Pattaya Manufacturing Co., Ltd. (“the Company”) places great importance on your privacy rights and the protection of your personal data in connection with receiving the Company’s products and services. The Company understands that you care about how your information is collected, used, and disclosed. We appreciate your trust and are committed to handling your personal data with reasonable care to provide you with the best possible customer service and experience.

This Privacy Policy applies to the Company’s websites, mobile applications, customer service centers (call centers), social media channels, online communication platforms, and any other locations where your personal data may be collected. However, please read this Privacy Policy in conjunction with the terms and conditions specific to the services you are using.

The Company reserves the right to modify this Privacy Policy from time to time. Therefore, we encourage you to regularly review when this Privacy Policy was last updated. Any changes will take effect immediately upon being posted on the Company’s website or application. If there are significant changes or updates, we will notify you accordingly. In cases where the changes involve a reduction of your rights regarding sensitive personal data under this Privacy Policy, the Company will obtain your consent before implementing such changes, unless otherwise required by law.

1. Definitions

In this Privacy Policy, the following terms or expressions shall have the meanings as defined below:

TERM DEFINITION
“Data Subject” or “Customer” Refers to a natural person who is a customer, buyer, or user of the Company’s services and is the owner of personal data that can directly or indirectly identify them. This also includes users of the Company’s website, applications, or other services. It also encompasses business partners, business affiliates, and stakeholders who are natural persons, but excludes the Company’s employees.
“Data Processing” Refers to any operation performed on personal data, whether by automated means or not, such as collecting, recording, organizing, storing, modifying, retrieving, using, disclosing, transferring, making accessible, arranging, combining, blocking, erasing, or destroying data.
“Data Processor” Refers to a natural or legal person who processes personal data on behalf of or under the instructions of the Data Controller, but is not the Data Controller themselves.
“Data Controller” or “Company” Refers to Pattaya Manufacturing Co., Ltd. or any natural or legal person who has the authority to make decisions regarding the collection, use, or disclosure of personal data.
“Personal Data” Refers to any information relating to an individual that enables the identification of that person, whether directly or indirectly. This does not include information relating to deceased persons, in accordance with the Personal Data Protection Act.

2. What Types of Personal Data We Collect

The Company may collect or receive the following types of data, which may include your personal data either directly or indirectly, from you or from other sources. The nature of the personal data collected depends on the context of your interaction and relationship with the Company, as well as the specific products or services you request from the Company.

1. The Personal Data Collected Under This Policy
The Company collects personal data of the following categories of data subjects under this policy:

1.1 Customers and Members
Refers to natural persons who purchase products, visit the website, use services, participate in activities, or otherwise contact the Company to request information or services. This includes personal data obtained directly or indirectly.

1.2 Contractual Parties and Business-Related Individuals
Refers to natural persons who are parties to a contract with the Company or otherwise involved in any contractual relationship. This includes, but is not limited to, business partners, vendors, suppliers, service providers, contractors, consultants, and other similar persons.

1.3 Company Personnel
Refers to natural persons who are employees, staff, or individuals working for the Company, including directors, executives, specialists, or anyone who receives salary, wages, benefits, or any other compensation directly from the Company. This also includes family members of the Company’s personnel.

1.4 Job Applicants
Refers to natural persons who submit job applications or personal background information to the Company, whether in writing or verbally, for the purpose of seeking employment but who have not yet been hired. This also includes family members of the applicants and references provided by the applicants.

2. Personal Data Collected Under This Policy
The personal data of data subjects collected and governed under this policy may include data provided directly to the Company, data automatically collected by the Company, or data obtained from third parties, such as:

2.1 Personal Information
Such as full name, date of birth, age, gender, photograph, passport or national ID number and copies, signature, nationality, marital status, and information about family members.

2.2 Sensitive Personal Data
Such as religion, criminal records, health information, medical check-up results, disabilities, and biometric data.

2.3 Contact Information
Such as residential address, telephone number, email address, social media contact information, and emergency contact details.

2.4 Financial Information
Such as bank account numbers and tax-related information.

2.5 Other Information
Such as images and/or audio recordings from CCTV, photographs, video and audio recordings, voice recordings of conversations, and data reflecting purchasing behavior or service usage patterns.

3. Purposes for Collecting Personal Data

  1. The Company collects, stores, and uses the personal data of data subjects for the benefit of the data subject and for the Company’s business operations. These purposes include, but are not limited to: fulfilling contractual obligations, organizing promotional activities, conducting market research, building and maintaining databases, providing tailored offers based on the data subject’s interests, analyzing and presenting the Company’s products, any other lawful purposes, or complying with applicable laws and regulations—both current and future. The data subject also consents to the Company transferring or disclosing their personal data to affiliated companies, business group companies, business partners, or data processors.
  2. The Company will retain the personal data of the data subject only for as long as necessary to fulfill the purposes for which the data subject has given consent. If the Company later changes the purposes for which the data is used, it will notify the data subject accordingly.
  3. The Company will retain personal data for a period in accordance with applicable laws and based on standard business practices for each type of personal data. After this retention period, the Company may delete or destroy the personal data from its records or systems without prior notice.

4. Limitations on the Use and/or Disclosure of Personal Data

The Company shall use and/or disclose personal data of data subjects only for the purposes for which consent has been obtained, or in accordance with applicable legal requirements. The Company will supervise its employees, officers, and personnel to ensure they do not use and/or disclose personal data beyond the stated purposes or disclose it to third parties, except in the following cases:

4.1 When required by law.

4.2 When necessary to prevent or suppress danger to a person’s life, body, or health.

4.3 When necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract.

4.4 When necessary for the legitimate interests of the Company or another person or legal entity that is not the Company.

4.5 When it is for the benefit of the data subject, and it is not possible to obtain consent at that time.

4.6 When required for the investigation by law enforcement officers or for judicial proceedings.

4.7 When necessary to achieve purposes related to the preparation of historical or archival documents for the public interest, or for educational, research, or statistical purposes, provided that appropriate safeguards are in place.

5. Retention Period of Your Personal Data

The Company will retain your personal data for a period that is reasonably necessary to fulfill the purposes for which the data was collected and to comply with legal obligations and applicable regulations. However, your personal data may be retained for a longer period if required by applicable law.

6. Data Security

The Company recognizes the importance of maintaining the security of your personal data. We are committed to protecting your data by implementing appropriate security measures to safeguard your personal data and ensure its confidentiality. These measures are designed to prevent unauthorized or unlawful loss, access, destruction, use, alteration, modification, disclosure, or destruction of your personal data.

The Company will regularly review its data collection methods, data storage locations, and processing practices, as well as implement physical and technical security measures in accordance with its information technology security policies and standards.

7. Cookies and How We Use Them

To enhance your experience when accessing our website, the Company may use cookies to verify user identity and to collect data and statistics related to website usage.

Cookies are small text files that store temporary information on the user’s device to facilitate and improve communication while using the website. These cookies are active only during the website session and will expire or become inactive when the session ends, the connection is terminated, or the user deletes or disables them. The Company respects users’ privacy and uses cookies responsibly.

The Company categorizes cookies into two types:

1. Service Cookies
These cookies store information for the purpose of operating the Company’s website services and are used solely for the Company’s direct marketing activities. Such data will not be disclosed or used for other purposes unless required by law.

2. Analytical Cookies
These cookies collect statistical data regarding website usage, including access dates and times, visited pages, browsing behavior, search types, and internet service providers. This information is used solely to analyze user behavior to improve the website and better reach the target audience.

The data collected through cookies is used exclusively for statistical analysis or other website-related activities aimed at improving the efficiency and quality of the Company’s website services.

8. Rights of the Data Subject

Subject to the provisions and exceptions of applicable laws, you may have the following rights regarding your personal data:

8.1 The data subject has the right to withdraw or revoke their consent previously given to the Company.

8.2 The data subject has the right to access and request a copy of their personal data, in accordance with the criteria and procedures set by the Company, or to request disclosure of how their personal data was obtained. The Company may, however, deny such requests if permitted or required by law or by court order.

8.3 The data subject has the right to request correction or updating of inaccurate or incomplete personal data.

8.4 The data subject has the right to request the deletion or destruction of their personal data, except where the Company is legally required to retain such data.

8.5 The data subject has the right to request the suspension of the use of their personal data provided to the Company.

8.6 The data subject has the right to request the transfer of their personal data provided to the Company to another data controller or to themselves.

8.7 The data subject has the right to object to the processing of their personal data by the Company.

9. Links to Third-Party Websites, Products, and Services

The Company’s services may contain links to websites, applications, products, or services of third parties. These third parties may collect certain information regarding your use of their services. This policy applies only to the processing of personal data for purposes determined by the Company. The Company is not responsible for the security or privacy of any personal data collected by such third-party websites, applications, products, or services—even if accessed through links provided by the Company.

You are encouraged to exercise caution and review the privacy statements or data protection policies of any third-party websites, applications, products, or services before providing your personal data. These third parties are responsible for disclosing their own practices, policies, and personal data protection standards.

The Company will disclose its data protection policies and practices, and in the event of any changes or updates, such changes will be announced through www.k-sara.com and/or other appropriate communication channels to notify data subjects.

Responsibility of the Personal Data Controller

The Company has appointed responsible personnel to oversee the collection, storage, use, and disclosure of personal data in accordance with this Privacy Policy and the Company’s information security practices. These appointed individuals are required to strictly comply with the Company’s personal data protection policies and procedures.

10. Contact Information

If you wish to exercise your rights regarding your personal data or if you have any inquiries about your personal data under this Privacy Policy, please contact:

Pattaya Manufacturing Co., Ltd. (Head Office)
Address: 611/28 Soi Wadchan-nai, Pradoo 1 Rd., Bangklo,Bang-kor-laem, Bangkok 10120, Thailand
Tel: 0-2291-2390-8
Fax: 0-2291-2378