PDPA

Evershining Ingredient Co., Ltd. recognizes the importance of protecting your personal data. This Privacy Policy outlines our practices regarding the collection, use, and disclosure of personal information, as well as the rights of data subjects, in accordance with the Personal Data Protection Act (PDPA).

Collection of Personal Data
We collect personal data directly from you through the following means: 

• Membership registration
• Address
• Phone number
• Email
• LINE Login
• Facebook Login
• Google Login

Types of Collected Personal Data:

• Personal Information: Name, surname, age, date of birth, nationality, ID card number, passport, etc.
• Contact Information: Address, phone number, email, etc.
• Account Information: User account, usage history, etc.
• Identification Documents: Copy of ID card, passport, etc.
• Transaction and Financial Information: Purchase history, credit card details, bank account, etc.
• Technical Information: IP address, Cookie ID, website activity logs, etc.
• Analytics Information: Usage behavior such as Google Analytics and Facebook Pixel.
• Other Information: Photos, videos, and any other information considered personal data under PDPA.
  

Minors
If you are under 20 years old or legally incapacitated, we may collect, use, or disclose your personal data only with parental or guardian consent, or where permitted by law. If we learn that such data was collected without proper consent, we will delete it from our servers.

Retention of Personal Data
We store your personal data in both physical and electronic formats, specifically:
1. Our company’s servers located in Thailand.


Use of Personal Data
We collect, use, or disclose your personal data for the following purposes:
1. To create and manage user accounts
2. To deliver products or services
3. To improve products, services, or user experience
4. For internal management purposes
5. For marketing and promotional activities
6. For after-sales services
7. To collect feedback
8. For payment processing
9. To comply with terms and conditions
10. To comply with legal and regulatory obligations


Disclosure of Personal Data
We may disclose your personal data with your consent or where legally permitted:
- Internal Management: Shared within the company as necessary to improve our services.
- Service Providers: Shared with third parties (e.g. payment processors, marketers) for specific operational needs. These providers are subject to their own privacy policies.


Data Retention Period
We retain your personal data for as long as necessary to fulfill the purposes in this policy. Afterward, we will delete, destroy, or anonymize your data unless legally required to retain it longer.


Your Rights under PDPA
You have the following rights: 

• Right to Withdraw Consent: You may withdraw your consent at any time.
• Right to Access: Request access to and a copy of your personal data.
• Right to Data Portability: Request your data in a machine-readable format or transfer it to another data controller.
• Right to Object: Object to the use of your data under certain lawful grounds.
• Right to Erasure/Destruction: Request deletion or anonymization of your data.
• Right to Restriction of Processing: Temporarily restrict the use of your data.
• Right to Rectification: Correct incomplete or inaccurate data.
• Right to Lodge a Complaint: File a complaint with relevant authorities if your data is mishandled.

•  
  To exercise these rights, contact our Data Protection Officer using the contact details below. We will respond within 30 days.
  
  
  Advertising and Marketing
  We may send promotional materials or newsletters to your email. You can opt-out at any time via the “unsubscribe” link or by contacting us directly.
  
  
  Cookies and Tracking Technologies
  We use cookies or similar technologies to enhance your experience, offer tailored advertising, and analyze usage. You can set your browser to reject cookies if you prefer.
  
  
  Data Security
  We safeguard your data based on principles of confidentiality, integrity, and availability using administrative, technical, and physical security measures, including access control systems.
  
  
  Data Breach Notification
  In the event of a data breach, we will notify the PDPC (Personal Data Protection Committee) within 72 hours. If the breach poses a high risk to your rights and freedoms, we will also inform you promptly.
  
  
  Policy Updates
  This policy may be updated from time to time. Changes will be announced on our website.
  Last updated: June 1, 2022
   
   
  นโยบายความเป็นส่วนตัวของเว็บไซต์อื่น
  นโยบายความเป็นส่วนตัวฉบับนี้ใช้สำหรับการเสนอสินค้า บริการ และการใช้งานบนเว็บไซต์สำหรับลูกค้าของเราเท่านั้น หากคุณเข้าชมเว็บไซต์อื่นแม้จะผ่านช่องทางเว็บไซต์ของเรา การคุ้มครองข้อมูลส่วนบุคคลต่าง ๆ จะเป็นไปตามนโยบายความเป็นส่วนตัวของเว็บไซต์นั้น ซึ่งเราไม่มีส่วนเกี่ยวข้องด้วย
  
   
  Third-Party Websites
  This Privacy Policy applies only to our website. If you follow a link to another site, that site’s own privacy policy applies, and we are not responsible for it.
   
  Contact Information
  Data Controller
  Evershining Ingredient Co., Ltd.
  2/156 Soi Bangkhuntien 16, Samae Dam, Bang Khun Thian, Bangkok 10150
  Email:  [email protected]
  Phone: + 66 (0) 2417 0641 – 4