Kamu Kamu Co., Ltd.

Kamu Kamu Co., Ltd. (“the Company”) recognizes the importance of and respects the privacy rights of customers, suppliers, contractors, and/or visitors or any related persons (Visitor or All concerned) whose data is collected, used, or disclosed, or kept confidential and processed in accordance with the consent of the data owner and in compliance with the Personal Data Protection Act B.E. 2562 (2019). Therefore, the Company has established this Privacy Policy as follows:

1. Definitions

1.1 Personal Data means information relating to a person which enables the identification of such person, whether directly or indirectly, but does not include information of deceased persons or juristic persons

1.2 Data Controller means the Company, Chief Executive Officer, authorized person, or assigned person who has authority to decide on the collection, use, or disclosure of personal data

1.3 Data Processor means a person or juristic person who processes personal data on behalf of or under the instruction of the Data Controller

1.4 Customer means a data owner or external person who purchases goods or uses the Company’s services

1.5 Supplier means a data owner or external person who provides goods or services to the Company

1.6 Visitor means a data owner or person who contacts or engages with the Company’s business

1.7 Employee means a data owner or person employed by the Company, either full-time or temporary

2. Collection of Personal Data

2.1 The collection of personal data shall be conducted for specific purposes, within scope, and by lawful and fair means. The Company will collect, use, or disclose personal data (collectively referred to as “processing”) only as necessary for providing services under the Company’s objectives. The Company will inform and obtain consent from the data owner in writing or electronically, unless such consent cannot be obtained by nature of the situation. This includes online forms such as registration, contact via social media, or other information useful for communication or services such as name, phone number, date of birth, gender, etc. The Company will obtain consent prior to collection except in the following cases:

• 1. For historical, archival, research, or statistical purposes (Scientific or Research)
• 2. To prevent or suppress danger to life, body, or health of a person or for public interest (Vital Interest)
• 3. For necessity of contract performance between the data controller and data owner
• 4. For public task or exercise of official authority vested in the data controller
• 5. For legitimate interest of the data controller without infringing fundamental rights
• 6. For compliance with legal obligations
• 7. For improving products/services, marketing, promotions, research, analytics, and statistics

If you are a minor, incompetent person, or quasi-incompetent person, consent must be obtained from a parent, guardian, or legal representative unless otherwise permitted by law

The law prohibits collection of sensitive personal data such as race, ethnicity, political opinions, religious beliefs, sexual behavior, criminal records, health data, disability, labor union information, genetic data, biometric data, or similar. The Company will not collect such data without explicit consent unless permitted by law

2.2 Types of Personal Data Collected

The Company collects various types of personal data depending on products, content, services, or channels used. Categories include:

• 1. Personal Information
  • - First name and last name
  • - Gender
  • - Age
  • - Date of birth
• 2. Contact Information
  • - Address
  • - Email address
  • - Phone number
• 3. Government Identification
  • - National ID number
  • - Passport number
  • - Copies/images of ID card or passport
• 4. Financial Information
  • - Payment and transaction confirmation data
• 5. Usage Data
  • - Subscribed products/services
  • - Login date/time
  • - IP address
  • - Cookies
  • - Usage activity
  • - Purchase details
• 6. Preference Data
  • - Preferred products/content/services
• 7. Market Research Data
  • - Device identifiers
  • - Device type
  • - Device model/brand
  • - Application/browser/OS/platform details
• 8. Device Data
  • - Application and browser data
• 9. Social Media Data
  • - Social media accounts
  • - Profile information
  • - Interactions with our platforms
• 10. Facial Image Data
  • - CCTV recordings within company premises
  • - Event photography/video/live streaming
  • - Users may avoid areas or notify refusal of recording
• 11. Other Data
  • - Any information provided through any channel

3. Purpose of Data Processing

The Company may collect, use, disclose, process, transfer, or share personal data for the following purposes:

• 3.1 Research, analysis, and product/service improvement
• 3.2 Marketing, promotions, and communication via notifications, SMS, or social media
• 3.3 Database and service history management
• 3.4 Feedback and service improvement
• 3.5 Participation in campaigns or promotional activities
• 3.6 Product sales and delivery
• 3.7 Financial transaction verification
• 3.8 Delivery status updates
• 3.9 Identity verification for service access

• 1. Personal Information
  • - First name and last name
  • - Gender
  • - Age
  • - Date of birth
• 2. Contact Information
  • - Address
  • - Email address
  • - Phone number
• 3. Government Identification
  • - National ID number
  • - Passport number
  • - Copies/images of ID card or passport
• 4. Financial Information
  • - Payment and transaction confirmation data
• 5. Usage Data
  • - Subscribed products/services
  • - Login date/time
  • - IP address
  • - Cookies
  • - Usage activity
  • - Purchase details
• 6. Preference Data
  • - Preferred products/content/services
• 7. Market Research Data
  • - Device identifiers
  • - Device type
  • - Device model/brand
  • - Application/browser/OS/platform details
• 8. Device Data
  • - Application and browser data
• 9. Social Media Data
  • - Social media accounts
  • - Profile information
  • - Interactions with our platforms
• 10. Facial Image Data
  • - CCTV recordings within company premises
  • - Event photography/video/live streaming
  • - Users may avoid areas or notify refusal of recording
• 11. Other Data
  • - Any information provided through any channel