We as data protectors, are legally obligated to inform you of our Privacy Policy. which describes the collection, use or disclosure of your personal data and your rights as a data subject And we confirm that we are taking action in accordance with this law to protect your personal information.

Meaning of personal data

Personal data is divided into two categories: personal data (general) means personal data of a living person that can directly or indirectly identify that person, such as name, last name, address, email address, ID card number.

Sensitive Personal Data is personal data that requires special protection. which requires special caution in collecting, using or disclosing this type of personal information, such as personal information about race, ethnicity, political opinions, creed beliefs, religious or philosophical sexual behavior, criminal history, health information, disability, union information, genetic information and biological data

Personal data we collect from you

We collect your information when:

• You enter our website.
• You provide information to us through websites or applications.
• You provide information to us through our online or offline.

Source of personal data

We obtain personal data from you directly through the following channels:

• You register by creating an account through the website or application.
• You provide information to us in order to apply for membership.
• You provide information to us in order to purchase products.
• You participate in our promotional activities via electronic channels or Social Network or normal channels.
• Your Personal Data that we obtain from a third party (Third Party) who proceeds with the collection, use or disclosure of Personal Data in accordance with our instructions or on our behalf, your Personal Data will not be used. In addition to the purposes that we have specified or ordered and we have required third parties to maintain the confidentiality and protection of your personal data in accordance with the standards of the personal data protection laws of Thailand.
• Personal data obtained from cookies. when you visit our website This information helps us to provide you with a better, faster, safer service and for your privacy. when you use the service and/or enter the platform

Purpose of collection, use and disclosure of personal data

We use your personal information within the scope of data protection laws and collect only the information necessary to do so. We only collect information related to the provision of services between you and us that is necessary:

• For our legitimate interests (Legitimate Interests) or the legitimate interests of third parties. or your legitimate interests without compromising your fundamental rights in personal data
• For the performance of a contract that you are a party to or for the processing of your request before entering into a contract.
• To comply with our laws or to prevent or suppress a danger to a person's life, body or health.

Disclosure or sharing of personal data

We may disclose or share your personal information with third parties as follows:

• Affiliated company
• Online advertising platform.
• Companies or marketing consultants.

We require third parties with whom we disclose or share your Personal Data mentioned above to maintain the confidentiality and protect your Personal Data in accordance with the standards required by the Personal Data Protection Laws of Thailand. and use your personal data only for the purposes that we have determined or instructed that third party to perform. Third parties will not be able to use your personal information for other purposes.

when requested We may disclose your personal information to relevant authorities to comply with the law, e.g. to prevent threats to life or body, for law enforcement purposes, to make charges, to exercise legal rights protection and Fraud protection

Retention and period of retention of personal data

We store your personal information in our information system. And provide standard security to keep our information system and the use of your personal information safe with the following measures

• Limit access to personal information that may be accessed by employees, agents, partners or third parties. Access to personal data of third parties is only possible on an as-needed basis or as directed. The third party must have a duty to maintain the confidentiality and protection of personal information.
• Provide technological means to prevent unauthorized computer access.
• Manage to securely destroy your personal information when it is no longer needed for legal and business purposes.
• There is a process for handling cases of personal data breaches. or in case of suspicion and must notify the data breach to the Office of the Personal Data Protection Commission in accordance with the conditions prescribed by law.

Period of retention of personal data

• We keep your personal data for the period necessary to carry out the purposes of providing our services. And according to the period specified by the accounting standards. legal standards and other related regulations
• To determine the period of data retention. We will consider the number Usage purpose of service Sensitivity of personal data and potential risks from misuse of personal information and the period specified by relevant laws.
• Your personal information obtained from cookies to collect information when you access the website, we will keep it for no longer than 13 months or as required by relevant laws.

Your rights of personal data

As the owner of personal data You have the right to proceed to the extent permitted by law as follows:

• You have the right to withdraw consent (Right to withdraw Consent). In processing your personal data, you have given us your consent. for the duration that your personal data is with us
• You have the right of access to your personal data (Right of Access) and ask us to make a copy of such personal data for you. Including asking us to disclose the acquisition of personal data that you have not given consent to us.
• You have the right for us to correct your personal data. or adding incomplete information (Right to Rectification)
• You have the right to ask us to delete your data for certain reasons (Right to Erasure).
• You have the right to ask us to withhold your personal data for certain reasons (Right to Restriction of Processing).
• You have the right to transfer the personal data that you have provided to us to another data controller or yourself for certain reasons (Right to Data Portability).
• •You have the right to object to the processing of your data for certain reasons (Right to Object).

You can contact the staff. DPO/officer of the company in order to submit a request to perform the above rights

Marketing and promotional activities

We may conduct marketing and promotional activities or engage third parties that we have a requirement or directive to do. In the following cases

Where we use your personal data for direct marketing with you, we will do so only if you have given us your explicit consent. and we have informed you of the purposes for which we use your data for direct marketing. You can revoke your consent to us for direct marketing at any time via our system.

In the case of participating in the company's promotional activities such as gaming activities or activities on various social networks to promote our products and services to the general public. We will not process your data for direct marketing unless you have given us your explicit consent to use your personal data for direct marketing. We will inform you of the purposes for which we will use your information for direct marketing. And you can revoke your consent to direct marketing at any time through our system.

Privacy protection policy of other websites

This privacy policy applies only to our service and use of our website if you click on a link to another website. (Even through channels on our website), you must study and comply with the privacy policy that appears on that website, separate from our website.

Changes to the Privacy Policy

We will regularly review the effectiveness of this Privacy Policy. Any changes to this policy will be posted or published on our other websites or platforms.

You can opt out of providing information. Withdraw consent Request access or correct information you have provided to us

You may withdraw your consent regarding collection, use and/or disclosure. and/or request deletion of your personal data in our possession or control. By sending an email to Our Personal Data Protection Officer to the email address info@whitecranev88.com and we will consider your request to withdraw consent. according to the conditions specified in This Privacy Policy and Personal Data Protection and other applicable laws. However, withdrawing your consent may mean that we are unable to continue providing our services to you. We may therefore need to end your existing relationship and/or contract with us.