Privacy Policy

1. Principles and Objectives

www.outsidein.co.th (“Website”, “we”) acknowledges the importance of personal data and other user-related information (“customers” or “you”). This policy aims to ensure that you can trust the Website’s transparency and responsibility in collecting, using, or disclosing your information under the Personal Data Protection Act B.E. 2562 (“Personal Data Protection Law”) and other relevant laws. This privacy policy (“Policy”) is created to clarify the details of the collection, use, or disclosure (collectively referred to as “processing”) of your personal data.

2. Collection of Personal Data

Personal data refers to information that can identify an individual either directly or indirectly. We collect personal data only when necessary and use it for specific purposes.
Types of Personal Data
Details and Examples
Personal Identification
– Name, surname
– Gender
– Age
– Date of birth
– National ID number
– Photograph
Contact Information
– Postal address
– Email
– Phone number (including home or mobile phone numbers)
– Social media accounts such as LINE ID, Facebook account, Facebook ID, Google ID
Financial Information
– Credit/debit card details, such as name on the card, card number, expiration date, issuing bank
– Bank account
– Tax invoice details
Technical Information
– IP Address
– MAC Address
– Session ID data, such as browsing behavior and access logs
– Browser type and version

3. Sources of Personal Data

We may collect your personal data through the following channels:
3.1 Direct Collection from You
– When you register by filling out forms, whether in document form, through the Website, social media, or other channels.
– When you purchase products and services.
– When you fill out forms.
– When you post in web forums.
– When you contact us, ask questions, provide feedback or suggestions about our products and services.
– When you choose to receive news or promotional materials from us.
3.2 Automatic Collection
– When you visit or use the Website, which may use cookies or similar technologies to collect technical information about your usage.
– Information from the service use and related data, such as device information (IP Address & MAC Address).
3.3 Collection from Third Parties
We may collect your personal data from external sources legally or with your consent, such as when personal data is provided to us to offer services to you and carry out related business activities.

4. Principles of Personal Data Collection

Legal Basis for Collection
Details
Contract Performance
To perform the sale contract between the data controller (“we”) and the data subject (“you”) regarding payment and shipping.
Consent
For the collection, use, or disclosure of personal data that requires consent, with a clear explanation of the purpose before or at the time of consent, such as collecting sensitive personal data not exempted by law, presenting and promoting products and services, facilitating service provision, etc.

5. Purposes of Data Collection

Purpose
Details

To Facilitate Website Use and Service Provision
Facilitating the ordering, delivery, return, and exchange of products.
To Respond to Customer Inquiries and Provide Assistance
Assisting customers with service-related issues, updating customer information, and processing rights requests or complaints.
To Improve Quality and Services
Analyzing and developing products or services to better meet customer needs.
To Provide Product and Service Information or Marketing Promotions
Sending information about products and services, offering privileges, promotions, discounts, and special offers related to store products via email, SMS, and postal mail (upon obtaining explicit consent).
To Conduct Data Analysis (Data Analytics)
Analyzing customer data for market research to improve products and services.
To Prevent, Detect, and Investigate Crime
Auditing and taking actions to prevent violations of laws, including security breaches affecting personal data subjects.

We may share anonymized data with the public, partners, or for marketing, website performance analysis, and promotional purposes, or to display trends in the use of our products and services.

6. Disclosure of Personal Data to Third Parties

We may disclose personal data as necessary to external parties with the consent of the data subject unless done under legal authority.

Transportation Service Providers
Payment Service Providers
Data Analysis and Market Research Providers
Government officials, state officers, or state agencies with legal oversight or when legally required to disclose personal data, including legal processes and actions permitted by law.

7. Personal Data Retention Period

We will retain your personal data only as long as legally required or necessary for the purposes for which it was collected. We will delete or destroy personal data when it is no longer necessary for the stated purposes.

8. Security of Personal Data

We recognize the importance of maintaining the security of your personal data. We implement appropriate measures to prevent loss, unauthorized access, destruction, misuse, alteration, modification, or unlawful disclosure. We ensure electronic security on SSL (Security Socket Layer) standards authorized by CA (Certificate Authority), with encrypted data protection such as personal information, passwords, and credit card numbers.

9. Rights of Data Subjects

Right to Withdraw Consent
You have the right to withdraw your consent to the processing of your personal data that you have provided to us at any time while your personal data is with us.
Right of Access
You have the right to request access to your personal data under our responsibility and request copies of such data.
Right to Rectification
You have the right to request correction of your personal data to ensure that it is up-to-date and complete. If you are a member, you can correct your personal data on the member detail page.
Right to Erasure
You have the right to request the deletion, destruction, or anonymization of your personal data when it is no longer necessary.
Right to Restriction of Processing
You have the right to request a temporary suspension of personal data processing while we verify your request to correct personal data or object to data collection, use, or disclosure.
Right to Data Portability
You have the right to request your personal data in a commonly readable and usable format with automated tools and request to send or transfer such data to another data controller.
Right to Object
You have the right to object to the collection, use, or disclosure of your personal data. If you choose to object to the collection, request deletion, or revoke rights previously granted, this may affect the service provided by the store, and we may not be able to offer some services.

You can exercise your rights as a data subject by contacting us. We will review and notify you of the outcome of your request within 30 days from the date we receive the request.

10. External Website or Service Links

Our Website may contain links to external websites that may collect your service usage and personal data. We are not responsible for the safety or privacy of the data collected by external websites. You must review the privacy policies of those external websites and comply with the privacy policies displayed on those external websites.

11. When You Refuse Consent or Do Not Allow the Use of Personal Data

We may need to collect personal data by law or to perform contracts between you and us. If you do not consent to our use of personal data, you can still use our services, which may result in less convenience due to the lack of consent to fully utilize personal data.

12. Privacy Policy Amendments

This Privacy Policy may be updated or changed as necessary to comply with the Personal Data Protection Law or other relevant laws. We recommend that you review this Privacy Policy periodically.

13. Contact Information

If you have any questions, suggestions, or need further details about the Privacy Policy, please contact:
Data Controller
Email: marketing@outsidein.co.th