The Brilliant Intergroup Co., Ltd. (hereinafter referred to as the “Company”) places great importance on the protection of personal data, the respect for privacy rights, and the security of the personal information of its users. This Data Privacy Policy has been established to implement strict measures for safeguarding personal data, ensuring that any personal information collected by the Company is utilized in accordance with the needs of its users and complies with the Personal Data Protection Act B.E. 2562 (2019) and other applicable laws.
This policy outlines how the Company handles the personal information of its users, allowing data owners to be informed of the Company’s practices in protecting personal data. Therefore, the Company hereby declares its Data Privacy Policy as follows:
1. Purpose of This Policy
This policy is designed to inform users, as data subjects, of the purposes and details regarding the collection, use, and disclosure of personal data. It also aims to outline the legal rights of users related to their personal data.
2. Personal Data Collected, Used, and Disclosed by the Company
2.1 Personal data refers to information that can identify a user either directly or indirectly, including:
Examples of personal data the Company may collect, use, and disclose include:
2.2 Sensitive Personal Data
Sensitive personal data refers to personal information specifically defined by law. The Company will only collect, use, and disclose sensitive personal data when explicit consent is obtained from the user or when the Company is required to do so by law. The Company may collect, use, and disclose sensitive personal data, including biometric data (such as facial images, fingerprint images, iris scans, voiceprints), for the purpose of verifying and authenticating the identity of users applying for, requesting services, or conducting financial transactions through electronic channels, websites, customer service centers (Call Center), or other channels.
In this policy, unless specifically stated otherwise, “personal data” and “sensitive personal data” concerning the user as mentioned above will collectively be referred to as “personal data.”
3. Purposes for Collecting, Using, and Disclosing Personal Data
The collection of personal data will be conducted within the legal framework of the Company’s purposes and will only gather personal data to the extent necessary for use or disclosure for the benefit of the Company’s operations. Examples of such purposes include:
To inform data owners of offers, privileges, benefits such as discounts, freebies, promotions, as well as recommendations and advertising information related to the Company’s products and/or services (if available).
4. Retention Period for Personal Data
The Company will retain personal data for a reasonable period based on the necessity of retention for the purposes mentioned above, according to the type of personal data collected, or for the period required by law, as applicable.
5. Rights of Service Users under the Law
The Personal Data Protection Act aims to give service users more control over their personal data. Service users can exercise their rights under the Personal Data Protection Act through the channels designated by the Company, which include the following:
5.1 Right to Access and Request a Copy of Personal Data
Service users have the right to access and receive a copy of their personal data held by the Company, unless the Company has the legal right to refuse the request under law or court orders, or if the request may negatively impact the rights and freedoms of others.
5.2 Right to Correct Personal Data
Service users have the right to request the Company to correct or update any inaccurate or incomplete personal data.
5.3 Right to Request Deletion of Personal Data
Service users have the right to request that the Company delete or destroy their personal data, or anonymize their personal data in a way that the service user’s identity cannot be identified, unless the Company has a legal justification to refuse the request.
5.4 Right to Request Suspension of Personal Data Usage
Service users have the right to request the Company suspend the use of their personal data in certain cases (e.g., when the Company is reviewing a request to correct personal data, or objecting to the collection, use, or disclosure of the service user’s personal data, or the service user requests suspension of personal data usage instead of deleting or destroying unnecessary data. This may be due to the necessity of retaining personal data to establish or defend legal claims, comply with legal obligations, or exercise legal rights).
5.5 Right to Object to the Collection, Use, or Disclosure of Personal Data
Service users have the right to object to the collection, use, or disclosure of their personal data in cases where the Company operates under a legal basis of legitimate interest or for direct marketing purposes or scientific, historical, or statistical research. However, the Company may refuse the request if it can demonstrate that the processing of the personal data is justified by compelling legal reasons or is necessary for the establishment, exercise, or defense of legal claims, or for public interest purposes.
5.6 Right to Request Access to or Transfer of Personal Data
Service users have the right to request a copy of their personal data in a format that can be read or used through commonly used automated tools or devices. They may also request the Company to send or transfer their personal data to a third party or request access to personal data that the Company has transferred to third parties, unless it is technically impossible or the Company has a legal justification to refuse the request.
5.7 Right to Withdraw Consent
Service users have the right to withdraw their consent given to the Company at any time, according to the procedures and methods set by the Company, unless it is legally impossible to withdraw consent. The withdrawal of consent will not affect the collection, use, or disclosure of personal data that has already been consented to before the withdrawal. Prior to withdrawing consent, service users can review and change their consent for the use or disclosure of personal data for marketing purposes through the provided channels or the customer service center at 02-049-1016, or any other channel the Company may set in the future.
5.8 Right to File a Complaint
Service users have the right to file a complaint with the Personal Data Protection Committee or the Office of the Personal Data Protection Committee if the Company fails to comply with the Personal Data Protection Act.
6. Who may the company disclose personal data to?
6.1 The company may disclose personal data of users to others under the user’s consent or as permitted by law. The person or organization receiving the data will collect, use, and disclose the personal data of users within the scope of the consent given by the user or the scope outlined in this policy.
6.2 The company may disclose personal data of users for various purposes, such as providing services to the user, analyzing and improving services and products, conducting research or creating statistical data, promoting sales and public relations of the company, managing operations, preventing fraud, allowing third parties to provide support services to the company, and verifying the identity of the user. The company may disclose the data to individuals or organizations such as financial institutions, companies in the financial business group, insurance companies, personal data processors, co-brand business partners, external service providers, company representatives, contractors, financial institutions, auditors, external inspectors, credit information companies, authorities, or any legal entities or individuals with relationships or contracts with the company, including executives, employees, agents, contractors, and consultants of the company and the recipients of the data.
7. Use of Cookies
“Cookies” are data sent by the company to the user’s web browser, which is then stored in the user’s system. When “cookies” are used, the company can record or remember the user’s information until the user exits the web browser, deletes the cookie, or disables the cookie’s function.
If you choose to use cookies, you will experience more convenience while browsing the website, as cookies help remember the websites you visit. The company will use the information stored or collected by cookies for statistical analysis or company activities to improve the quality of its services.
8. Contact Channels
If users have any questions regarding the terms and conditions of service, “Collection, Use, and Disclosure of Personal Data” as per the Personal Data Protection Act B.E. 2562, they can inquire further at:
Personal Data Protection Officer
The Brilliant Intergroup Co., Ltd.
501/3 Bangwaek Road, Bangwaek Subdistrict, Phasi Charoen District, Bangkok 10600
Phone: 02-049-1016
THE BRILLIANT INTERGROUP CO., LTD.
Products
Menu