Luoma Group Co., Ltd. takes the protection of your personal data seriously. This Privacy Policy explains our practices regarding the collection, use, and disclosure of personal data, as well as the rights of data owners under the Personal Data Protection Act.
Collection of personal data
We will collect personal data received directly from you through the following channels:
- Subscription
- telephone
- Facebook Login
- Google Login
- LINE Login
- Twitter Login
- LinkedIn Login
We may collect your personal data that we have access to from other sources, such as search engines, social media, government agencies, other third parties, etc.
Types of personal data collected
Personal information such as name, surname, age, date of birth, nationality, ID number, passport, etc.
Contact information such as address, phone number, email, etc.
Account information such as user accounts, usage history, etc.
Proof of identity, such as a copy of your ID card, passport, etc.
Transaction and financial information such as purchase history, credit card details, bank account, etc.
Technical information such as IP address, Cookie ID, website usage history (Activity Log), etc.
Other information such as images, videos and any other information that is considered personal data under the Data Protection Act. We will collect, use or disclose Sensitive Personal Data as follows when we have your explicit consent, unless required by law.
- ethnicity
- Race
- Political opinions
- Belief in a cult
- Religion or Philosophy
- Criminal history
- Health information
- Disability
- Trade union information
- Sexual behavior
- Genetic information
- Biometric data such as facial image data, iris image data, fingerprint image data
Any other information that affects your personal data as announced by the Personal Data Protection Committee.
minor
If you are under 20 years of age or have limited legal capacity, we may collect, use or disclose your personal information. We may require your parent or guardian's consent or as otherwise permitted by law. If we learn that personal information has been collected from a minor without parental or guardian consent, we will take steps to delete that information from our servers.
How to keep personal data
We will retain your personal data in both paper and electronic formats.
We hold your personal data as follows:
- Our company servers in Thailand
Processing of personal data
We will collect, use or disclose your personal data for the following purposes:
- To create and manage user accounts
- To deliver goods or services
- To improve products, services or user experiences
- For internal management of the company
- For marketing and promotion
- For after-sales service
- To collect feedback
- To pay for goods or services
- To comply with the Terms and Conditions
- To comply with the laws and regulations of government agencies
Disclosure of Personal Information
We may disclose your personal data to others with your consent or where permitted by law, as follows:
Internal management
We may disclose your personal information internally as necessary to improve and develop our products or services. We may collect information internally for products or services under this Policy for the greater benefit of you and others.
Service Provider
We may disclose some of your personal information to our service providers as necessary to perform their duties such as payments, marketing, product or service development, etc. Our service providers have their own privacy policies.
Business partners
We may disclose certain information to business partners to contact and coordinate the provision of products or services and provide information as necessary regarding the availability of products or services.
Business transfer
We may disclose information, including your Personal Information, in connection with a corporate restructuring, merger or sale, or other transfer of assets, provided that the transferring party treats your information in a manner consistent with this Policy and applicable data protection laws.
Law enforcement
In the event that a law or government agency requests it, we will disclose your personal data as necessary to government agencies such as courts, government agencies, etc.
Transfer of personal data abroad
We may disclose or transfer your personal information to persons, organizations or servers located overseas, and we will take various measures.
To ensure that the transfer of your personal data to the destination country provides adequate standards of personal data protection or as otherwise required by law.
Period of storage of personal data
We will retain your personal data for as long as necessary during the course of your relationship with us or for as long as necessary to fulfil the purposes related to this policy, and may continue to retain it thereafter. Where required by law, we will delete, destroy or anonymize your personal data.
When the need is no longer there or the said period has expired
Rights of personal data owners
Under the Data Protection Act, you have the following rights: Right to withdraw consent. If you have given consent, we will collect, use or disclose your personal data, whether the consent was given before or after the effective date of the Data Protection Act. You have the right to withdraw your consent at any time. Right to access. You have the right to request access to your personal data held by us and to request that we provide you with a copy of it, and to disclose how we obtained your personal data. Right to data portability. You have the right to request that we have prepared your personal data in a format that is machine-readable and accessible by automated tools or devices, and that we use or disclose your personal data by automated means, including the right to request that we transmit or transfer your personal data in such a format to another data controller where this is possible by automated means, and to request that we transmit or transfer your personal data in such a format directly to another data controller, unless this is not possible for technical reasons. Right to object. You have the right to object to the collection, use or disclosure of your personal data at any time, where the collection, use or disclosure of your personal data is necessary for the performance of a task carried out in accordance with our legitimate interests or those of another person or entity, to the extent that you can reasonably expect it to be necessary, or to carry out a task carried out in the public interest. Right to erasure/destruction You have the right to request that your personal data be erased or destroyed or anonymized if you believe that your personal data has been collected, used or disclosed unlawfully or that we no longer need to retain it for the purposes related to this Policy, or if you have exercised your right to withdraw your consent or object as stated above. Right to restriction of processing You have the right to request that the use of your personal data be temporarily suspended in the event that we are investigating your request to exercise your right to rectify your personal data or object, or in any other case where we no longer need to and must erase or destroy your personal data under applicable law but you have requested us to suspend its use instead. Right to rectification You have the right to request that your personal data be corrected to ensure that it is accurate, current, complete and not misleading. Right to lodge a complaint You have the right to lodge a complaint with a competent authority under the relevant law if you believe that the collection, use or disclosure of your personal data is in violation of or does not comply with the relevant laws. You can exercise your rights as a data subject above by contacting our Data Protection Officer as detailed at the end of this policy. We will inform you of the results of the action taken within 30 days from the date we receive your request to exercise your rights. In accordance with the form or method we specify. If we reject your request, we will inform you of the reason for the rejection via various channels, such as text message (SMS), email, phone call, letter, etc.
Advertising and Marketing
For the purpose of receiving our products or services, we use your information to analyze and improve our products or services, and market through Google, Facebook, pixel tracking code, and others. We use such information to provide products or services that are more suitable to you. Our website may display advertisements from third parties to facilitate our services, such as Google AdSense, BuySellAds. These third parties may have access to your personal information only to perform these functions and are not required to disclose or use it for any other purpose. We may send information or newsletters to your email, with the purpose of offering you interesting offers. If you no longer wish to receive communications from us via email, you can click “Unsubscribe” in the email link or contact us via email.
Personally Identifiable Technology (Cookies)
To make your user experience more complete and efficient, we use cookies and similar technologies to improve access to our products or services, provide appropriate advertising, and track your usage. We use cookies to identify and track website users and their access to our website. If you do not want to have cookies placed on your computer, you can set your browser to refuse cookies before using our website.
Security of Personal Data
We will maintain the security of your personal data in accordance with the principles of confidentiality, integrity and availability to prevent loss, access, use, alteration, modification or disclosure. In addition, we will provide personal data security measures, which include administrative safeguards, technical safeguards and physical safeguards regarding access or control of personal data (access control).
Notification of personal data breach
In the event of a breach of your personal data, we will notify the Office of the Personal Data Protection Commission without delay, within 72 hours of becoming aware of it, as far as practicable. Where the breach involves a high risk of affecting your rights and freedoms, we will inform you of the breach and provide you with remedies without delay via various channels, such as website, text message (SMS), email, telephone, letter, etc.
Privacy Policy Amendments
We may amend this Policy from time to time, and you will be able to review the amended Terms and Conditions of this Policy via our website. This Policy was last updated and is effective as of May 25, 2022.
Privacy policies of other websites
This Privacy Policy applies only to the offering of products, services and use of the website for our customers. If you visit any other website, even through our website, the protection of personal information will be subject to the privacy policy of that website, which we have no affiliation with.
Contact details
If you have any questions about this Cookie Policy, you can contact us as follows:
Personal Data Controller
Luoma Group Co., Ltd.
2457 Village No. 3, Soi Than Phuying 10, Theparak Road, Theparak Subdistrict, Mueang District, Samut Prakan Province 10270 Email [email protected] Website https://luomagroup.com Telephone number 0814475579
Data Protection Officer
LOUIS MEMBER
Contact address: 2457 Village No. 3, Soi Than Phuying 10, Theparak Road, Theparak Subdistrict, Mueang District, Samut Prakan Province 10270 Email: [email protected]
Call 0814475579