
- To create and manage user accounts
- To deliver products or services
- To improve products, services or user experiences
- For internal management
- For marketing and sales promotion
- For after-sales service
- To collect feedback
- To pay for products or services
- To comply with the Terms and Conditions
- To comply with laws and regulations of government agencies
Duration of personal data storage
We will keep your personal data for the period necessary while you are a customer or have a relationship with us or for the period necessary to achieve the purposes related to this policy, which may be required to be kept thereafter. If required by law, we will delete, destroy or anonymize your personal data when it is no longer necessary or when the period has expired.
Rights of Data Subjects
Under the Privacy Act, you have the following rights:
Right to withdraw consent. If you have given consent for us to collect, use or disclose your personal data, whether the consent was given before or after the effective date of the Privacy Act, you have the right to withdraw your consent at any time.
Right to access. You have the right to request access to your personal data held by us and to request that we provide you with a copy of it, and to disclose how we obtained your personal data.
Right to data portability. You have the right to request that we have made your personal data available in a format that is machine-readable and can be used or disclosed by automated means, and to request that we transmit or transfer your personal data in such a format to another data controller where automated means are feasible. You have the right to request that we transmit or transfer your personal data in such a format directly to another data controller, unless this is not possible for technical reasons.
Right to object. You have the right to object at any time to the collection, use or disclosure of your personal data where the collection, use or disclosure of your personal data is necessary for the performance of a task carried out in our legitimate interests or those of another person or entity. To the extent that you can reasonably expect or to carry out a task in the public interest
Right to erasure/destruction You have the right to request that your personal data be erased or destroyed or anonymized if you believe that your personal data has been collected, used or disclosed unlawfully or that we no longer need to retain it for the purposes set out in this Policy, or where you have exercised your right to withdraw your consent or object as set out above
Right to restriction of processing You have the right to request that we temporarily suspend the use of your personal data where we are investigating your request to rectify or object to your personal data or where we no longer need to erase or destroy your personal data under applicable law but you have requested us to suspend its use instead
Right to rectification You have the right to request that your personal data be corrected to be accurate, current, complete and not misleading
Right to lodge a complaint You have the right to lodge a complaint with a competent authority under applicable law if you believe that the collection, use or disclosure of your personal data is in violation of or does not comply with applicable law
You can exercise your rights as a data subject above by contacting our Data Protection Officer as detailed at the end of this Policy. We will inform you of the results of our actions within 30 days from the date we receive your request to exercise your rights, in the form or method we specify. If we reject your request, we will inform you of the reasons for rejection via various channels, such as text messages (SMS), emails, telephones, letters, etc.
Advertising and Marketing
We may send you information or newsletters via your email, with the purpose of offering you interesting things. If you no longer wish to receive communications from us via email, you can click "Unsubscribe" in the email link or contact us via our email.
Personal Tracking Technology (Cookies)
To enhance your user experience and make it more complete and efficient, we use cookies or similar technologies to develop access to our products or services, appropriate advertising, and track your usage. We use cookies to identify and track website users and their access to our website. If you do not want cookies to be stored on your computer, you can set your browser to reject cookies before using our website.
Personal Data Security
We will maintain the security of your personal data in accordance with the principles of confidentiality, integrity, and availability. (availability) This is to prevent loss, access, use, change, modification or disclosure. In addition, we will provide personal data security measures, which include administrative safeguards, technical safeguards and physical safeguards regarding access or control of personal data (access control).
Reporting a personal data breach
In the event of a personal data breach, we will notify the Personal Data Protection Committee Office without delay within 72 hours from the time we become aware of the incident, as far as practicable. In the event that the breach poses a high risk of affecting your rights and freedoms, we will notify you of the breach along with remedies without delay via various channels, such as the website, SMS, email, telephone, letter, etc.
Amendment to the Privacy Policy
We may amend this Policy from time to time. You can find out the terms and conditions of this amended Policy via our website.
This Policy was last modified and is effective from July 7, 2024.
Privacy policies of other websites
This Privacy Policy applies only to the offering of products, services and use on the website for our customers. If you visit other websites, even through our website, the protection of personal data will be in accordance with the privacy policy of that website. Which we have no involvement with.
