Privacy Policy

Introduction

Hawook Co., Ltd. recognizes the importance of protecting your personal data. This Privacy Policy outlines our practices regarding the collection, use, and disclosure of personal data, as well as the rights of data subjects in accordance with the Personal Data Protection Laws. 

Collection of Personal Data

We collect your personal data directly from you through the following means:

• Account registration
• Telephone
• Email address
• Facebook Login
• Google Login

Types of Data Collected

We may collect the following types of personal data:

• Personal Information: Name, surname, age, date of birth, nationality, identification card, passport, etc.
• Contact Information: Address, telephone number, email address, etc.
• Account Details: Username, password, transaction history, etc.
• Technical Data: IP address, Cookie ID, activity log, etc.
• Other Information: Photos, videos, and any other information considered personal data under the Personal Data Protection Laws.

Children

If you are under the age of 20 or have legal restrictions, we may collect, use, or disclose your personal data with the consent of your parents or guardians, or as allowed by applicable laws. If we discover that we have collected personal data from children without parental consent, we will take steps to remove that information from our servers.

Storage of Data

Your personal data is stored in both hard copy and electronic formats, using the following systems:

• Our server located outside of Thailand

Use of Data

We use the collected data for various purposes, including:

• Internal information sharing and management
• Conducting marketing activities and promotions
• Providing after-sales services
• Gathering user feedback
• Complying with our Terms and Conditions

Data Retention

We retain your personal data for as long as necessary while you are a customer or have an ongoing relationship with us, or as required by law. We will erase, destroy, or anonymize your personal data when it is no longer needed or when the retention period has expired.

Data Subject Rights

Under the Personal Data Protection Laws, you have the following rights:

• Withdrawal of Consent: You can withdraw your consent for us to collect, use, or disclose your personal data at any time, subject to legal restrictions or ongoing beneficial contracts.
• Data Access: You can request access to your personal data, a copy of it, and information on how we obtained it.
• Data Portability: You have the right to receive your personal data in a machine-readable format and request its transfer to another data controller, if technically feasible.
• Objection: You can object to the collection, use, or disclosure of your personal data under certain conditions.
• Data Erasure/Destruction: You can request the deletion, destruction, or anonymization of your personal data if it is no longer needed, or if it was collected unlawfully.
• Suspension: You can request the suspension of processing your personal data under specific circumstances.
• Rectification: You have the right to correct any inaccurate or incomplete personal data.
• Complaint Lodging: You can file a complaint with the relevant authorities if you believe your personal data has been mishandled.

You can exercise these rights by contacting our Data Protection Officer. We will respond to your request within 30 days. If your request is denied, we will provide the reason via SMS, email, telephone, or registered mail (if applicable).

Advertising and Marketing

We may send you information or newsletters based on your preferences via email. If you no longer wish to receive these communications, you can unsubscribe using the link in the email or by contacting us directly.

Cookies

We use cookies and similar technologies to enhance your experience, display personalized content, and store your preferences. Cookies help us identify and track visitors, their usage of our website, and their access preferences. You can set your browser to refuse cookies before using our website.

Data Security

We implement security measures to protect your personal data, ensuring confidentiality, integrity, and availability. This includes administrative, technical, and physical safeguards and access controls.

Data Breach Notification

We will notify the Office of the Personal Data Protection Committee and, where applicable, you within 72 hours of becoming aware of a data breach, unless it is unlikely to pose a risk to your rights and freedoms.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We encourage you to review our website regularly for any changes. This Privacy Policy was last updated and is effective as of July 4, 2024.

Links to Other Sites

Our Privacy Policy applies only to our website. If you follow links to other websites, their privacy policies will apply, and we are not responsible for their practices.