Privacy Policy

Personal Data refers to any information related to an individual that enables the identification of that person, whether directly or indirectly. However, it does not include information about deceased individuals.

Specifically, the types of personal data we collect include:

Identity Information, such as name, age, nationality, and date of birth.
Contact Information, such as address, location, phone number, and email.
Account Information, such as payment details and bank account information.
Transaction Information, such as service history and purchase records.
Personal Information, such as username, password, purchase history, and your interests in our services.
Technical Information, such as Google Analytics data, IP address, login details, usage data, and system settings (logs).
Marketing Information, such as your satisfaction with the services received and feedback on service quality.

Sources of Personal Data

We collect your personal data from two sources as follows:

Directly from You – We collect your personal data through the following service processes:
- When you register an account to use our services or submit a request to exercise your rights.
- When you subscribe to receive advertising or marketing information from us.
- When you voluntarily participate in surveys.
- When we collect data on your platform usage through browser cookies.
- When you make inquiries or communicate with us via email or other communication channels, such as phone calls, allowing us to respond to you.
- When you purchase services or products from us.
- When you log into your user account on our platform or related applications, such as Facebook and Google.
From Third Parties – We receive your personal data from third-party sources, including Facebook Login, Google Login, LINE Login, and Email & Password Login. This data is collected when you register or access our system through these third-party authentication services.

Purposes of Data Processing

We collect your personal data for the following purposes:

To maintain a database for analysis and to offer benefits tailored to your interests.
To process payments for services or products you purchase through our system.
To facilitate post-service communications, such as inquiries, feedback collection, or submitting requests to service providers.
To verify your identity and ensure that only you can access your account.
To conduct market research and manage the relationship between service providers and users.
To comply with legal requirements and government regulations.
To fulfill regulatory obligations applicable to the service provider, including the right to transfer personal data to its business group, partners, data processors, or any contracted entities.

Processing of Personal Data

Once we receive your personal data, we will proceed as follows:

The company will collect and retain only the necessary information about you, depending on the type of service or activity you engage in through the company’s website. The data will be used as needed and appropriately or in ways that benefit you.
Personal data collection and storage will be conducted within the company’s own computer server system. Therefore, any data the company receives will be used solely for the company’s legal operations, and strict security measures will be implemented to protect your information.
Your collected personal data will be used in accordance with the purposes outlined in the “Purposes of Data Processing” section.
The company may disclose your data to employees under contract with relevant responsibilities, on the company’s platform, or through social media channels for advertising purposes.

Retention and Storage Period of Personal Data

The data controller retains your personal data as follows:

Personal data collected by the company is stored in the form of a soft copy.
The data will be stored on the company’s devices, including computers and mobile phones, as well as on the company’s computer server system.
The retention period follows the guidelines outlined in the “Duration of Personal Data Processing” section.

Data Retention Period

No.	Type/Category of Personal Data	Processing Duration
1	Identifying information (e.g., name, age, nationality, date of birth)	10 years from the transaction date
2	Contact information (e.g., address, contact location, phone number, email)	10 years from the transaction date
3	Account information (e.g., payment details and bank account)	3 years from the transaction date
4	Transactional information (e.g., service history, purchase history)	10 years from the transaction date
5	Personal information (e.g., username, password, purchase history, interests in the service provider’s services)	10 years from the transaction date
6	Technical information (e.g., Google Analytics, IP address, login data, usage data, and log settings)	3 months from the transaction date
7	Marketing information (e.g., customer satisfaction with services received and feedback on personnel services)	3 years from the transaction date

Rights of Data Subjects

You have the following rights regarding your personal data:

Right to be informed: You have the right to be informed when your personal data is collected, including relevant details such as how it is stored and the retention period.
Right to withdraw consent: You have the right to withdraw your consent for the processing of your personal data at any time while your data is in our possession.
Right of access: You have the right to access your personal data and request a copy of it, as well as request information on how your personal data was obtained if you did not provide consent for its collection.
Right to rectification: You have the right to request corrections to inaccurate data or to complete any incomplete personal data.
Right to erasure: You have the right to request the deletion of your personal data under certain circumstances.
Right to restriction of processing: You have the right to restrict the processing of your personal data under certain circumstances.
Right to data portability: You have the right to request the transfer of your personal data to another data controller or to yourself under certain circumstances.
Right to object: You have the right to object to the processing of your personal data under certain circumstances.

You may contact our DPO (Data Protection Officer) or Data Controller to submit a request to exercise any of the above rights. (Contact details can be found in the “Contact Information” section below.) There is no fee for exercising these rights, and we will review your request and notify you of the decision within 30 days from the date we receive your request.

Submitting Requests for Personal Data Management

If you wish to submit a request to manage your personal data, including requesting access to your personal data, rectification of personal data, withdrawal of consent for personal data processing, or providing feedback on services, you may contact our Data Protection Officer (DPO) using the details provided in the “Contact Information” section.

Marketing Activities

During your use of our services, we may send you information related to marketing activities, promotional campaigns, products, and services that we believe may interest you for the purpose of providing efficient services. If you have agreed to receive such information from us, you have the right to withdraw your consent at any time. You can cancel your consent to receive notifications by contacting us at the email address: pdpa@sbo-brand.com.

Privacy Policy of Other Websites

This privacy policy applies only to our services and the use of our website. If you click on a link to another website, even through our website, you should review and follow the privacy policy of that website separately from ours.

Changes to the Privacy Policy

We will regularly review our privacy policy to ensure compliance with relevant practices and regulations. If there are any changes to the privacy policy, we will inform you by updating the information on our website as soon as possible. The most recent review of this privacy policy was conducted on 13/09/2021, and it will take effect from 13/09/2021 onward.

Contact Information

Data Controller Details
Name: The Signature Brand Co., Ltd.
Address: The Signature Brand Co., Ltd., 771 Pracha Uthit Road, Samsen Nok, Huai Khwang, Bangkok 10310
Contact: 02-2743434 Ext. 203 or Email: pdpa@sbo-brand.com
Website: tecnogasthai.com

Data Protection Officer (DPO) Details
Name: Ms. Tadcha Sukaboon
Address: The Signature Brand Co., Ltd., 771 Pracha Uthit Road, Samsen Nok, Huai Khwang, Bangkok 10310
Contact: 02-2743434 Ext. 203 or Email: pdpa@sbo-brand.com

Supervisory Authority Details
In case any of our employees or related parties violate or fail to comply with data protection laws, you can file a complaint with the regulatory authority as follows:
Name: Personal Data Protection Commission
Address: 7th Floor, State Administrative Building, Government Complex, Chalermprakiet 80th Anniversary, Chaeng Watthana Road, Thung Song Hong, Lak Si, Bangkok 10210
Contact: (+66) 02-142-223

Short Version of Data Processing Notification

The personal data to be processed is detailed in the Privacy Policy under the sections “Personal Data We Collect” and “Data Retention Period.”

Purpose and Legal Basis for Data Processing

The purpose and basis for processing personal data are outlined in the Privacy Policy under the section “Purpose of Data Processing.” We process your personal data based on the following grounds:

Performance of a Contract: This includes sending receipts to users via email after purchasing services from the company or transferring money to the user’s bank account, as well as other contracts the data subject has entered into with the company.
Consent: As granted by you when signing up for services. You can withdraw your consent at any time by notifying the Personal Data Protection Officer (DPO), as specified above. This includes requesting the deletion or anonymization of your personal data.

Method of Withdrawing Consent

The methods for withdrawing consent include:

Electronic Channels: Such as email or website.
Verbal Notification: Such as via phone or in person to personnel.
Written Notification: Through formal written communication.

Once the personnel receives your request, it will be forwarded to the data management team for further processing. The service provider cannot retain your personal data without consent unless for the following purposes:

For Essential Public Interests: To prevent or address risks to life, health, or physical safety of individuals.
For Historical Documentation, Archiving, Research, or Statistical Purposes.
For Compliance with Contractual Obligations: When the data subject is a party to a contract.
For Compliance with Legal or Regulatory Requirements: As mandated by government regulations or exercising public authority by the data controller.
For Legitimate Legal Interests: Of the service provider, data controller, or another legal entity, unless those interests are outweighed by the fundamental rights and freedoms of the data subject.
For Public Interest: As pursued by the data controller.

Source of Personal Data: We collect your personal data in the following cases:

When you access or use our website services, register, or create an account with us.
When you submit forms, including registration forms or other forms related to our products and services, whether online or in physical form.
When you enter into agreements or provide documents or other information related to interactions between you and us, or when you use our products and services.
When you contact us, such as via phone (which may be recorded), letters, faxes, meetings, social media platforms, or emails.
When you use electronic services or access our website services, including but not limited to the use of cookies, which we may apply when you visit the website.
When you conduct transactions through our services.
When you provide feedback or file complaints with us.
When you register, enter into contracts, participate in competitions, and/or promotional activities, including promotional activities with our partners or affiliates.
When you request or use services related to external service providers, such as payment services, logistics, etc.
When you visit or use websites and applications of our affiliates or partner companies.
When you visit or use websites and applications of third parties related to our services.
When you install applications on your computer, phone, or other devices to access our services.
When you connect your account to websites or applications of third parties.
When you submit your personal data to us for any reason.