What kind of Personal Data Do We Collect

Personal data, or personal information, means information about an individual from which that person can be identified. It does not include data which has been anonymized so that an individual cannot be identified.

We collect, use and store various types of personal data about you including:

• your name, surname, title, username or similar identifier, nationality, date of birth, gender and other identifying data;
• your email address, billing address, delivery addresses, telephone number, social media handle and any other personal data that you provide by completing forms on the website;
• details of any transactions made by you;
• website login activity and details of products you have viewed on the website or placed in your basket while logged in;
• personal data that may be contained in communications you send to us;
• information you voluntarily provide in surveys that we may, from time to time, conduct on the website or via email for research purposes (only if you choose to participate in them);
• credit/debit card information;
• technical data about your laptop, phone or tablet for example your IP address, browser information, location, operating system and platform;
• information relating to your shopping preferences (for example, your size and style preferences), purchasing data (purchased products, location, date and time of purchase) and marketing and communications preferences you have selected.

What happens if you don’t provide your Personal Data? 

Providing your personal data to us is voluntary. However, we will need certain personal data to process purchases you make through the website (in particular, your name, email, billing address and delivery address) or to respond to communications you send to us.

When We Collect Personal Data

We collect personal data that you provide through the website, when you are at a Ebangkok store or through other media, for example, when you:

• create an account with us, either through the website or in store;
• visit the website, and login to your account to buy products, place products in your shopping basket or otherwise browse the website;
• visit the website through cookies and similar technologies as set out in more detail in the cookie policy. You can manage your cookie preferences when you visit the website or through your browser settings;

Please remember that where you share your personal data through an app or other third-party platform, your use of the app or platform and the way in which your personal data may be processed will be subject to the privacy policies of such third party provider and terms and conditions of such app or platform.

How We Use Your Personal Data

We only use or “process” your personal data where permitted by law. In most cases, we rely on one of the following legal grounds for processing personal data:

• processing is necessary to perform a contract with you or take steps that you have requested in order to enter into a contract (for example, the contract for the sale and purchase of products);
• processing is necessary for us to comply with a legal obligation (for example, fraud prevention);
• processing is necessary for the purposes of our legitimate interests, and our interests are not overridden by your interests, fundamental rights or freedoms; or
• your consent, in connection with certain marketing activities
• your consent, in connection with profiling (this is where we analyze your preferences in-store or whilst on the website), for example, in relation to purchased products, viewed products, stores where purchases were made, in order to provide personalized offers that are in line with your interests.

Third Party Website Links

The website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites, plug-ins and applications and are not responsible for their privacy statements or the security of these sites. When you leave our website, we encourage you to read the privacy policy of every website you visit.

How your personal data are processed and protected? 

Your personal data may be processed, either electronically or in hard copy form. We have a range of security measures in place to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. For example, purchases you make through the website are protected by SSL encryption.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where appropriate.

However, no data transmission over the Internet or data storage system can be guaranteed to be 100 percent secure, so please do not send us information you consider confidential via e-mail. It is your personal responsibility to protect your log in details and password for the website.

How long do we keep your personal data?

We retain your personal data to comply with a legal obligation and to perform a contract to which you are a party only for as long as we need it to fulfil the purposes we collected it for and/or for legal, tax, accounting or reporting requirements in any case not exceeding 10 years after termination of the contract. After that time, your data will be destroyed or rendered unusable or made anonymous.

Your personal data collected for marketing and profiling purposes may be kept for a period of 7 years from your last interaction with us (for example, a purchase, clicking a link in a newsletter or making changes to your website account), after which your personal data will be deleted or anonymized. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of a complaint or litigation.

We may continue to use anonymized data aggregated with other data.

Your Rights

You have a number of rights in relation to your personal data including the right:

• to be informed about how we use your personal data (as we have explained in this Privacy Notice);
• to request access to and receive a copy of the personal data we hold about you (this is also known as a “data subject access request”);
• to request that we correct any inaccuracies in your personal data;
• to request that we delete your personal data or restrict processing of your personal data;
• in certain circumstances, to move, copy or transfer personal information you have provided to us (this is also known as the right to data portability);
• where we are using your personal data with your consent, withdraw your consent at any time (for example, you can opt-out of marketing communications by changing your settings in your account on the website, or using the ‘unsubscribe’ link provided in our emails or contacting us directly);

Changes to this Privacy Notice

We keep this Privacy Notice under review and occasionally will update this Privacy Notice, for example, if we change the way we use your personal data or if there are new legal or technical requirements. We will post the updated Privacy Notice on the website so please review this page regularly.