- Nitori Retail (Thailand) Co., Ltd. Privacy Policy
Nitori Retail (Thailand) Co., Ltd. (“Company”) as a subsidiary of Nitori Group Always recognizes its responsibility to handle personal information collected from customers and others with care, caution and observation. Therefore has prepared and published this privacy policy (“Policy”) and the company has continuously developed the management and protection of personal information.
Nitori Retail (Thailand) Co., Ltd.
A. Privacy Policy
B. Handling the purposes of processing personal data
C. Cookies
A. Privacy Policy
1. Compliance with relevant laws and guidelines
The company confirms that it has complied with the Personal Data Protection Act B.E. 2562 ("Act") and other laws. Including instructions related to the storage, processing and handling of personal data appropriately according to the Act.
“Personal Data Subject” in relation to Personal Data in accordance with this Policy. Including other terms of the company means only those persons whose personal data can be directly or indirectly identified.
2. Purpose of data processing
The company has specified the purpose of data processing. (hereinafter referred to as “Purpose of Data Processing”) and process your personal data to the extent necessary to achieve such purposes. The details are in accordance with the handling of personal data processing purposes. (Refer to clause b, handling of personal data processing purposes)
3. Amendment to management of personal data processing purposes
The Company may amend or change the purposes for which the above personal data is processed as appropriate. The company will inform you by notifying through public channels on the company's website. or other channels as appropriate
4. Handling of data according to the purpose of data processing
The Company handles personal data as necessary to achieve the purpose of processing personal data. When personal data is processed for other purposes The company will request consent from the owner of personal data or refer to other legal bases according to the Act.
5. Legal bases for processing personal data
Legal bases for processing personal data include:
(i) contract basis, where the data processing is necessary for the performance of a contract between you and the Company in accordance with Section 24(3) Act;
(ii) legitimate interest base When the Company, as a data controller, has a legitimacy in processing your personal data in accordance with Section 24(5) of the Act.
(iii) Legal Compliance. When the company needs to process data in order to comply with the law according to Section 24(6) of the Act
(iv) Consent Base When it is necessary to comply with the law in obtaining consent before data processing according to Section 19 Act
The owner of the personal data has the right to withdraw the consent that you have given to the company at any time through the channels notified at the time the company requests your consent. However, the withdrawal of consent will not affect the data processing that was performed prior to the withdrawal of consent.
6. Collection of Personal Information
The company collects your personal data appropriately and in accordance with the Act.
7. Sensitive Personal Data
The company may collect sensitive personal data according to Section 26 of the Act, in which the company will request your explicit consent before or during the collection, use or disclosure of such sensitive personal data. However, the Company may not obtain consent if the processing of personal data is based on the following exemptions.
(i) to prevent or suppress a danger to the life, body or health of an individual whose personal data subject is unable to give consent; for any reason
(ii) It is a legitimate activity with appropriate protection of a foundation, association or non-profit organization with political, religious, philosophical or trade union objectives to its members, who are former members. or who have regular contact with a foundation, association or non-profit organization for such purposes without disclosing such personal information outside the association or non-profit organization
(iii) necessary for the formation of legal claims. Compliance with or exercising legal claims or raising up against legal claims
(iv) it is necessary to comply with the law in order to achieve the objectives relating to
- Preventive Medicine or Occupational Medicine Assessment of employees' ability to work medical diagnosis Providing health or social services medical treatment health management or systems and services of social welfare. According to the law and personal data is the responsibility of a professional or professional or a person who has a duty to keep that personal data confidential by law must comply with the contract between the owner of the personal data and a medical professional.
- public health benefits, such as health protection from dangerous communicable diseases or epidemics that may be contagious or spread into the Kingdom or controlling the standard or quality of medicines, medical supplies or medical devices which has provided appropriate and specific measures to protect the rights and freedoms of the data subjects, especially the confidentiality of personal data according to their duties or professional ethics
- labor protection social security National Health Insurance Welfare relating to medical treatment of persons with legal rights Protection for car accident victims or social protection where the collection of personal data is necessary to fulfill the rights or obligations of the data controller or data subject. Appropriate measures have been put in place to protect the fundamental rights and interests of the data subjects.
- Scientific research studies history, statistics or other public interest However, it must be done to achieve such objectives only as necessary and appropriate measures have been provided to protect the fundamental rights and interests of the data subjects. As announced by the committee
- Important public interest by providing appropriate measures to protect the fundamental rights and interests of the data subject.
8. Accuracy and storage period of personal data
The Company keeps accurate and up-to-date records of personal data subject to the processing of personal data for the necessary purposes. The Company will retain your Personal Data for the period necessary for the purpose of collection, use or disclosure of Personal Data specified in this policy. The criteria used to determine the retention period are the period of time that the company has a relationship with you. and may continue to keep for the period necessary to comply with the law or the legal statute of limitations. for the establishment, compliance or exercise of legal claims including raising up against legal claims or for other reasons according to the company's internal policies and requirements The company would like to clarify that the storage of personal data after the expiration of the personal data storage period can be done only when it is necessary. At the end of the storage period of personal data or personal data is no longer necessary. The company will destroy or delete your information from the system.
9. Personal Data Protection Measures
The Company has put in place appropriate and strict security measures to maintain the security of personal information to prevent loss, access, use, change, modification or disclosure of personal information without authorization or abuse.
10. Company Personnel Control
The company has supervised the operations of its personnel and has always organized training to educate about the security of personal information.
11. Third Party Control
In the event that the Company employs or assigns a third party to process personal data in whole or in part in order to deliver, maintain and secure personal data in accordance with the purposes of such data processing. The Company has appropriately selected third parties who can process your personal data. and have adequate personal data protection measures Including maintaining the confidentiality of information according to the terms and conditions of the company. There are contracts relating to the protection of personal data to control such third parties.
12. Disclosure of Personal Information
The company discloses the personal information of the data subject to the following third parties. in accordance with the objectives specified in the policy and for business purposes and development of the company's services under the Act The company will clarify and request consent from the data subject if necessary according to the Act.
- parent company
- companies in the group Affiliates
- insurance company
- agents, service providers and/or sub-contractors For any operations such as transport companies, repair or maintenance companies information company auditors, lawyers, legal and tax advisors, etc.
- government agencies regulator or other agencies as required by law Including officials who exercise legal power
13. Disclosure or International Transfer of Personal Data
In disclosing or forwarding the above personal information Your personal information may be disclosed or transferred to the following foreign countries. And such recipient country may not have adequate personal data protection measures as announced by the Personal Data Protection Committee.
- Japan
- Malaysia
- Singapore
When your personal information is transferred overseas The company will take necessary measures such as preparing a letter of agreement between business affiliates or a data processing contract as appropriate, etc., so that the data receiving company is responsible for the use and processing of your personal data in accordance with the laws and regulations. be fair to comply with the Act If the receiving country does not have adequate personal data protection measures The company will ask for consent from the data owner before disclosing your personal data. If you would like to receive a copy of the documents relating to the personal data protection measures, please contact the company through the channels listed below in this policy.
14. Provisions for Overseas Third Parties
The Company will obtain consent from the data subject before disclosing the data subject's personal data to overseas third parties. except in the following cases
(i) Compliance with the law
(ii) it is necessary for the performance of a contract to which the personal data subject is a party; or To be used to process the request of the owner of the personal data before entering into that contract.
(iii) is an act of contract between the Personal Data Controller and another person or entity for the benefit of the Personal Data Owner.
(iv) to prevent or suppress harm to the life, body or health of the Personal Data Subject or other persons; When the subject of personal data is unable to give consent at that time
(v) Necessary for the performance of an important public interest mission.
15. Certification of the recording of personal data
The company hereby certifies that the collection of your personal information is appropriate and in accordance with the Act, including other recommended guidelines. To exchange personal information with third parties
16. Rights of personal data subjects
You have the right under the Personal Data Protection Act to proceed as follows:
- Right to withdraw consent You have the right to withdraw the consent given to the Company. to collect, use or disclose personal information at any time Unless the revocation of consent is limited by law or contractual benefit to you, the withdrawal of consent will not affect the processing of personal data that you have previously lawfully consented to.
- the right to obtain a copy of the personal data processing You have the right to obtain a copy of your personal data which is under the Company's responsibility. Including requesting the company to disclose the acquisition of such personal data that you do not give consent
- Right to access personal data You have the right to access a copy of your personal data which is under the responsibility of the Company. including information about the processing of your personal data
- Right to request rectification and deletion of personal information You have the right to request the Company to correct your Personal Data so that such Personal Data is accurate, current, complete and not misleading. And you have the right to request the company to delete or destroy or make your personal data non-identifiable for reasons required by law.
- The right to suspend the use of personal information You have the right to ask the Company to suspend the use of your information for reasons required by law.
- Right to object to the processing of personal data You have the right to object to the processing of your personal data in the event of collection, use or disclosure of personal data as required by law.
- The right to send or transfer personal data In the event that the Company has made such personal information in a readable or generally usable format by means of automated tools or devices and can use or disclose personal information by automated means. You have the right to obtain your personal data from the Company. Including having the right to request the Company to send or transfer personal data in such form to other data controllers as required by law.
- Right to complain You have the right to complain to the competent authority under the Personal Data Protection Law when the Company violates or fails to comply with the Personal Data Protection Law.
If you wish to exercise the rights mentioned above Please contact us via the contact methods listed below in this policy.
Policy correction
In the event that this policy is amended or changed under applicable laws or guidelines The Company will inform you through the Company's website or by e-mail (if necessary).
Contact:
Nitori Retail (Thailand) Co., Ltd.
Address:
No. 2 Jasmine Building,12th Floor, Room 19 Soi Prasammitr (Sukhumvit 23) Road, Sukhumvit Sub-District, North Klongtoey District, Wattana Province, Bangkok 10110 Thailand
Contact no.: 02-253-2077
Email:
[nrt_ec-inquiry@nitori.co.th]
The Company has appointed personal data protection officers through the following contact channels.
Mr. Taichi Ito
Address:
No. 2 Jasmine Building,12th Floor, Room 19 Soi Prasammitr (Sukhumvit 23) Road, Sukhumvit Sub-District, North Klongtoey District, Wattana Province, Bangkok 10110 Thailand
Contact no.: 02-253-2077
Email:
[nrt_ec-inquiry@nitori.co.th]
B. Handling the purposes of processing personal data
customer personal information
1. Purpose of processing
・To prepare contracts for products and post-contract management Including the management of after-sales service.
・ To sell products and provide services
・ To transport products
・ To release new products
・ To register or withdraw membership
・ To consult, contact, and answer questions
・ To communicate about handling of problematic products or returned products.
・ To announce or notify about products, services, or events.
・ To develop products and conduct a satisfaction questionnaire
・ To inform product details
・ To communicate about business or training
・ To control entrance to buildings and premises as well as to monitor, prevent, hinder and (where necessary) detect unauthorized access to buildings and premises. To secure the company's buildings and premises through CCTV systems.
・ To comply with laws, regulations, or orders issued by government agencies. or government officials
・ To accept payments for goods and services
Personal data collected
・First name, last name
・age
・sex
・address
・Phone number / personal phone number
・E-mail address
・photograph
・Member number and username
・CCTV recording footage
・Spending history
・Payment information such as bank account information credit card information
Source of personal information from the data owner
C. Cookie
We use cookie and similar devices to provide you with product recommendations and improve our services to you, to be able to show you advertisements in accordance with your browsing habits. The use of Cookie may sometimes contain personal data processing, you can consult our Privacy Policy, if you would like information on how we use the personal data of our customers and users, how to exercise your rights, or the terminology we use to refer to Online site and Physical Stores. We may also collect other data which may be collected via conventional internet technologies and use such data for analysis.
Cookie is a small text file that a website, app, or other platform stores on your computer, tablet, smartphone, or any other similar device, containing information on your browsing and use, like a tag that identifies your device. Cookie are necessary, for example, to facilitate browsing and understand how users interact with platforms so they can be improved. They are also useful to provide advertising according to user preferences, as well as for other purposes detailed below. Cookie do not damage your computer or device.
In any case, the Cookie we use never store sensitive information such as passwords, credit or debit card details, etc
Most Internet browsers allow you to control whether to accept cookies, or you can download 3rd party “extensions” which give you precise control of your cookies. Due to the nature of some cookies, rejecting, removing, or blocking these cookies can affect your user experience and may block your ability to use some or all of the features or areas of our Website. If you would like to delete any cookies or if you change your mind, please refer to your browser’s settings or options page, or search for instructions using your favorite search engine. For major Internet browsers settings, please refer to these links:
• Google Chrome
• Safari
• Microsoft Edge
• Mozilla Firefox
Because applications do not run in a browser, the way to control the data shared is different, and different by your phone brand, model, or software. The two most common phone software, iOS and Android, have tools to enable you to control what is shared by apps, at an individual app level. Please refer to the settings of your phone to understand what control is available to you.
Details of cookies from third parties and the information obtained will be handled in accordance with the applicable third party’s privacy policy. If you wish to invalidate advertisement deliveries via the cookies of contractors, please invalidate them from the site of the relevant company below: GoogleAnalytics／LINE／Meta／Shopify
The information stored on our Platform's Cookie is only used by us and third parties who offer it the necessary technology (for example, Cookie, pixels, etc) to use these services. Which are used and managed by external entities to provide us services aimed at improving our services and the user experience when browsing on our Platform. More information in the Cookie settings panel is available at all times on our Platform. For more detailed information on how we process your personal data in collaboration with third parties and on data subject to international data transfers, please read our Privacy Policy, available on our Platform, and the privacy policies/privacy settings of these third-party collaborators, available on their platforms.