Privacy Policy for Customer

Art Unit Co., Ltd recognizes the importance of the protection of your personal data. This Privacy Policy explains our practices regarding the collection, use or disclosure of personal data including other rights of the Data Subjects in accordance with the Personal Data Protection Laws.

Collection of Personal Data

• We will collect your personal data that receive directly from you as following: your account registration, telephone, email address, Facebook Login, Google Login, and LINE Login.
• We may collect your personal data that we can access from the other source not directly from you such as search engines, social media, government authorities, third parties, etc.

Types of Data Collected

• Personal Data: Name, surname, age, date of birth, nationality, identification card, passport, etc.
• Contact Information: Address, telephone number, e-mail address, etc.
• Account Details: Username, password, transactions history, etc.
• Transaction & Financial Information: Purchase history, etc.
• Technical Data: IP address, Cookie ID, Activity Log, etc.
• Other Information: Photo, video, and other information that is considered personal data under the Personal Data Protection Laws.

Children

• If you are under the age of 20 or having legal restrictions, we may collect use or disclose your personal data. We require your parents or guardian to be aware and provide consent to us or allowed by applicable laws.
• If we become aware that we have collected personal data from children without verification of parental consent, we take steps to remove that information from our servers.

Storage of Data

• We store your personal data as hard copy and soft copy.
• We store your personal data by using the following systems: Third-party server service providers in Thailand and Third-party server service providers outside of Thailand.

Use of Data

• To create and manage accounts
• To provide products or services
• To improve products, services, or user experiences
• To share and manage information within organization
• To conduct marketing activities and promotions
• To provide after-sales services
• To gather user’s feedback
• To process payments of products or services
• To comply with our Terms and Conditions
• To comply with laws, rules, and regulatory authorities

Disclosure of Personal Data

• Organization: We may disclose your personal data within our organization to provide and develop our products or services. We may combine information internally across the different products or services covered by this Privacy Policy to help us be more relevant and useful to you and others.
• Service Providers: We may use service providers to help us provide our services such as payments, marketing and development of products or services. Please note that service providers have their own privacy policy.
• International Transfers: With respect to transfers originating from the European Economic Area (EEA) to the United States and other non-EEA jurisdictions, we will have appropriate solutions to address cross-border transfers as required or permitted by the General Data Protection Regulation.

Data Retention

• We will retain your personal data for as long as necessary during the period you are a customer or under relationship with us, or for as long as necessary in connection with the purposes set out in this Privacy Policy, unless law requires or permits a longer retention period.
• We will erase, destroy or anonymize your personal data when it is no longer necessary or when the period lapses.

Data Subject Rights

• Withdrawal of consent: You have the right to withdraw your consent at any time throughout the period your personal data available to us, unless it is restricted by laws or you are still under beneficial contract.
• Data access: You have the right to access your personal data under our responsibility, request a copy, and request us to reveal how we obtained it.
• Data portability: You have the right to obtain your personal data in an automatic machine-readable format and request us to transfer it directly to other data controllers if technically feasible.
• Objection: You have the right to object to the collection, use, or disclosure of your personal data at any time based on legitimate interests.
• Data erasure or destruction: You have the right to request us to erase, destroy, or anonymize your personal data if it is no longer necessary or processed unlawfully.
• Suspension: You have the right to request us to suspend the processing of your personal data during verification or instead of erasure.
• Rectification: You have the right to rectify your personal data to be updated, complete, and not misleading.
• Complaint lodging: You have the right to complain to competent authorities if you believe we violate personal data protection laws. For EEA users, you can lodge a complaint with your local data protection authority.
• We will notify the result of your request within 30 days upon receipt. If we deny the request, we will inform you of the reason via SMS, email, telephone, or registered mail.

Advertising and Marketing

• We use your personal data to analyze, personalize and enhance our products, services, and marketing efforts through Google, Facebook, pixel tracking code, and others to provide customized recommendations.
• We do not use automated decision-making without human intervention, including profiling, in a way that produces legal effects concerning you.
• You can click the "unsubscribe" link in our emails or contact us if you no longer want to receive marketing communications.

Cookies

• To enrich and perfect your experience, we use cookies or similar technologies to display personalized content, appropriate advertising, and store your preferences on your computer.
• If you do not wish to have cookies placed on your computer, you should set your browsers to refuse cookies before using our website.

Data Security & Breach Notification

• Data Security: We establish security measures in accordance with confidentiality, integrity, and availability principles to prevent loss, unauthorized access, destruction, use, or alteration.
• Data Breach Notification: We will notify the Office of the Personal Data Protection Committee without delay and within 72 hours if feasible. If a breach results in a high risk to your rights, we will notify you immediately via website, SMS, email, or telephone.

Changes to this Privacy Policy & Links to Other Sites

• We may change this Privacy Policy from time to time. This Privacy Policy was last updated and effective on 3rd June 2022.
• Any websites from other domains found on our site are subject to their own privacy policies, which are not related to us.

California Consumer Privacy Act (CCPA)

• Right to Notification: We may collect personal identifiers, financial details, protected classifications, commercial info, internet activities, geolocation, and audio/visual data for business management purposes.
• Right to Request Info & Deletion: California residents have the right to request details about data collection over the past 12 months and request deletion of personal information via email.
• Right to Non-Discrimination & Opt-Out: The CCPA prohibits discrimination for exercising your rights. We DO NOT sell your personal information.