Last Updated: October 20, 2024
1. Introduction
Digital Chili Co., Ltd. (“we”, “us”, “our”), doing business as Sanithais.com, respects your privacy and is committed to protecting your personal data. This Privacy Policy will inform you about how we look after your personal data when you visit our website (regardless of where you visit it from), who we share your data with, and inform you about your privacy rights and how the law protects you. We also explain how we handle international data transfers, security measures, and your rights regarding your data.
2. What data we collect
We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped as follows:
- Identity Data: First name, last name, username, or similar identifier.
- Contact Data: Billing address, delivery address, email address, and telephone numbers.
- Financial Data: Bank account and payment card details.
- Transaction Data: Details about payments to and from you and other details of products and services you have purchased from us.
- Technical Data: IP address, browser type, and other technology on the devices you use to access this website.
- Usage Data: Information about how you use our website, products, and services.
- Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.
3. How we use your data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- Where we need to perform the contract we are about to enter into or have entered into with you.
- Where it is necessary for our legitimate interests (or those of a third party), and your interests and fundamental rights do not override those interests.
- Where we need to comply with a legal or regulatory obligation.
4. Disclosure of your data
We prioritise the privacy and security of your personal data. We may share your data in the following ways:
- Third-Party Service Providers: We share data with our fulfilment partners (Thailand Post, Grab Express, or similar courier services) to deliver products to you. We also share financial data with our payment processor, Stripe, to securely process your payments. Stripe adheres to strict privacy and security standards.
- Legal Requirements: We may disclose your personal data to comply with legal obligations, such as sharing information with law enforcement or regulatory authorities if required by Thai law.
We do not sell or trade your personal data with third parties.
5. International data transfers
Some of our third-party service providers, like Stripe, may process your personal data outside Thailand. Whenever we transfer your data internationally, we ensure it is protected by appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission or other recognised data protection mechanisms, to ensure your data is treated securely and in line with this policy.
6. Data retention
We will only retain your personal data for as long as necessary to fulfil the purposes for which we collected it, including any legal, accounting, or reporting requirements. For example, by law, we must keep certain transaction data for up to seven years for tax purposes. After this period, your data will be securely deleted or anonymised.
7. Data security
We have implemented robust security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. This includes the use of encryption, secure servers, firewalls, and access control measures. Additionally, we limit access to your personal data to employees, agents, contractors, and other third parties who have a legitimate business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.
8. Your legal rights
Under data protection laws, you have the following rights regarding your personal data:
- Request access to your personal data.
- Request correction of your personal data.
- Request erasure of your personal data (where it is no longer necessary for us to retain it).
- Object to processing of your personal data.
- Request restriction of processing of your personal data.
- Request the transfer of your personal data to you or a third party.
- Withdraw consent at any time where we rely on consent to process your data.
If you wish to exercise any of these rights, please contact us at the details provided below.
9. Cookies and tracking
Our website uses cookies to enhance your experience and collect information about your browsing behaviour. Cookies are small files placed on your device to improve website functionality and tailor content. You can choose to accept or decline cookies in your browser settings. For more information on how we use cookies, please refer to our Cookie Policy.
10. Changes to this policy
We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or service offerings. Any updates will be posted on this page, and we will notify you through email or a website notice if significant changes are made.
11. Contact us
If you have any questions about this privacy policy or wish to exercise your rights, please contact us at:
- Email: [email protected]