Privacy Policy

TONOW GROUP CO., LTD. places importance on the protection of your personal data. This Privacy Policy describes our practices regarding the collection, use or disclosure of personal data, as well as the various rights of data subjects, in accordance with the personal data protection law.

We will collect personal data received directly from you through the following channels:

• Membership registration
• Telephone, email
• Facebook Login
• Google Login
• LINE Login
• Twitter Login
• LinkedIn Login

We may collect your personal data that we can access from other sources, such as search engines, social media, government agencies, other third parties, etc.

• Personal information, such as first name, last name, age, date of birth, nationality, national identification number, passport, etc.
• Contact information, such as address, telephone number, email, etc.
• Account information, such as user account, usage history, etc.
• Proof of identity, such as a copy of the national identification card, a copy of the passport, etc.

Transaction and financial information, such as purchase history, credit card details, bank account, etc.

• Technical information, such as IP address, Cookie ID, website usage history (Activity Log), etc.
• Other information, such as photographs, moving images, and any other information considered personal data under the personal data protection law.

We will collect, use or disclose the following sensitive personal data when we have received your explicit consent, unless otherwise permitted by law:

Biometric data, such as facial image data, iris scan data, fingerprint data, and any other data affecting your personal data as prescribed by the Personal Data Protection Committee.

If you are under 20 years of age or have restricted legal capacity, we may collect, use or disclose your personal data; we may need your parent or guardian to give consent, or [do so] as permitted by law. If we learn that personal data has been collected from a minor without the consent of a parent or guardian, we will delete such data from our servers.

We will store your personal data in documentary and electronic form. We store your personal data as follows:

• Server providers in Thailand
• Server providers abroad

We will collect, use or disclose your personal data for the following purposes:

• To create and manage user accounts
• To deliver products or services
• To improve products, services or user experience
• For the Company's internal administration
• For marketing and sales promotion
• For after-sales service
• To collect feedback
• To make payment for products or services
• To comply with the agreements and conditions (Terms and Conditions)
• To comply with the laws and regulations of government agencies

We may disclose your personal data within the Company to the extent necessary to improve and develop our products or services. We may combine information internally for the various products or services under this policy for the greater benefit of you and others.

We may disclose certain of your personal data to our service providers to the extent necessary to carry out operations in various areas, such as payment, marketing, product or service development, etc. In this regard, the service providers have their own privacy policies.

We may disclose certain information to business partners in order to contact and coordinate in the provision of products or services, and to provide information, to the extent necessary, regarding the availability of products or services.

We may disclose information, including your personal data, for corporate restructuring, a merger or sale of business, or other transfer of assets, whereby the transferee must treat your information in a manner consistent with this policy, as well as the personal data protection law.

Where required by law or requested by a government agency, we will disclose your personal data, to the extent necessary, to government authorities, such as courts, government agencies, etc.

We may disclose or transfer your personal data to persons, organisations or servers (Server) located abroad, whereby we will implement various measures to ensure that the transfer of your personal data to the destination country is subject to an adequate standard of personal data protection, or in other cases as prescribed by law.

Where personal data is disclosed or transferred from the European Economic Area (EEA) to the United States and other countries outside the European Economic Area (Non-EEA), we will put in place appropriate measures for the transfer of personal data to such foreign countries as required by the European Union personal data protection law (GDPR) or as permitted by law.

Under the personal data protection law, you have the right to take the following actions:

Right to withdraw consent (right to withdraw consent): If you have given consent for us to collect, use or disclose your personal data, whether such consent was given before the date on which the personal data protection law came into force or thereafter, you have the right to withdraw your consent at any time.

Right of access (right to access): You have the right to request access to your personal data under our responsibility and to request that we make a copy of such data for you, as well as to request that we disclose how we obtained your personal data.

Right to data portability (right to data portability): You have the right to receive your personal data where we have arranged such personal data in a format that is readable or usable by automatic tools or devices and can be used or disclosed by automated means, as well as the right to request that we send or transfer the personal data in such format to another data controller where this can be done by automated means, and the right to receive the personal data that we send or transfer in such format to another data controller directly, unless this cannot be done for technical reasons.

Right to object (right to object): You have the right to object to the collection, use or disclosure of your personal data at any time if the collection, use or disclosure of your personal data is carried out for operations necessary under our legitimate interests or those of another person or juristic person, not exceeding the scope that you could reasonably expect, or for the performance of a task carried out in the public interest.

Right to erasure or destruction (right to erasure/destruction): You have the right to request the deletion or destruction of your personal data, or to have your personal data made into data that cannot identify you, if you believe that your personal data has been collected, used or disclosed unlawfully under the relevant laws, or consider that we no longer need to retain it for the relevant purposes in this policy, or when you have exercised your right to withdraw consent or your right to object as stated above.

Right to restriction of processing (right to restriction of processing): You have the right to request the temporary restriction of the use of your personal data where we are in the process of examining your request to exercise the right to rectification of personal data or your objection, or in any other case where we no longer need your personal data and must delete or destroy it in accordance with the relevant laws but you request that we restrict its use instead.

Right to rectification (right to rectification): You have the right to request that your personal data be corrected so that it is accurate, up to date, complete and not misleading.

Right to lodge a complaint (right to lodge a complaint): You have the right to lodge a complaint with the competent authority under the relevant laws if you believe that the collection, use or disclosure of your personal data is an act that violates or does not comply with the relevant laws.

If you are in the European Economic Area (EEA), in addition to the rights of the data subject stated above, you have the right to lodge a complaint with the personal data protection authority in your country if you believe that we have not complied with the laws on personal data protection.

You may exercise your rights as a data subject stated above by contacting our Data Protection Officer as detailed at the end of this policy. We will notify you of the outcome within 30 days from the date on which we receive your request to exercise your rights, in accordance with the form or method we prescribe. In this regard, if we refuse the request, we will inform you of the reasons for the refusal through various channels, such as text message (SMS), email, telephone, letter, etc.

For practices regarding the processing of personal data under the California Consumer Privacy Act of 2018, United States (CCPA), please see the California Consumer Privacy Policy (CCPA Privacy Policy).

For the benefit of receiving our products or services, we use your information to analyse and improve products or services and to conduct marketing through Google, Facebook, pixel tracking code and others. We use such information so that the products or services are suited to you.

Our website may display advertisements from third parties to facilitate our services, such as Google AdSense and BuySellAds. These third parties may access your personal data only to carry out these activities and are obliged not to disclose it or use it for any other purpose.

We will not use automated decision-making (automated decision-making) without human oversight, including profiling (profiling), in a manner that has a significant effect on you.

We may send information or newsletters to your email for the purpose of offering things of interest to you. If you no longer wish to receive communications from us by email, you may click "Unsubscribe" in the email link or contact us at our email address.

To make your user experience more complete and effective, we use cookies (Cookies) or similar technologies to improve access to products or services and appropriate advertising, and to track your usage. We use cookies to identify and track users of the website and access to our website. If you do not wish to have cookies placed on your computer, you may set your browser to refuse cookies before using our website.

We will maintain the security of your personal data in accordance with the principles of confidentiality (confidentiality), integrity (integrity) and availability (availability), in order to prevent loss, access, use, alteration, modification or disclosure. In addition, we will put in place personal data security measures covering administrative safeguards (administrative safeguard), technical safeguards (technical safeguard) and physical safeguards (physical safeguard) with respect to access to or control over the use of personal data (access control).

We may amend this policy from time to time, and you may learn of the amended terms and conditions of the policy through our website. This policy was last amended and is effective from 31 October 2024 (B.E. 2567).

This Privacy Policy applies only to the offering of products and services and to use of the website by our customers. If you visit other websites, even through our website, the protection of personal data will be governed by the privacy policy of that website, with which we have no involvement.

If you wish to make enquiries about this Privacy Policy, including requests to exercise your rights, you may contact us or our Data Protection Officer as follows:

Data Controller
TONOW GROUP CO., LTD.
4, 4/5 Central Tower, 12th Floor, Room S-09, Ratchadamri Road, Pathum Wan, Pathum Wan, Bangkok 10330, Thailand
Email support@tonow.net
Website www.tonow.net
Telephone number 020797499

Data Protection Officer
DPO Team
4, 4/5 Central Tower, 12th Floor, Room S-09, Ratchadamri Road, Pathum Wan, Pathum Wan, Bangkok 10330, Thailand
Email support@tonow.net
Website www.tonow.net
Telephone number 020797499

TONOW GROUP CO., LTD. places importance on the privacy and security of your personal data. This Privacy Policy describes the practices for the collection, use or disclosure of personal data relating to residents of the State of California in accordance with the California Consumer Privacy Act (CCPA) of 2018.

Identifiers, such as first name, last name, gender, nationality, national identification card, passport, contact information, etc.

Personal information under the California personal data protection law, such as financial information, credit card details, bank account, etc.

Characteristics of protected classifications under California or federal law, such as disability or other physical characteristics, etc.

Commercial information, such as information on purchases of products or services, etc.

Internet or other electronic network activity, such as browsing history, search history, etc.

Geolocation data, such as location, etc.

Audio, electronic, visual or similar information, such as audio and video recordings, etc.

• Professional or employment-related information, such as work history, etc.
• Education information, such as level of education, certificates, etc.
• Other information, such as profiles, preferences or characteristics, etc.

Sources of information include information you provide to us directly, interactions between you and us, and information from business partners or service providers, etc.
We use personal data for the following business purposes:

• To create and manage user accounts
• To deliver products or services
• To improve products, services or user experience
• For the Company's internal administration
• For marketing and sales promotion
• For after-sales service
• To collect feedback
• To make payment for products or services
• To comply with the agreements and conditions (Terms and Conditions)
• To comply with the laws and regulations of government agencies

You have the right to request that we disclose our collection, use or disclosure of your personal data over the past 12 months, including the categories of personal data, the purposes of processing the personal data, the categories of sources of the data, the categories of third parties to whom we disclose the data for business purposes, and our purposes for doing so.

You have the right to request that we delete your personal data that we have collected or retained. To exercise the right to deletion of personal data, you may send a request to our email. In this regard, please specify the personal data that you wish to have deleted, or you may request that we delete all of your personal data as prescribed by the CCPA.

The CCPA prohibits discrimination against California residents for exercising their rights under the CCPA, as follows: you will not be discriminated against for exercising your rights under the CCPA.

If you wish to make enquiries about this Privacy Policy, including requests to exercise your rights, you may contact us as follows:

TONOW GROUP CO., LTD.
4, 4/5 Central Tower, 12th Floor, Room S-09, Ratchadamri Road, Pathum Wan, Pathum Wan, Bangkok 10330, Thailand
Email support@tonow.net
Website www.tonow.net
Telephone number 020797499