Privacy Notice

24 Shopping Company Limited (“the Company”), the service provider of All Online, prioritizes respecting members’ privacy. The Company manages privacy data in accordance with the laws relating to personal data protection and safety standards concerning your personal data protection. This Privacy Notice explains methods the Company conduct to manage your personal data, such as collection, safekeeping, usage, disclosure, including your rights. This ensures you understand the Company’s data protection for the aforementioned service. The methods are as follows.

1. Use of the collected information

Objectives of processing personal data: the Company collected your personal information in order to service you in product purchases, logistics, resolving grievance, providing privileges, product and service advertisement, service improvement, report writing, risk management, safety measures, disclosure to data controllers or data processors, business partners, or per legal requirement, as follows:

Lawful bases of processing personal data: The Company processes your personal information according to the key basis, as follows.

- Consent: the Company shall use your personal information for profiling, to analyze your behaviors and interests, to present and conduct Direct Marketing/ Personalized Advertising, which will be disclose to other companies per stated objectives, is according to the opt-in consent stated.

- Contract: You must provide personal data, as initially stated, as necessary for contract compliance and servicing you, per the Company’s objective for direct marketing, or contact you for post-purchase services. This includes modifying and improving services as notified by you via the Company’s grievance channels. Without you consenting for personal information to be used according to this notice’s objectives, the services in this notice would not be realized.

- Legitimate Interest: The Company may sell products, promotions, or privileges as usual, without conducting behavioral analysis or sending customized privileges to you. There may be data processing, researches or statistical work per the objective of the Company’s operations. This includes internal corporate report writing and the Company’s service quality improvement, in order to manage risk in the Company’s operations, prevent corruption, and conduct safety measure for both the Company’s asset and yours.

- Legal Obligation: the Company may need to share your personal data to government officers or agencies with legal authority to request for data in the Company’s possession. This includes the Revenue Department, Office of the Consumer Protection Board, Royal Thai Police, Prosecutor’s Office, the Courts, to name a few.

2. Nature of information captured

Personal data that the company will collect

Full name, mobile numbers, address, geolocation/location data), list and history of product-service purchase, chat records whether audio (phones) or texts (websites, letters) upon your contact with the Company, data of operational system, activities and usage duration of users, your personal data collected from other sources, such as via registration or logins through Facebook, Google, Apple ID, or disclosure from a third-party.

How long the information is kept on corporate files

The member consents and agrees for the Company to use personal data in the duration of membership. The data is to be destroyed, or converted to remove the element of personal data, within 90 days since the last day of active membership. The personal data may be exempt from being destroyed or deleted due to the Company’s necessity, due to mandates from relevant contracts, third parties, or the laws.

3. Third-party disclosure policy

The Company may disclose or transfer your personal data to others, domestic and international, as necessary to ensure adherence with the objectives and use of collected information, as notified in Article 1., such as those of subsidies under CP ALL Group (additional information is available at www.cpall.co.th). Employees and companies employed the Company as personal data processors, Business Partners, legal consultants, lawyers, account auditors, as well as the government agencies able to request for personal data, such as Royal Thai Police, Prosecutor’s Office, courts, to name a few. This includes government officers with the authority to request for personal data, such as inquiry official, prosecutors. This may include disclosure to the governmental agencies and officers for the Company’s benefits in case of lawsuits as well.

4. Data Subject’ Rights

You are entitled for (1) Opt-out option for the Company’s processing of your personal data (2) Request access to data held by the company, for keeping copies of personal data collected, used and disclosed by the Company (3) Request your data be transferred to other service providers (4) Request to refute processing of your personal data (5) Request your data be deleted or anonymize the personal data (6) Request a suspension upon personal data usage (7) Request your data be corrected to most current, to completion, without causing misunderstanding (8) Request to file grievance, when you believe the Company or its representatives violate the rights granted to you per Personal Data Protection Act 2019.

Any requests to exercises above rights must be done in written form or through electronic means organized by the Company. The Company shall put utmost efforts to proceed within reasonable timeframe, without exceeding the duration established by the laws.

Notably, there may be limitations in following through with certain requests. In such cases, the Company shall inform you if your request could not be realized. This condition is in accordance with the Personal Data Protection Act 2019.

Regarding completion of the above requests, the Company reserve the rights pertaining relevant and necessary fees with regards to conducts relating to personal data you requested.

In addition, the Company shall collect your personal information in secure system and use the collected information per objectives in accordance with Article 1, including respond to your requests as the data subject with legal requirements regarding your information is protected.

5. Changes in Privacy Notice

To ensure alignment to Personal Data Protection Act 2019, this Privacy Notice may be subjected to modification at times. The Company shall display the current version on its website and application, All Online, or provide written notification.

6. Data Protection Officer Details

For grievance regarding personal information, please contact the Data Protection Officer in the following channel

Data Protection Officer (DPO)
No. 313 C. P. Tower 24th Floor, Silom Road, Kwaeng Silom, Khet Bangrak, Bangkok 10500
Email privacy@cpall.co.th

24 Shopping Company Limited
58/28 Moo 2, The Tara Building, Floors 12-12A, Chaeng Watthana Road, Bang Talat Sub-district, Pak Kret District, Nonthaburi Province 11120
Hotline : 02-780-7666