top of page
image.png

Privacy Policy
For Processes Related to Customers or Service Users
Absolute FitFood Co., Ltd.

  1. General Provisions

In compliance with the Personal Data Protection Act B.E. 2562 (2019) and its related subordinate legislation, including any future amendments ("Personal Data Protection Law"), Absolute FitFood Co., Ltd. ("the Company") has issued this Privacy Notice ("the Notice"). The purpose of this Notice is to inform you about how the Company handles your identifiable information or information that may identify you, whether directly or indirectly, according to the Personal Data Protection Law ("Personal Data"). This includes methods of collection, use, disclosure, or any operation performed on Personal Data, whether automated or not, such as recording, organizing, storing, retrieving, transferring, disseminating, or making accessible by any means, restricting or prohibiting access, transferring, deleting, or destroying ("processing"). Furthermore, this Notice aims to inform you about the purposes of processing, the retention period of Personal Data, as well as your rights as the data subject. The Company recommends that you read and understand the provisions set forth in the Notice, detailed as follows.

2. Types of Individuals Whose Personal Data is Collected by the Company

Under this Notice, the Company collects and processes personal data from various individuals, including customers who purchase products and/or use services from the Company, those who may potentially purchase products and/or use services, and similar individuals such as event participants, website users, application users, and those contacting the Company for information or services. This also includes individuals related to or representing corporate customers and those whose personal data appears in documents related to relevant processes. For further details, please refer to the Privacy Notice concerning processes related to the Company's customers.

3. Sources of Your Personal Data Collection

The Company collects and receives your personal data through various channels, such as when you communicate, inquire for information via the website, applications, telephone, email, direct meetings, or other means. This includes when you express intention to purchase products or use services from the Company, participate in marketing activities, events, or other engagements. The Company also gathers personal data from service providers of the Company, such as service providers, applications, and marketing and product/service recommendation providers. In some cases, the Company may collect your
personal data from public sources, whether disclosed voluntarily by you or consented to be disclosed by you to others.

 
3.2. In certain cases, the Company may automatically collect your personal data through various channels, such as using cookies or similar technologies.
 
3.3. When collecting your personal data, you will be informed of the details as specified in this Notice, including but not limited to the purposes and legal basis for collecting, using, disclosing, and/or processing personal data. If processing of certain personal data requires your consent under personal data protection laws, the Company will explicitly request your consent.
 
3.4. If the Company has collected your personal data before the effective date of personal data protection laws concerning the collection, use, or disclosure of personal data, the Company will continue to use your personal data for the original purposes as notified to you at the time of collection. You have the right to withdraw your consent by contacting the Company as detailed in Section 10 of this Notice. The Company reserves the right to evaluate and process your request to withdraw consent in accordance with applicable personal data protection laws.

4. Personal Data Collected

Your personal data collected and processed under this Notice, whether it is personal data you have directly provided to the Company, personal data automatically collected by the Company from you, or personal data received from third parties, includes:

4.1. Personal details such as name, surname, date of birth, age, gender, weight, height, national ID number, photograph, and signature.

4.2. Contact information such as residential address, delivery address, phone numbers, fax numbers, email addresses, Line ID, emergency contact details, and references.

4.3. Transactional details such as customer ID, order details (e.g., desired products, quantities), product details, and complaints related to products (e.g., order date, product type, branch concerned, issues encountered).

4.4. Payment information including payment amount, payment conditions, bank account numbers, credit card numbers, personal information appearing on invoices, receipts, and tax invoices.

4.5. Personal data used as evidence in various transactions or legal acts, such as personal information on copies of ID cards, passports, name change certificates, receipts, and invoices.

4.6. Technical data such as computer traffic data (logs), computer identification numbers (IP addresses), and data collected through cookies or similar technologies.

4.7. Other information such as purchasing behaviors, recorded conversations (e.g., via Line, Messenger, social media), still and motion images captured by closed-circuit television (CCTV).

5. Objectives and Legal Basis for Processing Personal Data

5.1. The company processes your personal data for various purposes under legal bases as follows (collectively referred to as "specified purposes")

Order

Specified Objectives

Legal basis for processing

(a) Purpose related to selling products and providing services to customers, as well as other related operations

(1)

To register orders for products and/or services.

Contractual Basis: The processing of personal data of customers is essential to carry out customer requests, particularly for the registration of new customers.

(2)

For the purpose of entering into contracts for the purchase of goods and services

Contractual Basis: Processing customer personal data is necessary for the performance of a contract and other related processes involved in contract initiation

(3)

For the purpose of managing customer orders, preparing goods and/or services, and conducting related operations

Contractual Basis: Processing customer personal data is necessary for the performance of contractual obligations where the customer is a party to the contract, such as preparing and delivering goods, and issuing receipts to customers.

For the purpose of handling amendments to customer details and managing complaints

Legal Basis: Processing customer personal data is necessary for the legitimate interests pursued by the company, to facilitate accurate and current updates to customer details and ensure clarity, thereby enhancing service quality in response to customer complaints or suggestions.

(4)

(b) Purpose related to communication and marketing activities

(1)

For the purpose of communicating and promoting the company's marketing activities

Legal Basis: Processing personal data is necessary for the legitimate interests pursued by the company in communicating with you regarding presentations and various services offered by the company.
Consent Basis: The company will carry out any marketing activities, such as sending marketing communications to you or capturing still or moving images of you for processing and promoting marketing activities through various media channels, based on your consent obtained.

(c) Purpose related to data analysis and the enhancement of the quality of products and services offered by the company.

(1)

For the purpose of analyzing data and studying the behaviors of customers or similar individuals

Consent Basis: The company will conduct interviews and observe the behaviors of customers to request the collection of personal data, or purchase personal data from external parties, for the purpose of analyzing data and studying customer behaviors. The company will proceed based on the consent obtained from customers or similar individuals.

(2)

For the purpose of analyzing usage of your website, application, or other channels

Legal Basis: Processing your personal data from the usage of your website, application, or other channels is necessary for the legitimate interests pursued by the company in conducting business and improving service quality.
Consent Basis: In cases where the company processes your personal data to analyze behaviors and conduct targeted advertising based on your behaviors, the company will proceed based on the consent obtained from you.

(d) Purpose related to performing legal duties applicable to the company and establishing legal claims

(1)

For the purpose of complying with relevant laws or regulations applicable to the company.

Legal basis: For compliance with laws that are enforceable upon the company, such as personal data protection laws, tax laws, labor laws, social security laws, etc.

(2)

For the purpose of establishing legal claims and undertaking related actions

Legal basis: Processing personal data is necessary for establishing legal claims, conducting or defending against legal claims, or initiating legal proceedings, including investigations and inquiries by government authorities, preparing legal cases, conducting litigation, and defending legal claims in court proceedings, among others.

For any necessary and beneficial operations related directly to the objectives specified above.

(e) Purpose related to maintaining security and safety

(1)

For the purpose of monitoring, maintaining order, and ensuring the safety of the company's personnel and assets, as well as the general public.

Legal Basis: The processing of personal data is necessary for the legitimate interests of the company in monitoring, maintaining order, and ensuring the security of the company's assets and the general public. For example, using CCTV footage to prevent loss or damage to the company's assets and those of the general public. Basis for protecting against or preventing threats to life, body, or health of individuals: The processing of personal data is necessary for the benefit of monitoring, protecting, or preventing incidents that may pose a threat to the life, body, or health of individuals.

(f) Any necessary and beneficial actions for you, and any other objectives

(1)

Legal Basis: The processing of personal data is necessary for the legitimate interests pursued by the company in carrying out any necessary operations of the company and/or for your benefit or directly related to the objectives specified above. Where the law
requires specific consent for processing personal data concerning you, the Company will seek your explicit consent.

For any other purposes for which the Company will notify you.

(2)

The Company will inform you of any other purposes for which it needs to process your personal data beyond those specified above, or in case the Company modifies the original purposes specified. Where the law requires specific consent for processing certain categories of personal data, the Company will seek your explicit consent.

5.2  In the event that the Company processes your personal data in a manner and/or for purposes that are not consistent with those specified above, the Company will establish additional policies or notices regarding personal data protection and/or send you a letter to explain the processing of data in such a manner. You should read any additional policies or notices related to this statement and/or such letter (as applicable) alongside this statement.

6. Disclosure of Personal Data

6.1. The company may disclose your personal data for the following purposes and in accordance with the legal criteria provided to individuals and organizations as follows:

(a) Affiliated companies, both domestically and internationally, including executives, directors, employees, and/or personnel within these companies as far as necessary for processing your personal data.

(b) Business partners, service providers, and data processors appointed or engaged by the company to manage/process personal data for various services such as IT services, data recording, payment services, postal services, courier services, printing services, healthcare services, insurance services, training services, data analysis, research, marketing, or other services beneficial to you or related to the company's business operations, including commercial banks, hospitals, life insurance companies, and fire insurance companies.

(c) Consultants of the company, such as legal consultants, lawyers, auditors, marketers, or other experts both within and outside the company.

(d) Government agencies responsible for supervision under the relevant laws or requesting disclosure of personal data by law enforcement powers, such as the Revenue Department, Social Security Office, Department of Local Administration, Office of the Personal Data Protection Committee, Police Department, Office of the Attorney General, Courts, and the Department of Special Investigation.

(e) Customers, business partners, contractual parties of the company with whom you communicate or are involved in your role or position, or other individuals similar in nature.

(f) Other individuals or organizations to whom you have consented to disclose your personal data, such as disclosing event processing activities through various media channels of the company to the general public.

6.2 Disclosure of your personal data to others will be carried out solely for specified purposes or other purposes permitted by law. In cases where consent is required by law, the Company will request your consent beforehand.

6.3. When disclosing your personal data to others, the Company will implement appropriate measures to protect the disclosed personal data and comply with standards and responsibilities regarding the protection of personal data as required by applicable laws. In cases where the Company transfers your personal data abroad, the Company will ensure that the destination country, international organization, or recipient in another country adheres to sufficient data protection standards or will ensure that the transfer of your personal data abroad complies with criteria stipulated by laws regarding the protection of personal data. In some instances, the Company may seek your consent for such transfer or disclosure of your personal data to the aforementioned foreign entities.

7. Retention Period of Personal Data

The Company will retain your personal data for as long as necessary to achieve the purposes specified in processing such personal data. The retention period of your personal data will vary depending on the specific purposes of processing. Additionally, the Company will retain personal data for a period required by applicable laws, considering statutory limitation periods for potential legal claims arising from or related to documents or personal data collected by the Company in each case. Taking into account the Company's internal policies, industry practices, and the importance of each type of personal data, the Company will retain your personal data for a period not exceeding 10 years from the date your legal relationship with the Company ends. However, the Company may retain your personal data for a longer period if permitted by law or if necessary for the establishment, exercise, or defense of legal claims against the Company after the aforementioned retention period has expired. After the expiration of the aforementioned retention period, the Company will delete or destroy such personal data from its storage or systems, as well as from those of any third parties providing services to the Company (if applicable), or render your personal data unidentifiable unless the Company is permitted by applicable data protection laws or other relevant laws to continue retaining such personal data. For further details regarding the retention period of your personal data, you may contact the Company as specified in Section 8 of this Notice.

8.    Your Rights Regarding Personal Data

As the data subject, you have various rights related to your personal data under the criteria, procedures, and conditions of the Personal Data Protection Law. If you wish to exercise your rights, you may contact the Company using the contact details provided in Section 8 of this Notice.

8.1. Right to Access Personal Data: You have the right to access your personal data and request a copy from the Company, as stipulated by the Personal Data Protection Law.
 

8.2. Right to Data Portability: You have the right to receive your personal data and request the transfer of your personal data to another data controller or yourself, unless it is not feasible by nature, as stipulated by the Personal Data Protection Law.
 

8.3. Right to Object to Data Processing: You have the right to object to the processing of your personal data in cases stipulated by the Personal Data Protection Law.
 

8.4. Right to Erasure: You may request the Company to delete, destroy, or anonymize your personal data in cases stipulated by the Personal Data Protection Law.
 

8.5. Right to Restrict Data Processing: You have the right to request the Company to restrict the processing of your personal data in cases stipulated by the Personal Data Protection Law.
 

8.6. Right to Rectification: You have the right to request the correction of your personal data if it is incorrect, outdated, incomplete, or misleading.
 

8.7. Right to Withdraw Consent: Where the Company relies on your consent to process your personal data, you have the right to withdraw your consent at any time.
 

8.8. Right to Lodge a Complaint: If you have any concerns or questions about the Company's practices regarding your personal data, please contact the Company using the contact details provided in Section 10 of this Notice. If you believe the Company has violated the Personal Data Protection Law, you have the right to file a complaint with the expert committee appointed by the Personal Data Protection Committee, following the procedures stipulated by the Personal Data Protection Law. The Company reserves the right to consider and respond to your request in accordance with the Personal Data Protection Law.

9. Governing Law

This notice shall be governed by and interpreted in accordance with Thai law, and the Thai courts shall have jurisdiction over any disputes arising hereunder.

10. Contacting the Company

Absolute Fit Food Co., Ltd. is the coordinator for the company’s personal data protection. If you have any questions or wish to exercise your rights as specified in this notice, you can contact the company through the following channels:

Absolute Fit Food Co., Ltd. and Data Protection Officer (DPO)
Email: absolutefitfood.pdpa@gmail.com
Address:
6 Somkid Place, Soi Somkid Ploenchit Road, Lumpini, Pathumwan, Bangkok, 10330 Thailand
Phone: 
098 280 4793 or 081 371 3721

11. Changes to This Notice

The Company may amend this notice from time to time to comply with any changes related to the processing of your personal data and as required by the Personal Data Protection Act or other relevant laws. The Company will inform you of any significant amendments to this notice along with the updated version through appropriate channels. We recommend that you periodically review this notice for any changes.

bottom of page