Personal Data Collection and Privacy Policy
Miraclebox Thailand
19/16 Narai Prab Suek Road, Pak Nam Sub-district, Mueang Samut Prakan District, Samut Prakan 10270, Thailand
We prioritize the protection of your personal data. This privacy policy explains our practices regarding the collection, use, or disclosure of personal information, including the rights of personal data owners under the Personal Data Protection Act.
Collection of Personal Data
We collect personal data directly from you through the following channels:
- Registration
- Name and surname
- Address
- Phone number
- LINE Login
- Facebook Login
- Google Login
- Apple ID Login
Types of Personal Data Collected
- Personal Information: Such as name, surname, age, date of birth, nationality, ID card number, passport, etc.
- Contact Information: Such as address, phone number, email, etc.
- Account Information: Such as user account, usage history, etc.
- Identity Verification Documents: Such as copies of ID cards, passport, etc.
- Transaction and Financial Data: Such as order history, credit card details, bank account, etc.
- Technical Data: Such as IP address, Cookie ID, website usage history (Activity Log), etc.
- Analytical Data: Such as usage behavior, e.g., Google Analytics and Facebook Pixel, etc.
- Other Data: Such as images, videos, and any other information considered personal data under the Personal Data Protection Act.
Minors
If you are under 20 years of age or have legal capacity limitations, we may need to collect, use, or disclose your personal data with the consent of your parent or guardian as permitted by law. If we become aware that personal data has been collected from a minor without parental or guardian consent, we will take steps to delete that data from our servers.
Retention of Personal Data
We will retain your personal data in both document and electronic form. We store your personal data as follows:
- On our company server in Thailand.
Processing of Personal Data
We will collect, use, or disclose your personal data for the following purposes:
- To create and manage user accounts.
- To deliver products or services.
- To improve products, services, or user experience.
- For internal management purposes.
- For marketing and promotional activities.
- For after-sales service.
- To gather feedback.
- To process payments for products or services.
- To comply with agreements and terms and conditions.
- To comply with laws and regulations of governmental agencies.
Disclosure of Personal Data
We may disclose your personal data to others with your consent or as permitted by law, as follows:
Internal Management
We may disclose your personal data within the company as necessary to improve and develop our products or services. We may aggregate internal data for various products or services under this policy for your and others’ benefit.
Service Providers
We may disclose certain personal data to our service providers as necessary to operate in various areas, such as payment processing, marketing, product or service development, etc. These service providers have their own privacy policies.
Duration of Personal Data Retention
We will retain your personal data for as long as necessary while you are a customer or have a relationship with us or for as long as necessary to fulfill the purposes related to this policy, which may require retention beyond that period if required by law. We will delete, destroy, or anonymize your data when it is no longer necessary or when that period expires.
Rights of Personal Data Owners
Under the Personal Data Protection Act, you have the right to:
- Right to Withdraw Consent: If you have given consent, we will collect, use, or disclose your personal data based on your consent prior to or after the enforcement of the Personal Data Protection Act. You have the right to withdraw your consent at any time.
- Right to Access: You have the right to access your personal data under our responsibility and request a copy of that data, including asking us how we obtained your personal data.
- Right to Data Portability: You have the right to receive your personal data in a format that can be read or used by automated tools or devices and can be used or disclosed automatically. You also have the right to request that we send or transfer your personal data in that format to another data controller when possible through automated means and request to receive the personal data we send or transfer in that format directly to another data controller, unless it is not feasible due to technical reasons.
- Right to Object: You have the right to object to the collection, use, or disclosure of your personal data at any time if the collection, use, or disclosure is conducted for the necessary operations based on our legitimate interests or those of other individuals or legal entities, to the extent that you can reasonably expect or for the performance of tasks carried out in the public interest.
- Right to Erasure/Destruction: You have the right to request the deletion or destruction of your personal data or to anonymize it if you believe your personal data has been collected, used, or disclosed unlawfully or believe we no longer need to retain it for the purposes outlined in this policy or when you have exercised your right to withdraw consent or object as mentioned above.
- Right to Restriction of Processing: You have the right to request a temporary suspension of the use of your personal data in cases where we are reviewing your request for rectification of personal data or your objection or any other case where we no longer need to delete or destroy your personal data under applicable law but you request that we suspend its use instead.
- Right to Rectification: You have the right to request correction of your personal data to be accurate, up-to-date, complete, and not misleading.
- Right to Lodge a Complaint: You have the right to file a complaint with the relevant legal authorities if you believe that the collection, use, or disclosure of your personal data is conducted in a manner that violates or does not comply with applicable law. You can exercise your rights as a personal data owner as outlined above by contacting our Data Protection Officer as detailed at the end of this policy. We will notify you of the results within 30 days from the date we receive your request, in accordance with the forms or methods we specify. If we deny your request, we will inform you of the reasons for the denial through various channels such as SMS, email, phone, or letter.
Advertising and Marketing
We may send information or newsletters to your email for the purpose of offering you items of interest. If you do not wish to receive further communications from us via email, you can click “unsubscribe” in the email link or contact us via our email.
Cookies
To enhance your user experience, we use cookies or similar technologies to improve access to products or services, relevant advertisements, and to track your usage. We use cookies to identify and track users of our website and their access to our site. If you do not wish to have cookies placed on your computer, you can set your browser to refuse cookies before using our website.
Security of Personal Data
We will maintain the security of your personal data according to the principles of:
- Confidentiality
- Integrity
- Availability
To prevent loss, access, use, alteration, modification, or disclosure, we will implement security measures covering administrative safeguards, technical safeguards, and physical safeguards regarding access or control over the use of personal data.
Notification of Personal Data Breach
In the event of a personal data breach, we will notify the Office of the Personal Data Protection Committee without delay within 72 hours from the time we become aware of the breach, as far as practicable. If the breach poses a high risk to your rights and freedoms, we will notify you of the breach along with remedial measures without delay through various channels such as our website, SMS, email, phone, or letter.
Changes to the Privacy Policy
We may revise this policy from time to time. You can learn about the terms and conditions of the revised policy through our website. This policy was last revised and is effective as of February 14, 2024.
Privacy Policy of Other Websites
This privacy policy applies only to the offering of products, services, and usage on our website for our customers. If you visit other websites, even through our website, the protection of personal data will be governed by the privacy policy of those websites, which we have no involvement in.
Contact Details
If you have any questions regarding this privacy policy, including requests for various rights, you can contact us or our Data Protection Officer at:
Personal Data Controller
Miraclebox Thailand
19/16 Narai Prab Suek Road, Pak Nam Sub-district, Mueang Samut Prakan District, Samut Prakan 10270
Email: [email protected]
Phone: 027029988
