PERM POON PATANA INDUSTRY CO., LTD. is a leader in the manufacturing, exporting and distributing of complete cotton products in Thailand. The company's products include cotton swabs, cotton pads, cotton balls and cotton rolls. The key to our success is continuous improvement and development in every aspect to meet customer needs.

The company is committed to and cares about producing environmentally friendly products, starting from the selection of raw materials, using clean energy in the production process until becoming a product with internationally recognized standards.

The company places importance on the protection of your personal data. The company has therefore established a personal data protection policy to protect your personal data that you consent to the company to collect, use and disclose (collectively referred to as "data use" or "data use") and has announced this personal data protection policy so that data owners are aware of the company's practices and management of personal data.

Definitions

“Company” means PERM POON PATANA INDUSTRY CO., LTD.
“Personal Data Protection Act” means the Personal Data Protection Act B.E. 2562 and related secondary laws, including any future amended laws.
“Personal Data” means information about an individual that can directly or indirectly identify that individual, but does not specifically include information about the deceased, in accordance with the Personal Data Protection Act.
“You” means the owner of personal data who has given consent.
“Other companies in the same group” means the Company holds shares in that company. Or the company holds shares of the company.

1. Personal information that the company collects, uses or discloses includes:

1.1 Personal information such as title, first and last name, age, gender, photograph, video, information from CCTV cameras, date of birth, nationality, marital status, signature (including electronic signature), username and password.
1.2 Contact information such as address, telephone number, fax number, email and other similar information.
1.3 Financial and account information such as user accounts, usage history, credit information, source of income, fixed assets and liabilities, business partner identification code information (including business partner types), bank account information (e.g. account holder name, bank account opening, account type, bank account number, beneficiary account name, payment date, payment method, payment currency, payment account and details of money transfers in/outside Thailand) and other identifying information (e.g. LINE user account information), land information that you own (e.g. land title deed number)
1.4 Education and work information such as job position, department, occupation, job application information, companies that you work for or hire, training information, income and salary
1.5 Information from official documents such as ID card number, passport number, taxpayer identification number, driver's license number, house registration number
1.6 Vehicle information such as chassis number or car registration number
1.7 Technical information such as IP address, Cookie ID, website usage history, etc.
1.8 Information of other persons related to you such as information identifying your spouse or children, information of employees of companies related to you, images, motion pictures And any other information that is considered personal information under the Personal Data Protection Act, etc.
1.9 Sensitive personal information such as race, religion, etc.
1.10 Other information includes necessary information that is collected, used or disclosed for business contact between the company and you or your representatives, such as information you provide to us to enter into contracts, product order history, questionnaires or various research surveys.

2. Channels for collecting personal data

The Company will collect personal data directly from you, but in some cases, the Company may obtain your personal data from other sources, which the Company will proceed in accordance with the Personal Data Protection Act.

Personal data collected by the Company from other sources may include, but is not limited to, the following:

2.1 Information received by the Company from employees, customers, suppliers, business partners and/or other persons with whom the Company has a legal relationship.
- 2.1.1 Receive personal data directly from you, such as when you do business with the Company, or sign a contract or fill out a form when you interact with the Company, including interactions via the Company's online platforms, via the Company's website or mobile applications, communicating via email, post, telephone, questionnaires, business cards, or when the Company visits you, or at conferences, seminars or other activities. That the organization operates itself or through business partners or third parties, etc.
- 2.1.2 Receive personal information from you through service channels, such as the application process or the process of submitting requests for various rights with the company, etc.
- 2.1.3 Receive personal information from you voluntarily, in the form of a survey or correspondence via e-mail or other communication channels between the company and you, by phone and/or fax
- 2.1.4 Receive personal information from you via phone, fax, in the form of documents or from other sources when you display personal information on our website or when you access and/or use social media websites or related platforms or mobile applications for social media such as Facebook, Instagram, Line, etc.
2.2 Information that the company receives from persons related to you, such as your family, friends, referrals, etc.
2.3 Information that the company receives from corporate customers in the capacity of a director, an authorized representative, an authorized representative Or contact person
2.4 Information that the Company receives from government agencies and/or external service providers, such as publicly disclosed information
2.5 Certain technical information about activities and browsing patterns, information on your website usage history automatically using cookies and other similar technologies

3. Purpose of collecting personal data

The Company will collect, use and/or disclose your personal data according to the nature of the relationship between the Company and you, based on legitimate interests, contractual basis, legal basis, consent basis or other legal basis as specified by the Personal Data Protection Act, as the case may be, for the following purposes:

3.1 Used to perform contracts with business partners and business communications, such as offering product prices, making product sales contracts, ordering products, ordering packaging, ordering products or services online and offline, disbursement, order confirmation, appointment, product return or refund, booking locations, freight and warehouse management systems, sending documents, answering questions, responding to requests or reporting progress, via email, telephone, SMS or other communication channels such as the Line application, etc.
3.2 Used to confirm your identity, check business status or check history in other forms Or use in assessing business risks
3.3 Use to create business customer accounts, record data in the database program, maintain and update lists (including your personal data), store and manage contracts and related documents that may contain your name
3.4 Use to analyze sales, evaluate, make reports on the Company's products and services, improve marketing strategies and develop the Company's products and services
3.5 Inform marketing communications, organize sales promotion activities, public relations services, notifications, announcements of promotions, special offers, product displays, procurement, support work and other special activities
3.6 Use to analyze data, manage customer relationships, evaluate service efficiency, investigate customer complaints, collect product feedback to develop products to be of good quality at all times
3.7 Use to conduct financial and tax transactions related to the performance of your and the Company's contracts (such as issuing billing receipts, issuing withholding tax books, issuing tax invoices, checking the amount transferred into the Company's account, confirming outstanding balances and sending receipts or tax invoices to you
3.8 Used for organizing public relations activities within the organization, managing employment activities, training seminars, checking, reporting performance results, processing data, analyzing statistical planning and trends, or other similar or related activities.
3.9 Used for requesting a business license as required by law, and coordinating or contacting government agencies.
3.10 Used for checking and controlling product quality and recording product test results to obtain products that meet standards and comply with ISO9001:2015 and GMP requirements to create maximum customer satisfaction, evaluating service efficiency.
3.11 Used for supporting information technology (IT) work, deleting inactive accounts, checking and maintaining systems and security, such as identity verification, access control, checking and maintaining systems, devices and the Internet, maintaining information technology (IT) security, etc.

4. Disclosure of Personal Data

The Company will not disclose the personal data of the data owner to any person without consent and will disclose it for the purposes stated in Section 3. However, to benefit the Company's business operations and the provision of services to the data owner, the Company may disclose your personal data to the following persons or government agencies, regulatory agencies, or business partners under the criteria of the Personal Data Protection Act.

4.1 Affiliated companies or companies in the Company's business group, business partners and/or any other persons with whom the Company has a legal relationship, including directors, executives, employees, contractors, agents, consultants of the Company and/or such persons, for internal management of the organization, the Company may disclose your personal data within the Company only as necessary to improve and develop the Company's products or services under this policy for the greater benefit of you and others.
4.2 Service providers, partners, agents, or other organizations The Company may disclose some of your personal data to the Company's service providers. As necessary to perform various operations, such as payment, marketing, product or service development, etc. The service providers have their own privacy policies (e.g. packaging printing houses, raw material distributors, marketing consultants, postal service providers, land transportation service providers, training and seminar providers, contractors, cloud service providers, data analysis and consultants, accountants, document repositories, etc.), in which the disclosure of your personal data will be for specific purposes, under appropriate legal bases and security measures.
4.3 Government agencies and/or agencies that are responsible for supervising the Company (e.g. Bank of Thailand, insurance companies, Ministry of Labor, Revenue Department, Department of Business Development, Department of Intellectual Property, Ministry of Public Health, or other relevant agencies, etc.)
4.4 Agencies that request disclosure of data under legal authority, such as requesting data for legal proceedings or legal proceedings, or related to legal processes, such as the Anti-Money Laundering Office, National Anti-Corruption Commission, Royal Thai Police, Department of Special Investigation Office of the Attorney General and the Court
4.5 Third parties who provide services to the Company (such as market analysis and comparison, including but not limited to correspondent banking, agents or subcontractors acting on behalf of the Company
4.6 Social media service providers (in a secure format) or external advertising companies to display messages to you and others about the Company's products and services. External advertising companies may use your online activity history data to tailor advertisements that may be of interest to you.
4.7 Third-party guarantors
4.8 Any other person who provides benefits or services related to your products or services and/or your authorized representatives, sub-authorized representatives, agents or legal representatives who have legal authority.

5. Transfer of Personal Data

5.1 The Company may disclose or transfer your Personal Data to foreign countries that may have higher or lower data protection standards than Thailand, such as when the Company stores your Personal Data on cloud platforms or servers located outside Thailand or to use IT support services.
5.2 The Company may transfer your Personal Data to foreign countries other than those where the data was initially collected, and your Personal Data may be processed and stored outside your country of residence. You understand and agree that the destination country may or may not have adequate data protection standards. Those countries may not have the same data protection laws as the country in which you initially provided your data. If the Company transfers your Personal Data to foreign countries, the Company will protect your Personal Data as set out in this Privacy Policy.

6. Data Retention Period

The Company will retain your Personal Data for the period necessary for the period in which you are a customer or have a relationship with the Company to achieve business and legal purposes. However, the Company may retain your personal data for a longer period if required by applicable law.

Please note that due to technical limitations, the Company may not be able to guarantee or specify a specific period for deleting all data or completely anonymizing your data.

7. Data Security

The Company has appropriate administrative, technical and physical safeguards to protect your valuable data. However, no security system is perfect and the Company cannot guarantee that your data will be secure in all circumstances, including the security of your data while it is being transmitted to the Company.

8. Your legal rights as a data subject

Your rights in this section are legal rights that you should be aware of. You can exercise your rights under the terms of the law and policies currently in effect or to be amended in the future, as well as the criteria set by the Company.

8.1 Right to withdraw consent: You have the right to withdraw your consent to the processing of personal data that you have given to the Company at any time during the period that your personal data is with the Company.
8.2 Right to access personal data: You have the right to access your personal data and request that the Company provide you with a copy of such personal data, including requesting that the Company disclose the acquisition of personal data that you have not given consent to the Company.
8.3 Right to rectification: You have the right to request that the Company rectify your personal data to be accurate, complete, and up-to-date. and not misleading
8.4 Right to erasure: You have the right to request the Company to erase, destroy, or anonymize your personal data, unless the Company has legitimate grounds to refuse your request or deems that the Company no longer needs to retain it for the purposes related to this Policy, or when you have exercised your right to withdraw your consent or exercise your right to object as stated above.
8.5 Right to restriction of processing: You have the right to temporarily suspend the use of your personal data for certain reasons.
8.6 Right to data portability: You have the right to transfer your personal data that you have provided to the Company to another data controller or to yourself for certain reasons, unless the Company is technically unable to do so. Or the Company has a legitimate reason to refuse your request.
8.7 Right to object to the processing of personal data (right to object): You have the right to object to the collection, use, disclosure or processing of your personal data for certain reasons.
8.8 Right to lodge a complaint: You have the right to lodge a complaint with the Personal Data Protection Committee or the Office of the Personal Data Protection Committee if you find that the Company has violated or failed to comply with the Personal Data Protection Act.
8.9 The exercise of your rights as stated above may be restricted under relevant laws, and in some cases, there are necessary circumstances where the Company may refuse or be unable to act on your request to exercise the rights as stated above, such as having to comply with the law or court order, for the public interest, or the exercise of rights may infringe the rights or freedoms of others, etc. If the Company refuses the request as stated above, the Company will inform you of the reasons for the refusal.

You can contact the Company to exercise the rights as stated above by submitting a written request to the Company (contact details are shown in the section “Contact Channels of the Company” below). The Company will consider and notify the result of the consideration according to the request. Of the data owner within 30 days from the date of receipt of the request and complete supporting documents. However, the Company may deny the data owner's rights in cases where the law requires it or in cases where you request to delete the data, the Company may need to keep that data for the benefit of the Company's legal rights or for the performance of legal duties.

9. Use of personal data for the original purpose

The Company has the right to collect and use your personal data that the Company has collected before the effective date of the Personal Data Protection Act in the part related to the collection, use and disclosure of personal data for the original purpose. If you do not wish for the Company to continue to collect and use such personal data, you may notify the Company to withdraw your consent at any time.

10. Privacy Policy of other websites

This Privacy Policy applies only to the Company's services and use of the Company's website. If you click on a link to another website (even through the Company's website), you must study and comply with the privacy policy that appears on that website, which is separate from the Company's.

11. Changes to the Privacy Policy

The Company may review and amend the Privacy Policy from time to time to comply with the practices and related laws and regulations. In this regard, changes to the Privacy Policy, the Company may amend the Privacy Policy by posting on the website www.pppi.co.th, specifying the date of the last amendment. It shall be deemed that you accept the changed policy. The Company will not notify you of such amendment individually. The Company would like to recommend that you regularly follow this Privacy Policy to monitor any changes.

12. Contact Channels for the Company

If you have any questions about the Company's practices and activities related to your personal information, you can contact the Company using the details below. The company is pleased to provide information, suggestions and assistance to you.

Please contact the Personal Data Protection Agency at 66 (02) 539-8794-5

Email address: pdpa@pppi.co.th
Or contact us by mail at the company's head office as follows:
PERM POON PATANA INDUSTRY CO., LTD. (Head Office)
Address: 931/1 Ladprao 87 (Chantrasuk), Ladprao Rd.,
Klongjun, Bangkapi, Bangkok Thailand 10240

Privacy Policy