Privacy Policy

24 Shopping Company Limited (“Company”) is cognizant of the importance of maintaining personal data protection throughout the internet network. The Company believes that it is important for users to understand the Company’s framework in managing personal information received from users. Users can visit the 24Shopping website anonymously without the requirement to provide any personal or user associated information. The Company web server strictly avoids recording visitor email addresses but does record the domain name, which comprises information used to count visitor numbers, average length of visit to Company website or individual webpages, etc., for use in developing Company website content. However, if the Company wishes to store user information inclusive of username and address, the Company will attempt to notify the user of the collection period and purpose. In general, information collected by the Company is used internally to address user queries, process requests, and grant access to specific information. The Company may occasionally provide user email addresses to reputable organizations whose products or services may be of interest to users. Users have the right to create restrictions on personal information access in these situations. If the user has registered with an online business affiliated of one of the companies, user information may be accessed by respective companies to offer products tailored to the specific user interest and business needs via a technology called cookies. Cookies are small packets of information sent from a website to the user’s browser and stored on the user computer’s hard disk with the purpose of notifying the Company when users return to visit Company websites.

Cookies allow the Company to appropriately manage user interests to enable conductivity for users to frequently return to the Company website. However, users can enable browsers to notify users when receiving cookies and while browsing Company websites, cookies function without utilizing a user’s personal information. The Company may occasionally conduct online surveys to better understand the demographics and needs of Company website visitors. Upon conducting mentioned surveys, the Company will endeavor to inform users of information collection and usage via the internet. Participation in respective surveys is voluntary, thus users can decide whether to disclose personal information. Upon exiting this website, please exercise caution and read respective personal data protection policies for each criterion where the Company collects users’ personal information while browsing.

The above-mentioned personal information protection policy applies only to this website. If users believe that the Company has not complied with the personal data protection policy above, please contact Company officials via Call Center: 1371.

Personal Data Processing
Privacy Notice

24  Shopping Company Limited (“Company”) emphasizes the confidentiality in personal information provided to the Company though means consistent with personal data protection laws. The Company requests the user to read the document notifying personal information processing, to acknowledge and comprehend the purposes for which the Company collects, uses and discloses user personal information in activities mentioned below. 

Please click on each topic to read the details of the Privacy Notice for each activity.

1. Privacy Notice for Customer

1.1 For All Online customers, details can be found at the following link: https://www.allonline.7eleven.co.th/privacy/

1.2 For Issuing Tax Invoices

Privacy Notice for Issuing Tax Invoices

24 Shopping Company Limited (“Company”) is aware of the importance of user personal information entrusted to the Company and is required to comply with the Personal Data Protection Act B.E. 2019 in order to guarantee protection rights of individuals regarding the collection, use, disclosure (“processing”) of personal data. This document intends to inform users of personal information collection, usage and disclose methods. The Company requests users to read this document for acknowledgment and understanding of how the Company collects, uses and discloses user personal information.

1. Purpose and basis for data processing

• Purpose of data processing: The Company records and stores user personal information for use in issuing tax invoices
• Data processing basis: The Company processes user personal data under the following basis
  • Legitimate Interest: When users provide personal information for use in issuing tax invoices, the Company may store user personal information as a matter of convenience and to expedite the tax invoice issuing process in future requests. If the user does not want the Company to store respective data, the user can exercise rights to request deletion according to Section 4.
  • Legal Obligation: The Company is required to request users for personal information in order to issue a tax invoice. This practice is consistent with the Revenue Code Section 86/4 and the announcement of the Director-General of the Revenue Department regarding Value Added Tax (No. 199) Regulation Specifying Additional Information in Tax Invoices under Section 86/4 (8) of the Revenue Code, including other related laws or announcements The Company is required to submit mentioned information to the Revenue Department. Therefore, the Company will not be capable of issuing a full tax invoice to the user if the user wishes not to provide their respective personal information. However, users will receive an abbreviated tax invoice from the Company every time users purchase goods and services.
  • Legal Obligation: The Company is required to request users for personal information in order to issue a tax invoice. This practice is consistent with the Revenue Code and other related laws or announcements, including Section 86/4 of the Revenue Code, the announcement of the Director-General of the Revenue Department regarding Value Added Tax (No. 199), etc. The Company is required to submit mentioned information to the Revenue Department. Therefore, the Company will not be capable of issuing a full tax invoice to the user if the user wishes not to provide their respective personal information. However, users will receive an abbreviated tax invoice from the Company every time users purchase goods and services.

2. Personal Data Collection Category and Collection Period

However, the Company will delete or make personal information non-identifiable after the above period has elapsed.

3. Third-party Disclosure Policy

The Company discloses user personal information to companies contracted as personal data processors which manages tax invoice issuing programs in both paper and electronic forms. Personal information from users may be transferred to the Revenue Department and its officials as required by law and authorized government agencies upon request. The agencies, which may include the Royal Thai Police, Prosecutors’ offices, courts, or authorized government officials including investigators and prosecutors, etc., may also disclose data to government agencies and government officials if deemed beneficial for Company litigation.

4. Data Owner Rights

Users have (1) the right to withdraw consent for the Company to process user personal data (2) the right to access and receive a copy of the personal data the Company has collected, used, and disclosed (3) the right to request transfer of user personal information (4) Right to object to the processing of user personal data (5) the right to request deletion, destruction, or anonymization of user personal data. (6) the right to suspend the use of user personal data. (7) the right to request correction of user personal data to enable accurate, current, and complete information which prevents misunderstanding. (8) the right to file complaints in the event where the user considers violation of rights by the Company or its officials or representatives according to the Personal Data Protection Act B.E. 2019.

Any request to exercise user rights as stated above must be conducted in writing or through the provided Company electronic system. The Company will strive to process requests within a reasonable timeframe which does not exceed the period specified by law. The Company will comply with legal requirements regarding user rights as the owner of personal data.

However, limitations in exercising some user rights may exist and the Company will provide rationale towards the inability to comply with respective requests in accordance with the Personal Data Protection Act 2019.

In exercising of the above rights, the Company reserves the right to charge related and necessary service fees to process personal information as requested by the user.

5. Changes to Personal Data Processing Notice Documentation (Privacy Notice)

To comply with the Personal Data Protection Act 2019, this Personal Data Processing Notice (Privacy Notice) may be amended from time to time. The Company will display the current version on the website.

6. Personal Data Protection Officer Details

Data Protection Officer: DPO

No. 313 C.P. Tower Building, 24th Floor, Silom Road, Silom Subdistrict, Bang Rak District, Bangkok 10500

E-mail: privacy@24shopping.co.th

Personal Data Controller

24 Shopping Company Limited

58/28 Village No. 2, The Thara Building, Floor 12-12A, Chaengwattana Road, Bang Talat Subdistrict, Pak Kret District Nonthaburi Province 11120

E-mail: dpc@24shopping.co.th

2. Privacy Notice for Suppliers

Notification of Personal Data Processing (Privacy Notice) for Suppliers

1. The Company collects and/or uses personal information from suppliers, which may include national identification card copies, house registration copies, passport copies, visa copies and any important document containing personal information (“Personal Data”) for a total period of 10 years from the date of contract termination. The collection and usage objective relates to suppliers identity verfication, evidence in establishing claims, and specified contract purposes. Personal information will not be utilized for any other purpose not sipulated in this contract in any form. However, if the supplier does not transfer mentioned personal information to the Company, the contract will be rendered incomplete, thus preventing further requried processing of contractual and legitimate interests according to Section 24 (3), (5) of the Personal Data Protection Act B.E. 2019.

In this regard, suppliers in the capacity of personal information owners, acknowledge that they possess the following rights: (1) The right to access and receive a copy of personal data the Company has collected and or can use, as well as the right to object to the processing of personal data. (2) The right to delete or destroy or anonymize information after a total period of 10 years has elapsed from the date the contract expires. (3) Right to object to processing of personal data. (4) Right to request the Company to suspend use of personal information if the Company has utilized information for purposes not stated in the first paragraph above. (5) Right to request correction of personal information to maintain accurate, current, complete information free from ambiguities. (6) Right to complain to the Company if a Company employee or representative violates or fails to comply with the Personal Data Protection Act B.E. 2019 (as detailed in Section 2.)

Exercise of the above mentioned rights must be completed in writing in addition to notifying the Company. The Company will endeavor to process complaints within a reasonable period not exceeding the period specified by law while complying with regulations and laws related to personal data ownership rights. The Company reserves the right to charge for service fees related to and necessary for the exercise of such rights. The Company also reserves the right to proceed with requests in exercising certain rights which affect respective contract objectives.

2. If an issue warranting complaint against personal information management arises, the user can contact and coordinate with the Personal Data Protection Officer through the following channels:

Data Protection Officer: DPO

No. 313 C.P. Tower Building, 24th Floor, Silom Road, Silom Subdistrict, Bang Rak District, Bangkok 10500

E-mail: privacy@24shopping.co.th

Personal Data Controller

24 Shopping Company Limited

58/28 Village No. 2, The Thara Building, Floor 12-12A, Chaengwattana Road, Bang Talat Subdistrict, Pak Kret District Nonthaburi Province 11120

E-mail: dpc@24shopping.co.th

3. Privacy Notice for applicants and employees and Suppliers

3.1 Privacy Notice for applicants and employees

Privacy notice for applicants and employees

The Company respects user privacy and is fully aware of its importance. The Company is committed to protecting user personal information and informs users of the methods and purposes of collecting, using and disclosing personal information (“Processing”). User rights in managing personal information within Company possession entails creating user awareness of Company personal information protection coverage for job applications and employment related aspects as a Company employee.

The Company will process personal data with the utmost transparency in accordance with the Personal Data Protection Act 2019 and kindly requests users to read this document to understand matters relating to the personal data processing and protection by the Company. Should users have queries, the relevant Company contact details are provided in this document.

1. Purpose of collecting, using and/or disclosing personal information

For Job Applicants

*Contract: The Company collects and utilizes personal information for the purpose of selecting candidates according to job application request, verification of candidate qualifications and suitability for applied position, and contacting applicants. The mentioned information is necessary towards employment contract considerations and thus the Company will not be able to consider the application without usage of mentioned personal information. 

*Consent: The Company will request user consent prior to collecting, using and/or disclosing user personal information according to the following objectives.

1. The Company may consider user abilities and suitability for operations in various positions and respective occupational safety through consideration from health information (in positions not restricted by disease condition according to law).
2. The Company may verify user qualifications from references, inclusive of educational institution for which the user has provided.
3. The Company may investigate conflicts of interest of related people, including family members and acquaintances within the Company, Company subsidiaries or companies within the Charoen Pokphand Group.
4. The Company may disclose user information from the application, including related documents provided to the Company to companies within the CP All group and companies within the Charoen Pokphand Group to increase the probability for an applicant to gain employment within a company of the CP All and Charoen Pokphand Group companies.

*Legitimate Interest: The Company is required to collect and utilize user personal information for purposes relating to database and reports preparation, developing and improving recruitment, and applicant selection. Further verification of user qualifications is made from any other source publicly accessible. The collection and usage of user personal information may be utilized in providing future employment opportunities.

*Legal Obligation: The Company collects, uses or discloses user personal information for processing in order to comply with relevant laws, comprising:

• Surveillance and compliance with measures to prevent and control infectious diseases according to the Communicable Disease Act 2015.          
• Inspection of directors and executives for criminal records according to the Securities and Exchange Act B.E. 2535 and the Public Company Limited Act B.E. 2535, and chauffeurs according to the Land Transport Act B.E. 2522.
• Inspection of health history for employees holding certain positions, such as food handlers, as required by law according to the ministerial regulations for places selling food issued in accordance with the Food Act B.E. 2522.
• Requesting evidence from officials or government agencies with legal authority.

For Employees

*Contract: The Company collects, uses and/or discloses user personal information to comply with labor contracts, including wage payment, work travel expense reimbursement, insurance fees, operational information, corruption inspection, and violations of the law or work regulations.

*Consent: The Company will request for user consent prior to collecting, using and/or disclosing personal information in the case of criminal background checks in positions not required by law, including positions which involve Company money and property, etc. Collection of biometrics including facial scans and fingerprint information is utilized for the purpose of providing access to office buildings, recording clocking in and out work times, religious data collection, and medical certification to exercise Company welfare rights. The mentioned information is disclosed to Company subsidiaries within the Charoen Pokphand Group Companies and Company business alliances to offer and provide employee benefits and direct marketing.

*Legitimate Interest: The Company collects, uses and/or discloses personal information to evaluate performance and associated considerations for salary adjustments, bonuses, and promotions, work-related opinion surveys, preparations of reports to present to management and external organizations, enrollment to various training courses at the Company, processing for tax benefits, whistleblower protection in corruption, illegal acts and company policy infringement cases, operating or creating systems to prevent corruption or non-compliance with laws and Company regulations, work inspection, Company litigation, confirmation of information correctness in documents issued by the Company, mergers, acquisitions and reorganization.

*Vital Interest: The Company discloses user personal information in the event of emergency illness or accidents while working with the goal to reduce life threatening danger and health risks.

*Legal Obligation: The Company collects, uses, or discloses personal information for processing to comply with relevant laws, including:

• Surveillance and compliance with measures to prevent and control infectious diseases according to the Communicable Disease Act 2015.

• Transfer of information relevant to employee hazards and illnesses according to the Occupational Safety, Health and Environment Act, 2011, Compensation Act, 1994.

• Submission of employee withholding tax information to the Revenue Department according to the Revenue Code.

• Inspection of directors and executives for criminal records according to the Securities and Exchange Act B.E. 2535 and the Public Company Limited Act B.E. 2535, and chauffeurs according to the Land Transport Act B.E. 2522.

• Inspection of health history for employees holding certain positions, such as food handlers, as required by law according to the ministerial regulations for places selling food issued in accordance with the Food Act B.E. 2522.

• Requesting a medical certificate for sick leave of 3 days or more, as per the Labor Protection Act B.E. 2541.

• Requesting evidence from officials or government agencies with legal authority.

2. Types of Personal Data Collected

Applicants

Personal Information

1. Personal information appearing on a resume or CV (Curriculum Vitae)
2. Personal information appearing on a job application, such as full name, title, gender, age, date of birth, phone number, email, educational background, references
3. Copies of documents issued by government agencies, institutions, or organizations, such as a copy of national identification card, passport, house registration, name change certificate, driver’s license, professional license, work permit for foreign workers

Sensitive Personal Data

1. Health data, such as weight, height, chronic diseases, infectious diseases
2. Information about criminal history

Storage Period

• In the case of unsuccessful application, the Company will store user information with the purpose of considering appropriate future vacancies for a period not over 2 years.

• In the case of successful employment and gaining contract status as a Company employee, the Company will keep employees’ personal information as deemed necessary and personal data will be visible in the Company’s Data Retention and Disposal Policy.

Employees

Personal Information

1. Personal information appearing on job applications and/or company systems, such as full name, title, gender, age, date of birth, phone number, email address, educational background, references.
2. Copies of documents issued by government agencies, institutions, or organizations, such as copies of national identification cards, passports, house registrations, name change certificates, driver’s licenses, professional licenses, and work permits for foreign workers.
3. Financial information, such as bank account numbers, details regarding salary payments, overtime pay, compensation, bonuses, and any other benefits.
4. Information regarding employee performance, such as performance evaluations and training records.

Sensitive Personal Data

1. Health data, such as weight, height, chronic diseases, disabilities, pregnancy, physical and mental examination results, blood type, and information on medical certificates.
2. Biometric data, such as facial scans and fingerprints.
3. Criminal history.
4. Religious information.

Retention Period

The company will retain employees’ personal data only for as long as necessary. Details regarding the retention period of personal data are outlined in the company’s Data Retention and Disposal Policy.

3. Collection of Personal Information from Other Sources

For Applicants

The Company may collect an applicant’s personal information from other sources as follows: social media, website or employment agency, and educational institution, according to the information provided with consent. If the applicant has provided personal information of family members or other persons referred to therein, the applicant is responsible for informing the person of the referral for use in the job application processes and must have received prior consent from that person in that capacity.

For Employees

The Company may collect employee personal information received from other sources in the following cases:

• In the case of a merger, acquisition or new organizational structure.
• In the case where a subsidiary company of Charoen Pokphand Group or business alliance discloses employee personal information as notified by the Company. In situations including sending employee personal information for verification of employee status, job position, etc., employee consent is required.

4. Persons/Entities Whereby Personal Information may be disclosed to

As deemed beneficial for the applicant/employee and in accordance with the objectives mentioned above, the Company may disclose personal information to any person or legal entity in order for the Company’s operations to comply with objective and legal bases as notified to the applicant/employee previously.

1. Subsidiaries of the Company, Charoen Pokphand Group Companies and business alliances.
2. Suppliers, professional advisors, government organizations and state enterprises (List of companies attached in document)

5. Rights of the Personal Data Owner

As the owner of personal information, the following rights to request the company to take action are applicable:

• (1) The right to withdraw consent for the Company to process user personal data.
• (2) The right to access and receive a copy of personal information the Company has collected, used, and disclosed.
• (3) Right to request transfer of user personal data.
• (4) Right to object to processing of user personal data.
• (5) The right to request deletion, destruction, or anonymization of user personal data which is not personally identifiable.
• (6) The right to suspend the use of user personal information.
• (7) The right to request correction of user personal information to maintain accurate, current, complete information free from ambiguities
• (8) The right to file complaints in the event the user considers the user’s rights to have been violated by the Company or its officials or representatives according to the Personal Data Protection Act B.E. 2019.

Any request to exercise your rights as stated above must be completed in writing or electronically and the Company will endeavor to process the request within a reasonable period not exceeding the period specified by law. The Company will comply with legal requirements regarding user rights as the owner of personal data.

However, there may be limitations in exercising some of your rights and the Company will explain to the user if it is unable to comply with user requests to exercise rights. The above limitations are in accordance with the Personal Data Protection Act 2019.

The Company reserves the right to charge service fees related to and necessary for the exercise of such rights.

6. Personal Data Protection Officer Details

If an issue warranting complaint against personal information management arises, the user can contact and coordinate with the Personal Data Protection Officer through the following channels:

Data Protection Officer: DPO

No. 313 C.P. Tower Building, 24th Floor, Silom Road, Silom Subdistrict, Bang Rak District, Bangkok 10500

E-mail: privacy@24shopping.co.th

Personal Data Controller

24 Shopping Company Limited

58/28 Village No. 2, The Thara Building, Floor 12-12A, Chaengwattana Road, Bang Talat Subdistrict, Pak Kret District Nonthaburi Province 11120

E-mail: dpc@24shopping.co.th

If users consider the processing of user personal data as noncompliant with the Personal Data Protection Act B.E. 2019, complaints should be directed to the Office of the Personal Data Protection Commission.

4. Privacy Notice in recording and storing CCTV footage at Shopat24Store

24 Shopping Company Limited (“Company”) emphasizes the confidentiality in personal information provided to the Company though means consistent with personal data protection laws. The Company requests the user to read the document notifying personal information processing, to acknowledge and comprehend the purposes for which the Company collects, uses and discloses user personal information in activities mentioned below. 

1. Purpose and basis for data processing

• Purpose of data processing: The Company records and stores closed-circuit television (CCTV) footage within Shopat24Store and surrounding vicinity according to security measures to prevent dangers which may occur to users, facilities, and to prevent potential damage towards the Company.
• Basis for data processing: The Company processes user personal data under the following rationales:
  • Legitimate Interests: The Company uses user personal information for processing in order to maintain safety among employees, service users, and other persons entering the store and nearby vicinity. These interests extend to safeguarding Company assets and preventing unauthorized persons from entering or exiting restricted areas, and the investigation of various incidents within Company buildings and facilities.
  • Legal Obligation: The Company may use user personal data for legal compliance as requested by government agencies with legal authority or as evidence in crime or accident investigations within Company buildings and facilities. 

2. Personal Data Collection Category and Collection Period

However, the footage will automatically be deleted from the system, or the Company will render personal information non-identifiable after the mentioned period has elapsed.

3. Third-party Disclosure Policy

The Company discloses personal information to external agencies or persons as necessary in order to fulfill processing purposes and basis as stipulated in Section 1. The persons mentioned are employees and companies contracted to operate CCTV cameras and security companies, etc., operating in the capacity of personal data processor and may be required to disclose information upon authorized government agency requests. The agencies, which may include the Royal Thai Police, Prosecutors’ offices, courts, or authorized government officials including investigators and prosecutors, etc., may also disclose data to government agencies and government officials if deemed beneficial for Company litigation.

4. Data Owner Rights

Users have (1) the right to withdraw consent for the Company to process user personal data (2) the right to access and receive a copy of the personal data the Company has collected, used, and disclosed (3) the right to request transfer of user personal information (4) Right to object to the processing of user personal data (5) the right to request deletion, destruction, or anonymization of user personal data. (6) the right to suspend the use of user personal data. (7) the right to request correction of user personal data to enable accurate, current, and complete information which prevents misunderstanding. (8) the right to file complaints in the event where the user considers violation of rights by the Company or its officials or representatives according to the Personal Data Protection Act B.E. 2019.

Any request to exercise user rights as stated above must be conducted in writing or through the provided Company electronic system. The Company will strive to process requests within a reasonable timeframe which does not exceed the period specified by law. The Company will comply with legal requirements regarding user rights as the owner of personal data.

However, limitations in exercising some user rights may exist and the Company will provide rationale towards the inability to comply with respective requests in accordance with the Personal Data Protection Act 2019.

In exercising of the above rights, the Company reserves the right to charge related and necessary service fees to process personal information as requested by the user.

5. Changes to Personal Data Processing Notice Documentation (Privacy Notice)

To comply with the Personal Data Protection Act 2019, this Personal Data Processing Notice (Privacy Notice) may be amended from time to time. The Company will display the current version on the website http://24shopping.co.th/privacy-policy/

6. Personal Data Protection Officer Details

If an issue warranting complaint against personal information management arises, the user can contact and coordinate with the Personal Data Protection Officer through the following channels:

Data Protection Officer: DPO

No. 313 C.P. Tower Building, 24th Floor, Silom Road, Silom Subdistrict, Bang Rak District, Bangkok 10500

E-mail: privacy@24shopping.co.th

Personal Data Controller

24 Shopping Company Limited

58/28 Village No. 2, The Thara Building, Floor 12-12A, Chaengwattana Road, Bang Talat Subdistrict, Pak Kret District Nonthaburi Province 11120

E-mail: dpc@24shopping.co.th

If users consider the processing of user personal data as noncompliant with the Personal Data Protection Act B.E. 2019, complaints should be directed to the Office of the Personal Data Protection Commission.

This Personal Data Processing Notice Documentation (Privacy Notice) will be entirely effective on the same day as personal data protection in accordance with the Personal Data Protection Act B.E. 2019 comes into effect in its entirety.

5. Privacy Notice for Customer Service Center (Call Center)

1. Purpose and basis for data processing

• Purpose of data processing: The Company records and stores user personal information as a means to provide services as requested, answer inquiries, confirm user identity in using the service, conduct marketing, promote sales, survey needs and satisfaction, and analyze service data.
• Data processing basis: The Company processes user personal data under the following basis:

  • Contract basis: The Company processes user personal data in order to provide services as requested, answer inquiries, confirm user identity in using the service, conduct marketing, promote sales, survey needs and satisfaction, and analyze service data. The following operations cannot be proceeded if the user does not consent to providing personal information.

  • Legitimate Interest: The Company may process personal information in order to improve the service, survey needs and satisfaction, analyze service data, preparing reports for meetings within the agency and presentations to the executive team.

  • Legal Obligation: The Company may transfer user personal information to authorized government agencies, which may include investigators, prosecutors, courts, etc.

2. Personal Data Collection Category and Collection Period

However, the Company will delete or make personal information non-identifiable after the above period has elapsed.

3. Third-party Disclosure Policy

The Company discloses user personal information to companies contracted to provide services as requested, answer inquiries, verify user identity for services, conduct marketing, promote sales, survey needs and customer satisfaction, and analyze service data. The Company may be required to disclose information upon authorized government agency requests. The agencies, which may include the Royal Thai Police, Prosecutors’ offices, courts, or authorized government officials including investigators and prosecutors, etc., may also disclose data to government agencies and government officials if deemed beneficial for Company litigation.

4. Data Owner Rights

Users have (1) the right to withdraw consent for the Company to process user personal data (2) the right to access and receive a copy of the personal data the Company has collected, used, and disclosed (3) the right to request transfer of user personal information (4) Right to object to the processing of user personal data (5) the right to request deletion, destruction, or anonymization of user personal data. (6) the right to suspend the use of user personal data. (7) the right to request correction of user personal data to enable accurate, current, and complete information which prevents misunderstanding. (8) the right to file complaints in the event where the user considers violation of rights by the Company or its officials or representatives according to the Personal Data Protection Act B.E. 2019.

Any request to exercise user rights as stated above must be conducted in writing with the request filed with the contracted company. The Company will proceed to exercise rights with the contracted company upon receiving respective requests from the contracted company.

5. Changes to Personal Data Processing Notice Documentation (Privacy Notice)

To comply with the Personal Data Protection Act 2019, this Personal Data Processing Notice (Privacy Notice) may be amended from time to time. The Company will display the current version on the website http://24shopping.co.th/privacy-policy/.

6. Data Protection Officer (DPO) Details

If an issue warranting complaint against personal information management arises, the user can contact and coordinate with the Personal Data Protection Officer through the following channels:

Data Protection Officer: DPO

No. 313 C.P. Tower Building, 24th Floor, Silom Road, Silom Subdistrict, Bang Rak District, Bangkok 10500

E-mail: privacy@24shopping.co.th

Personal Data Controller

24 Shopping Company Limited

58/28 Village No. 2, The Thara Building, Floor 12-12A, Chaengwattana Road, Bang Talat Subdistrict, Pak Kret District Nonthaburi Province 11120

E-mail: dpc@24shopping.co.th

If users consider the processing of user personal data as noncompliant with the Personal Data Protection Act B.E. 2019, complaints should be directed to the Office of the Personal Data Protection Commission.

This Personal Data Processing Notice Documentation (Privacy Notice) will be entirely effective on the same day as personal data protection in accordance to the Personal Data Protection Act B.E. 2019 comes into effect in its entirety.