Privacy policy for customers
Four Twenty Co., Ltd. takes the protection of your personal information seriously. This privacy policy explains the guidelines for collecting, using, or disclosing personal information. Including various rights of the owner of personal data. According to the personal data protection law
Collection of personal information
We collect personal information received from our third-party analytics provider, Google Analytics.
Types of personal information collected
Account information such as user accounts, Usage history, etc.
Technical information such as IP address, Cookie ID, website usage history (Activity Log), etc.
Other information such as pictures, animations and any other information that is considered personal information according to personal data protection laws.
Minor
If you are under 20 years of age or have limited legal capacity. We may collect, use or disclose your personal information. We require your parents' consent or where permitted by law. If we become aware that personal information has been collected from a minor without parental or guardian consent. We will proceed to delete that information from our servers.
How to store personal information
We will retain your personal information in electronic form.
We store your personal information at the following locations:
Processing of personal data
We will collect, use or disclose your personal information for the following purposes.
Personal data storage period
We will retain your personal data for the period necessary while you are a customer or relationship with us or for the period necessary to fulfill the purposes related to this policy. This may need to be preserved thereafter. Where required by law, we will delete, destroy or anonymize your personally identifiable information. When it is no longer necessary or the said period ends.
Rights of the owner of personal data
Under the Personal Data Protection Law You have the right to do the following:
Rights to withdraw consent if you have given consent We will collect, use or disclose your personal information. Whether your consent was given before the effective date of the Personal Data Protection Law or after. You have the right to withdraw your consent at any time.
Rights to access You have the right to request access to your personal information which is under our responsibility and to request that we make a copy of that information for you. Including asking us to disclose how we obtained your personal information.
Rights to data portability You have the right to request your personal data in cases where we have made it available in a format that can be read or used by a tool or device that can be operated by Automatic and can use or disclose personal information by automatic means Including the right to request that we send or transfer personal data in such form to another data controller when this can be done by automatic means. and have the right to request personal data that we send or transfer personal data in such form directly to another data controller unless unable to proceed due to technical reasons.
Rights to object You have the right to object to the collection, use or disclosure of your personal information at any time. If the collection, use, or disclosure of your personal data is carried out in order to carry out operations that are necessary under our legitimate interests or those of another person or legal entity. To the extent that you can reasonably expect it or to carry out our mission in the public interest.
Rights to erase or destroy data You have the right to request erasure or destruction of your personal data or to make your personal data non-personally identifiable. If you believe that your personal information has been collected, used or disclosed in violation of relevant laws or that we no longer need to retain it for the purposes involved in this policy. or when you have exercised the right to withdraw consent or exercised the right to object as stated above.
Rights to request restriction of processing You have the right to request a temporary suspension of the use of your personal data in cases where we are investigating your request for correction of your personal data or your objection. Otherwise, we are no longer required to delete or destroy your personal data in accordance with applicable law, but you request us to suspend use instead.
Rights to rectification You have the right to request rectification of your personal information to be accurate, current, complete, and not misleading.
Rights to lodge a complaint You have the right to lodge a complaint with the relevant legal authority. If you believe that the collection, use or disclosure of your personal information is an act in a manner that violates or fails to comply with relevant laws.
You can exercise your rights as the owner of personal data above. By contacting our Personal Data Protection Officer according to the details at the end of this policy. We will notify you of the results within 30 days from the date we receive your request to exercise your rights. According to the form or method that we specify. If we reject the request, we will inform you of the reason for the denial through various channels such as text message (SMS), email, telephone, letter, etc.
Advertising and marketing
We may send you information or newsletters or messages to your email address for the purpose of offering you something interesting. If you no longer wish to receive communications from us via email. You can contact us by You can "unsubscribe" via our email.
We may use your contact information for marketing advertising through third party service providers whose privacy policies will depend on that service provider.
Maintaining the security of personal information
We will maintain the security of your personal information in accordance with confidentiality principles. (Confidentiality), accuracy, completeness (Integrity) and ready-to-use condition. (Availability) This is to prevent loss, access, use, change, correction or disclosure. In addition, we will provide measures to maintain the security of personal information. which covers administrative preventive measures (Administrative Safeguard), technical protection measures (Technical Safeguard) and physical protection measures (Physical Safeguard) regarding access or control of use of personal information (Access Control)
Notification of personal data breach
In the event that there is a violation of your personal information. We will notify the Office of the Personal Data Protection Commission immediately within 72 hours from becoming aware of the incident, as far as possible. Where the breach has a high risk of adversely affecting your rights and freedoms. We will notify you of the violation and provide remedies without delay through various channels such as website, SMS, email, phone call or letter, etc.
Changes to the Privacy Policy
We may change this policy from time to time. You can know the revised terms and conditions of this policy through our website.
This policy was last revised and is effective from 17th October 2023
Privacy policies of other websites
This Privacy Policy applies only to the offering of products, services and use of the website to our customers. If you visit another website even through our website. The protection of personal information is subject to the privacy policies of those websites with which we are not affiliated.
Contact details
If you would like to inquire about this privacy policy Including requesting to exercise various rights, you can contact us or our Personal Data Protection Officer as follows.
Personal data controller Four Twenty Co., Ltd.
address: 1848/3 Soi Kasemrad, Rama 4 Road, Klongtoey District, Klongtoey sub-District, Bangkok 10110
Email [email protected]
Website https://fourtwenty.ltd
Telephone number: 0837827853