Privacy Policy

Privacy Policy - Care Friend (Thailand) Company Limited

Care Friend (Rose Innovation Company Limited), hereinafter referred to as the "Company" or "We," recognizes the paramount importance of safeguarding Personal Data. In compliance with the provisions of the Personal Data Protection Act B.E.2562 ("PDPA"), the Company hereby issues this Privacy Notice (the "Privacy Notice") to elucidate the protocols governing the collection, aggregation, processing, and utilization of Personal Data (as defined hereunder) of visitors to the Company's online platform, registered users, and individuals availing themselves of the Company's services (referred to as "User" or “You”). The Company's services primarily involve providing an online platform for booking beauty and salon services (the "Services").

Scope of the Privacy Notice

This Privacy Notice exclusively applies to the direct processing of Personal Data by the Company in the provision of Services through our website, mobile application, and various other communication channels collectively referred to as the “Platform.” It should be noted that this Privacy Notice does not extend to the processing of Personal Data by any third-party services, including our merchant partners providing beauty, salon, and massage services through our Platform (the "Partner"). The Company lacks the authority to regulate the processing of Personal Data by such third parties. Therefore, Users are strongly advised to thoroughly review the privacy notices of these third parties, distinct from the present Privacy Notice.

Acceptance and Amendment of the Privacy Notice

By accessing the Platform, registering for a user account, or utilizing our Services, the User implicitly acknowledges and accepts this Privacy Notice. The Company retains the right to amend this Privacy Notice periodically to ensure compliance with pertinent laws and changes in the Services. Any modifications to this Privacy Notice will be duly communicated to Users through our established communication channels.

Personal Data Collection Methods

The Company may collect the User’s Personal Data through various methods, including:

1. Automatic collection by the system upon the User's visit to the Platform
2. Direct receipt or collection from the User through various channels, including communication via designated channels, user registration on the Platform, or participation in the Company's promotional activities
3. Indirect collection from social media or external service providers engaged by the Company, among others, subject to prior notice to the User regarding the specific sources of information.

Types of Personal Data Processed

For the purposes of delivering the Services and operating the business, the Company collects and processes various categories of Personal Data, including but not limited to:

1. General information: full name, sex, profile picture, date of birth, username, and password
2. Contact information: e-mail, phone number, social media accounts, and delivery addresses for relevant Services
3. Technical information: IP address, log-in information, browser type, device details, cookies, and other technical analytics
4. Payment Information: bank account details, payment records, and transaction specifics
5. Transaction Information through Platform: order details, purchasing history, feedback, and usage preferences
6. Usage Information: purchasing behavior, search activity, visit logs, and other transaction details
7. Communication Information: communication and interaction logs across various channels, including phone, email, and social media
8. Other Personal Data: additional information provided for promotional events, satisfaction reviews, or for the utilization of the Platform.

Purpose of Personal Data Processing and Retention Period

The Company processes Personal Data for various lawful purposes, including:

1. Performance of contractual obligations
2. Compliance with legal obligations
3. Protection of the Company's legitimate interests
4. User consent-based processing.

The Company retains Personal Data for the duration necessary to fulfill the aforementioned purposes, as outlined in detail within the Privacy Notice.

Disclosure of Personal Data

Personal Data is shared with third parties on a need-to-know basis, including:

1. Partners providing relevant services
2. External service providers engaged in supporting the Company's operations
3. Other Users in cases of shared feedback or interaction
4. Government authorities in compliance with applicable laws
5. Third parties with explicit User consent.

Information Security Measures

The Company has implemented stringent security measures to prevent unauthorized access, loss, or disclosure of Personal Data. Regular monitoring and review of security protocols are conducted to ensure compliance with the Company's information security policy and guidelines. Any breaches detected are promptly addressed and reported to relevant authorities and affected data subjects, as required by law.

Data Subject Rights

Users hold certain statutory rights under the PDPA, including:

1. Right to withdraw consent
2. Right to access and copy Personal Data
3. Right to data portability
4. Right to object to processing
5. Right to request deletion or de-identification of Personal Data
6. Right to request suspension of processing
7. Right to request rectification of Personal Data.

Processing of Minor's Personal Data

The Company does not intend to collect Personal Data from Users under the age of 13. If any legal guardian becomes aware of their minor providing Personal Data, they should contact the Company to provide consent for the use of Personal Data in accordance with this Privacy Notice. In the event of unauthorized collection of Personal Data from individuals under 13, the Company will promptly remove such Personal Data from its systems.

Contact Information

For any requests related to the exercise of data subject rights or for inquiries, suggestions, or complaints concerning this Privacy Notice, Users may contact the Company's Personal Data protection unit through the following channels:

Care Friend (Rose Innovation Company Limited) 8 Ramintra 81/1 Kannayao,, Bangkok E-mail: hello@carefriend.co