Customer Privacy Policy
Spring Green Evolution Co., Ltd. places great importance on protecting your personal data. This Privacy Policy explains our practices regarding the collection, use, and disclosure of personal data, as well as the rights of data subjects under applicable personal data protection laws.
Collection of Personal Data
We collect personal data directly from you through the following channels:
- Membership registration
- Telephone
Types of Personal Data Collected
Personal information such as your first name, last name, age, date of birth, nationality, national identification number, passport details, and other similar information.
Contact information such as your address, telephone number, email address, and other similar information.
Account information such as your user account, usage history, and other similar information.
Transaction and financial information such as your order history, credit card details, bank account details, and other similar information.
Technical information such as your IP address, Cookie ID, website usage history (Activity Log), and other similar information.
Minors
If you are under 20 years of age or are subject to legal restrictions on your capacity, we may need to obtain consent from your parent or legal guardian before collecting, using, or disclosing your personal data, unless otherwise permitted by law. If we become aware that we have collected personal data from a minor without the consent of their parent or legal guardian, we will delete such data from our servers.
Storage of Personal Data
We retain your personal data in both physical and electronic formats.
Your personal data is stored in the following location:
- Our company servers located overseas
Processing of Personal Data
We collect, use, or disclose your personal data for the following purposes:
- To create and manage user accounts
- To deliver products or services
- To improve our products, services, or user experience
- For internal business administration
- For marketing and promotional purposes
- To provide after-sales service
- To collect feedback
- To process payments for products or services
- To comply with our Terms and Conditions
Disclosure of Personal Data
We may disclose your personal data to other parties with your consent or where permitted by law, as described below.
Internal Management
We may disclose your personal data within the company to the extent necessary to improve and develop our products or services. We may combine internal data relating to various products or services under this Policy to provide greater benefits to you and others.
International Transfers of Personal Data
We may disclose or transfer your personal data to individuals, organizations, or servers located outside Thailand. We will implement appropriate measures to ensure that the destination country provides adequate personal data protection standards or that the transfer otherwise complies with applicable legal requirements.
Retention Period for Personal Data
We retain your personal data for as long as necessary while you remain a customer or maintain a relationship with us, or for as long as required to fulfill the purposes described in this Policy. We may need to retain your data for a longer period where required by law. Once the data is no longer necessary or the applicable retention period has expired, we will delete, destroy, or anonymize it.
Rights of Data Subjects
Under personal data protection laws, you have the following rights:
Right to withdraw consent If you have given us consent to collect, use, or disclose your personal data, whether before or after personal data protection laws came into effect, you have the right to withdraw your consent at any time.
Right of access You have the right to request access to personal data under our responsibility and to ask us to provide you with a copy of such data. You may also ask us to disclose how we obtained your personal data.
Right to data portability You have the right to receive your personal data where we have made it available in a format that can be read or used by automated tools or devices and can be used or disclosed by automated means. You also have the right to request that we transmit or transfer such data to another data controller where this can be done automatically, and to request receipt of personal data that we have transmitted or transferred directly to another data controller, unless doing so is technically infeasible.
Right to object You have the right to object at any time to the collection, use, or disclosure of your personal data where such processing is necessary for our legitimate interests or those of another individual or legal entity, provided that such processing does not exceed what you could reasonably expect, or where it is carried out in the public interest.
Right to erasure or destruction You have the right to request the deletion or destruction of your personal data, or to have it anonymized, if you believe that it has been collected, used, or disclosed unlawfully; if we no longer need to retain it for the purposes described in this Policy; or if you have exercised your right to withdraw consent or object to processing as described above.
Right to restriction of processing You have the right to request the temporary suspension of the use of your personal data while we review your request to rectify your data or your objection to its processing. You may also request restriction where we are no longer required to retain your personal data and must delete or destroy it under applicable law, but you request that its use be restricted instead.
Right to rectification You have the right to request that your personal data be corrected and kept accurate, current, complete, and not misleading.
Right to lodge a complaint You have the right to lodge a complaint with the competent authority under applicable law if you believe that the collection, use, or disclosure of your personal data violates or fails to comply with applicable laws.
You may exercise the above rights as a data subject by contacting our Data Protection Officer using the contact details provided at the end of this Policy. We will notify you of the outcome within 30 days of receiving your request in accordance with our prescribed form or procedure. If we reject your request, we will inform you of the reason through an appropriate channel, such as SMS, email, telephone, or post.
Advertising and Marketing
To help us provide you with our products or services, we use your data to analyze and improve our products and services and to conduct marketing through Google, Facebook, pixel tracking code, and other platforms and technologies. We use this information to tailor our products or services to your needs.
Our website may display advertisements from third parties that help facilitate our services, such as Google AdSense and BuySellAds. These third parties may access your personal data solely to perform these activities and are obligated not to disclose or use it for any other purpose.
We may send information or newsletters to your email address to present offers that may interest you. If you no longer wish to receive email communications from us, you may click the “Unsubscribe” link in the email or contact us by email.
Tracking Technologies (Cookies)
To provide you with a more complete and effective user experience, we use cookies or similar technologies to improve access to products or services, deliver relevant advertisements, and monitor your usage. We use cookies to identify and track website users and visits to our website. If you do not want cookies to be stored on your computer, you may configure your browser to reject cookies before using our website.
Personal Data Security
We protect the security of your personal data in accordance with the principles of confidentiality, integrity, and availability to prevent loss, unauthorized access, use, alteration, correction, or disclosure. We also maintain personal data security measures covering administrative safeguards, technical safeguards, and physical safeguards relating to access to and control over the use of personal data.
Personal Data Breach Notification
If a personal data breach occurs, we will notify the Personal Data Protection Committee without undue delay and, where feasible, within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will notify you of the breach and the available remedial measures without undue delay through channels such as our website, SMS, email, telephone, or post.
Changes to This Privacy Policy
We may amend this Policy from time to time. You can review the amended terms and conditions of this Policy on our website.
This Policy was last updated and became effective on November 21, 2022.
Privacy Policies of Other Websites
This Privacy Policy applies solely to the offering of products and services and the use of our website by our customers. If you visit another website, including through a link on our website, the protection of your personal data will be governed by that website’s privacy policy, with which we are not involved.
Contact Details
If you have any questions about this Privacy Policy or wish to exercise any of your rights, you may contact us or our Data Protection Officer using the following details:
Data Controller
Spring Green Evolution Co., Ltd.
658 Soi Charoen Krung 67, Yan Nawa, Sathon, Bangkok 10120
Email: springgreenevolution@gmail.com
Website: https://www.sgethai.com/
Telephone: 02-212-8127
Data Protection Officer
DPO Team
658 Soi Charoen Krung 67, Yan Nawa, Sathon, Bangkok 10120
Email: springgreenevolution@gmail.com
Telephone: 02-212-8127
