This Privacy Policy aims to give you information about how we collect and process your personal data when you use the website or any app this Privacy Policy is linked to. This Privacy Policy covers any personal data you provide when you create an account, purchase goods or services or otherwise interact with us.
We want to make sure you know who we are, how you can contact us, the personal data we process, how we use it, who we share it with, how long we keep it for and the choices you have to exercise your legal rights.
It is important that you read this Privacy Policy together with any other privacy notice we may provide when we collect or process your personal data so that you are fully aware of how and why we are using your personal data. In particular, please read this Privacy Policy in conjunction with our Terms of Use, as may be updated from time to time.
This Privacy Policy covers the following topics:
Who we are
This Privacy Policy is owned by the Gill Capital group of companies.
In this case, G3 (TH) Co., Ltd with registered office at 1875 One Bangkok Tower 3, 18th Floor, Rama IV Road, Lumpini, Pathumwan, Bangkok 10330 Thailand, and company registration number 0105567234375 ("G3 (TH)", "we", "us", or our), is responsible for this Privacy Policy.
For the purposes of the relevant data protection legislation in Thailand, we are the data controller of your personal data.
How to contact us
We have appointed a Data Privacy Manager who is responsible for overseeing questions or concerns in relation to this Privacy Policy. If you have any comments, questions or requests in relation to this notice or how we handle your personal data, please email dataprotection@hthai.co.th, and write "DPO" as the subject matter.
The personal data we collect and use
If you have ordered goods or services from us or otherwise interacted with our store, website (if any) or app (if any), we will use your personal data in several different ways. The table below sets out how we may use your personal data, showing what personal data we may collect and why.
Category of personal data
Purpose for processing
Identification and contact information (such as email address, telephone number, social media handle and postal address)
Deliver your purchase to you
Row 2
Send you service messages by email or text or via social media (or by such means that you have interacted with us), such as order or product updates
Row 3
Send you information by email or post or via social media about our goods or services e.g. if you have signed up to our newsletter or marketing mailer (whether digital or otherwise)
Row
Fraud prevention and detection
Row
Tax refund (or similar or related) services
Purchase information/history
Maintain records of your purchases with us (including but not limited to purposes relating to or in connection with returns, exchanges, and or repair policy)
Row
Deliver your purchase to you
Row
Send you service messages by email or text or via social media (or by such means that you have interacted with us, such as order or product updates
Row
Send you information by email or post about our new products or services if you sign up to our newsletter or marketing mailer (whether digital or otherwise)
Row
To conduct analytics, to enable us to improve our products/services and overall customer experience for our customers
Row
Fraud prevention and detection
Row
Tax refund (or similar or related) services
Date of birth information
To send you marketing information or promotion (if any) on your birthday
Row
Fraud prevention and detection
Payment information
Take payment and give refunds
Row
Fraud prevention and detection
Row
Tax refund (or similar or related) services
Contact history with us e.g. over the phone, email or on social media (or by such means that you have interacted with us)
Provide customer service and support
Row
To conduct analytics, to enable us to improve our products/services and overall customer experience for our customers
Row
Train our staff
Where applicable, information you provide when signing up for or using or when continuing to use our membership program(s) or promotional event(s) etc. (including contact details and your actual entry)
Where applicable, to facilitate or manage your participation in the membership program(s) or promotional event(s) etc.
Device information: information about your computer, phone or other device you use to view the website or app such as device type, operating system, hardware version, browser type, unique device identifier, IP address etc.
Log information: information about how you use our website or app such as the types of content you view or engage with, the frequency and duration of your activities, access times, language, your IP address and pages you visit before or after navigating away from the website.
Device and log information will not be associated with you as a named individual unless you are logged into any account you have with us (if and where applicable).
Improve our website or app and set default options for you (such as language and currency)
Row
Make sure the website or app display and function correctly on your device (e.g. make sure pages load correctly on your device and that the displayed language and currency are correct for the country you are in)
Row
Provide us with analytical information about the use of the website or app
Row
Make the website or app secure
Row
Make decisions about the pages, images and adverts to display to you on our websites and apps
Row
Associate different devices you use with each other so that the pages, images and offers you see across devices are consistent.
Row
To conduct analytics, to enable us to improve our products/services and overall customer experience for our customers
Row
Fraud prevention and detection
We ensure that the collection and use of your personal data is lawful. Therefore, for the purposes listed above, we only use your personal data if one of the following conditions apply:
Please be informed that if any personal data shared by you with us (or declared to be true by you) is later found to be false or inaccurate, we may suspend or discontinue any of our services to you without notice; or contact you to verify your personal data. In particular, we note that we may only be able to provide some services or goods to you if you meet certain legal requirements (for example, a minimum age limit etc.). In such a case, we will not be able to provide such services or goods to you if you do not meet such legal requirements; or if any personal data shared by you with us (or declared to be true by you) is later found to be false or inaccurate leading to you not being able to meet such legal requirements.
Who we share your personal data with
We share your personal data with the following categories of companies as part of being able to provide our services to you:
Some of those third-party recipients may be based outside of Thailand for further information including how we safeguard your personal data when this occurs, see Transfer of your personal data out of Thailand.
How long your personal data will be kept
We will hold on to your personal data for as long as you have your account, or as long as is needed to be able to provide the services to you, or (in the case of any contact you may have with our Customer Service teams) for as long as is necessary to provide support-related reporting and trend analysis only.
If reasonably necessary or required to meet legal or regulatory requirements, resolve disputes, prevent fraud and abuse, or enforce our terms and conditions, we may also keep hold of some of your personal data as required, even after you have closed your account or it is no longer needed to provide the services to you.
Transfer of your personal data out of Thailand
In order to process your personal data for the purposes set out in this Privacy Policy, we may transfer your personal data to third parties and other companies in our group that are based outside of Thailand.
Whenever we transfer your personal data out of Thailand, we attach a similar degree of protection to it (as it would receive in Thailand) by ensuring at least one of the following safeguards is implemented:
The transfer is based on a derogation from restrictions on transferring personal data out of Thailand (such as where you give your consent, the transfer is necessary for the performance of any services or provision of goods to, or due to or arising from or in connection with any interaction with you, or the transfer is necessary for the establishment, exercise or defence of legal claims).
Control over your personal data
Under the Thailand Personal Data Protection Act, B.E. 2562 (2019), you have several important rights available to you. In summary, those include rights to:
We try to respond to all legitimate requests soonest but within thirty (30) calendar days from the receipt of such requests. Occasionally, it may take us longer than thirty (30) calendar days if your request is particularly complex or you have made many requests. In this case, we will notify you and keep you updated.
Keeping your personal data secure
We have appropriate security measures in place to prevent your personal data from being accidentally lost, or used or accessed in an unauthorised way. We limit access to your personal data to those who have a need to know it. Those processing your personal data will do so only in an authorised manner and are subject to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
How to raise any query or concern
We hope that we can resolve any query or concern you raise about our use of your personal data. If you are not happy with how we manage your personal data, you have the right to lodge a complaint with a supervisory authority.
Changes to this Privacy Policy
Any changes we make to this Privacy Policy will be posted on this page.
How to contact us
If you wish to contact us, please email dataprotection@hthai.co.th and write "DPO" as the subject matter.