Privacy Policy

Pataya Food Group (hereinafter referred to as "PFG", "We") strongly believe in ethical business operations and respect your privacy. Therefore, we place importance on personal data protection and security. To ensure that your personal data obtained by the company will be used in accordance with the objectives and the law, we have determined this personal data protection policy ("Privacy Policy") to inform you, as the personal data owner, of the objectives and details of collection, usage, and/or disclosure of your personal data, as well as your other legal rights.

1. Which of your personal data will be collected, used or disclosed?

Personal data to be collected, used and disclosed (including sensitive personal data as defined in Personal Data Protection Act, B.E. 2562 (2019) and its future amendments and other subordinate laws issued under Personal Data Protection Act, B.E. 2562 (2019), hereinafter collectively referred to as "Law") include the following data:

1.1 Personal data means the data that can identify yourself, whether directly or indirectly, which include:

Type or data	Personal data we may collect, use and/or disclose
Personal data	• Title, first name, middle name, family name, pseudonym   (if any)
	• Sex, date of birth, age
	• Nationality, country of residence
	• Identification data issued by government authorities or   any other data which is necessary for us to check or   know about clients, authentication, verification to   prevent frauds
	• Other personal data you may give us through website
Contact data	• Address indicated in important documents, current address,   position, and workplace
	• Phone number, mobile number, fax number, email address
	• Name or account for electronic communication or   other social media (e.g., Line ID)
	• Evidence of residence in Thailand (in case of foreigners
	• Bank account details and payment method
Educational and work data	• Address indicated in the copy of student identification
	• Occupation and field of work
	• Position and current work period
	• Job details, business type
Service usage data	• Details of transactions and service usage, including   details of search of products, purchase orders, website   browsing,and other product and service details   related to you

1.2 Sensitive Personal Data

Sensitive Personal Data means personal data which is specifically categorized by the law. We do not intend to collect sensitive personal data from you. However, in some cases, it may be necessary for us to collect your sensitive personal data for the purpose of providing services or products to you. This includes religion on the copy of your identification or race that is shown on the copy of the passport of some countries, biometric data (e.g., facial recognition data, fingerprint data, electronic signatures in the case that the behavioral properties of such signature is used for authenticating the person who affixes the signature), criminal record, health data, disability data, sex data, and so on, to support the provision of services and products to you. We will collect, use and/or disclose your sensitive personal data only upon your clear consent or if it is necessary for us as required by the law, and your sensitive personal data will be collected from time to time.

(Personal data and sensitive personal data, unless specifically referred to as personal data and sensitive personal data, shall be collectively referred to as "Personal data")

1.3 Personal data of the minors, incapable persons, or quasi-incapacitated persons

We do not intend to collect, use and/or collect personal data of the minors, incapable persons, or quasi-incapacitated persons unless the consent has been obtained from the guardians, curators or conservators (as the case may be) of such persons or we are permitted by the law to do so. If we aware that we have collected, used and/or disclosed the personal data of the minors, incapable persons, or quasi-incapacitated persons without the consent from the guardians, curators or conservators (as the case may be), we will delete or destroy such personal data or collect, use and/or disclose the personal data only when we are allowed to do on the basis of other laws without consent.
This service is not aimed at children aged below 10 years. We hereby request the parents or legal guardians to ensure that the children aged below 10 years under your parental authority do not send us their personal data. However, if the personal data of the children aged below 10 years under your parental authority has been sent to us, it shall be deemed that you give us consent to possess such personal data, and you admit and agree to abide by the terms and conditions indicated in this Privacy Policy on behalf of the children. Nonetheless, we will close the accounts used by the children and withdraw and/or delete any personal data which was possibly sent from the children aged below 10 years without consent of their parents or legal guardians.

2. Objectives of collection, usage or disclosure of personal data

2.1 We may rely on (1) the contract basis to enter into the contract or perform in accordance with the contract with you, (2) legal obligations to perform our legal duties, (3) legal interests of ours and the third party, (4) essential benefits to protect or suppress danger to life, body or health of people, and/or (5) public interests for conducting the mission for the public benefits or exercise of the right of government officers to collect, use, disclose, and/or process your personal data for at least one of the following objectives:

If you cannot give us your personal data upon request, we may not be able to provide you with our services.

2.2 We will request your consent when we collect, use, disclose, and/or process your personal data for the following purposes:

2.3 We may collect your sensitive personal data such as religion or race shown on the copy of your identification or the copy of passport of some countries as evidence for verification and authentication of your identity for service usage. This also includes your health record, only if it is necessary for the use of some of our products and/or services, provided that your consent will be requested each time we collecting such data.

2.4 You acknowledge that we may access, retain, and disclose your personal data as prescribed in Clause 1 if we are required to comply with the law or order of the court or other government agencies having the jurisdiction over us or under the good faith that such action should be taken to (a) comply with the law, or (b) to comply with the orders of any government agencies having the jurisdiction over us.

2.5 We may change the objectives of collecting, using, disclosing, and/or processing your personal data in accordance with the circumstances in the future. However, we will notify you and request for your consent upon having such change except for the case that we are legally permitted to collect, use, disclose, and/or process your personal data under the changed objectives without consent.

3. Channels for collection of personal data

We may collect your personal data via the following channels:

3.1 Your personal data directly given to us or when you join activities or search information through the channels of service provision and/or other contact such as website, application, email, questionnaire, business card, meeting, training, seminar, event, recreation acidity, marketing campaign, gathering, or any other channels.

3.2 Your personal data that we receive or access from other sources such as the company co-launching the products and/or services with us, data providers, our customers, online social media, and online platform of the third party.

4. Disclosure of your personal data to other people

It may be necessary for us to disclose your personal data to other people in order to proceed according to the objectives prescribed in Clause 2 or as permitted by the law to be disclosed. In this case, the persons or authorities who receive your personal data shall collect, use and/or disclose your personal data under the objectives indicated herein only. In some cases, you may be subject to the Personal Data Protection Policy of the said persons. The persons who receive your personal data may be in Thailand or other countries, including but not limited to:

5. Transfer of data to other countries/interterritorial data transfer

Your personal data may be transferred, retained, or processed otherwise by PFG or sent to other individuals or authorities as prescribed in Clause 4, which may be located or provided services in Thailand or other countries such as sending or transferring of personal data to be stored on Cloud platform or servers located in other countries. However, if it is required by the applicable law, we may ask you to share your personal data as prescribed in Clause 4, and your personal data shall be transferred to other places having the satisfactory standard of personal data protection which, at least, shall be equivalent to the level of protection applied in the country or region or territory where your personal data is given.

6. Period of personal data storage

We will store your personal data for the necessary period to achieve the objectives determined for personal data processing. The personal data storage period is subject to change depending on the objective of personal data collection and processing. After such period, we may eliminate your personal data from our storage or system without a prior notice.

7. Our personal data protection measures

We will store your personal data well in accordance with our technical measures, management measure, and physically protective measure to maintain confidentiality, completion, availability of personal data and to prevent unauthorized or illegal access, collection, modification, change, usage, and/or disclosure of personal data pursuant to the law.

We have arranged for appropriate measures to prevent the breaches of personal data by determining the policy, rule and procedure of personal data protection such as measures to control access to personal data and usage of appropriate and safe equipment for personal data storage and processing, restriction of personal data access, assignment of users right to access personal data to prevent access to personal data, disclosure, knowing, or unauthorized reproduction of personal data, or stealing the equipment for personal data storage and processing. The said policy, rule and procedure of personal data protection are subject to change as deemed appropriate and in accordance with our operation plans.

8. Your rights concerning personal data

Under the legal provisions and procedures indicated in this Privacy Policy, you are entitled to take action regarding your personal data as follows:

8.1 Rights to access and accept copies of your personal data

You have the right to access and accept copies of your personal data. However, we reserve the right to refuse your request as required by the law or court order. For your privacy, we may ask you to authenticate your identity prior to giving personal data as requested.

8.2 Right to correct

You have the right to ask us to correct or update your personal data which is incorrect to ensure that it is complete and up-to-date.

8.3 Right to delete

You have the right to delete or destroy your personal data or make your personal data unidentifiable unless we have a legal reason to refuse your request.

8.4 Rights to request for suspension of personal data usage

You have the right to request for temporary suspension of your personal data usage in some cases.

8.5 Rights to object to collection, usage or disclosure of personal data

You have the right to object to the collection, usage or disclosure of your personal data if we proceed without your consent or for the purpose of direct marketing or scientific research or statistics unless we have a legal reason to refuse your request.

8.6 Rights to transfer your personal data

You have the right to transfer your personal data for which you have given consent or which is collected by us on the legal basis or as necessary for entering into contracts or performing in accordance with the contracts under Section 24 (3) in the format that is generally readable or usable with automatic devices or equipment. Also, you have the right to request your personal data in such format to be sent or transferred to other personal data controllers or to you unless it is technically impossible, which is subject to the law.

8.7 Rights to withdraw consent

You have the right to withdraw your consent given to us in accordance with the determined procedures and methods. Withdrawal of your consent shall not affect collection, usage, or disclosure of your personal data for which you have given consent prior to such withdrawal.

8.8 Rights to complain

You have the right to complain to Personal Data Protection Committee or Office of Personal Data Protection Committee if we collect, use, disclose, and/or proceed your personal data illegally.

9. Cookies

We will collect the data of the website or application visit from all visitors through cookies or other similar technology, and we will use cookies for the development of efficiency of your access to our services via internet and the effectiveness of our service usage via internet for the following cases:

10. How to contact us?

If you want more information about the collection, usage and/or disclosure of your personal data, you may call 02 1194399 or email us at: pdpa@patayafood.com. Place of contact: 1011, Supalai Grand Tower, 27th Floor, Rama 3 Road, Chong Nonsi Sub-district, Yan Nawa District, Bangkok Metropolis 10120.

If you wish to exercise your rights as the personal data owner as specified herein, please complete the form available on website: www.patayafood.com and submit it through the above channels

If you are suspicious of any breach of your personal data, you may contact Personal Data Protection Office via email: dpo@patayafood.com.

11. Scope of Privacy Policy

This Privacy Policy shall apply to usage of our services and our website and application only. If you link to other websites, despite being made through our website, we are advised to study and comply with the Privacy Policy shown on those websites which are separated from ours.

12. Governing Law

This Privacy Policy is governed by and interpreted under the law of Thailand, and Thai court has the jurisdiction over any disputes which may occur or relate to this Privacy Policy.

13. Amendment of Privacy Policy

We may modify or change this Privacy Policy from time to time and you may check the updated version on the website: www.patayafood.com.

Version: July 2024

Rights Execution

Data subject request form

If you are data subject wishing to execute your following rights pursuant to personal data protection law, please complete this form:

• right to access and receive a copy of personal data;

• right to rectification;

• right to delete;

• right to restrict processing;

• right to object to the processing; or

• right to transfer data

download

Data subject consent withdrawal form

If you are data subject wishing to withdraw the consent you have given to PFG, please complete this form.

download

If you have any question, please contact us via pdpa@patayafood.com