Ricult (Thailand) Co., Ltd (the “Company”) recognizes the importance of protecting the user’s (“you”, “your”) privacy and personal data in connection with the usage of Ricult applications (the “Application”), Ricult website (the “Website”), and their relevant features, technology, contents, and related products (Application and Website collectively referred to as “Platform”). Therefore, we published our Personal Data Protection Policy (“Policy”) to prescribe the process of data collection, storage, usage, and disclosure, in addition to notifying your rights prescribed under the Personal Data Protection Act B.E. 2562 (“PDPA”) and relevant rules, regulations, and amendments.
Using and/or registering membership to the Company’s Platform, you (or your legal guardians/legal representatives for individuals not over 20 years old) acknowledge the processes and practices outlined in this Policy.
1. Collection of Personal Data by the Company
1.1 Personal data collected from you are data that directly or indirectly identifies you, The Company collects the
following types of personal data from you,
1.1.1. Personal Information, first and last name, phone number, and address.
1.1.2. Email Address
1.1.3. Location information of your farm or garden based on geographic coordinates. Checking the location of your farm or garden via agricultural satellite
1.1.4. Contacting Information, including any form of contact channels for customer services and sending news of our Platform’s improvement and maintenance, such as Email, Facebook Chat, or phone number.
1.1.5. Feedback Information, including any form of correspondence and information that you had already given consent to the Company when you joined campaign activities or any survey that the Company set up. Such as by phone number, email, any kinds of chat, communication on the Platform, or through other social networks.
1.1.6. Technical Information, such as IP Address, any technical information used in entering the system, Browser types and versions, cookies data, time zone setup, browser plug-in types and versions, operating system and platform.
1.1.7. Visiting Information, such as URLs linking to/from the Platform (including date and time), products that you searched or looked for, web page response time, downloading problems, amount of time on each web pages, interaction information on web pages (such as scrolling, clicking, or mouse movement), and the process of exiting the web pages.
2. Sources of Personal Data
2.1. We rely on three sources to collect personal data from you:
2.1.1. Direct Interaction: You may provide your personal data through registration or applying for membership on the Platform, or by searching for products or services of the Company through social media, or through correspondence with the Company via telephone, email, the Platform, or other social media, or when you are involved in campaigns (including friend-introducing and sales promotion campaigns), or various other surveys that the Company initiated.
2.1.2. Automated response: When you interact with the Company’s Platform, the Company may automatically gather your device’s technical data via cookies and other similar technology.
2.1.3. Data received indirectly: The Company may receive your personal data from people related to you, such as family members, friends, and recommenders. The Company may also receive your personal data from third parties such as our business partners, other websites you visited, other applications or platforms you are a member or a user, outsourced service technicians, transaction provider, advertisers, data analyst, and data researchers (third parties collectively referred to as the “Company’s Partners”), such as:
18.104.22.168. When you visit or access websites and applications of a third party that is related to the Company;
22.214.171.124. When you use or request for services from third party services related to the Company such as apply for payment service with a company that has a relationship with the Company;
126.96.36.199. When you connect your user account to the website or application of a third party which the Company may grant automatic password for connecting and share your personal data with such website or application and/or;
188.8.131.52. When you enter the Company’s Platform through other social media login methods (such as Facebook, Google, or Apple) without filling in your personal data on the Platform, it will be deemed that you have given consent to the Company to access and collect your public personal data from social media platforms which include other data shown in the login process for the purpose of using the Company's Platform.
2.2. If the Company receives your personal data indirectly, the Company will notify you within 30 days after receiving and collecting the data. The Company will ensure that it subsequently receives your consent for the collection, use, and/or disclosure of your personal data, except when the Company has legitimate reasons as grounds to do otherwise.
3. Purpose of collection, use, and disclosure of personal data
3.1. The Company will collect, use or disclose your personal data only when it is necessary to comply with the Company’s legal and contractual rights, obligations, and responsibilities, which are:
3.1.1. 1st Purposes
184.108.40.206.1. To identify you when using the Platform. To perform our duties to provide information, content, products, campaigns, and services. To help us separate you from other individuals on the Platform.
220.127.116.11.2. To track and record your usage of the Platform along with making related reports.
18.104.22.168.3. To process your requests and provide approval on delivering products and/or services prior to entering into contracts with you.
22.214.171.124. Type of data
126.96.36.199.1. Personal Information
188.8.131.52.2. Contacting Information
184.108.40.206.3. Recent Platform Usage Information
220.127.116.11.4. Financial Information
18.104.22.168.5. Technical Information
22.214.171.124.6. Address Information
126.96.36.199.7. Farm location
188.8.131.52. Legal Justification and/or Legitimate Interest
184.108.40.206.1. For our legitimate interests in network security and to prevent fraud. (To act in compliance with the law)
220.127.116.11.2. To carry out contractual rights and obligation.
18.104.22.168.3. For our legitimate interests in improving the Company’s services and products.
3.1.2. 2nd Purposes
22.214.171.124.1. To improve services and products. Such as using your data history to provide for better products and services, or to use your data to create a statistical model to satisfy users’ needs.
126.96.36.199. Type of data
188.8.131.52.1. Personal Information
184.108.40.206.2. Recent Platform Usage Information
220.127.116.11.3. Financial Information
18.104.22.168.4. Contacting Information
22.214.171.124.5. Feedback Information
126.96.36.199.6. Technical Information
188.8.131.52.7. Visiting Information
184.108.40.206.8. Farm location
220.127.116.11.9. Address Information
18.104.22.168. Visiting Information Legal Justification and/or Legitimate Interest
22.214.171.124.1. For our legitimate interests in improving the Company’s services and products.
3.1.3. 3rd Purpose
126.96.36.199.1. To improve services and products. Such as using your data history to provide for better products and services, or to use your data to create a statistical model to satisfy users’ needs.
188.8.131.52. Types of data
184.108.40.206.1. Contacting Information
220.127.116.11. Legal Justification and/or Legitimate Interest
18.104.22.168.1. For our legitimate interests in communicating duties and policies. (To act in compliance with the law)
3.1.4. 4th Purpose
22.214.171.124.1. To communicate, respond, and report problems to you or to fix possible problems that might occur as a result of the Company’s services or for the Platform’s interactive operations.
126.96.36.199.2. For managing the relationship between you and the Company (such as Customer Services, surveys, handling of complaints).
188.8.131.52. Types of data
184.108.40.206.1. Personal Information
220.127.116.11.2. Recent Platform Usage Information
18.104.22.168.3. Financial Information
22.214.171.124.4. Contacting Information
126.96.36.199.5. Feedback Information
188.8.131.52.6. Technical Information
184.108.40.206.7. Visiting Information
220.127.116.11. Legal Justification and/or Legitimate Interest
18.104.22.168.1. For our legitimate interests in communicating duties and policies. (To act in compliance with the law)
3.1.5. 5th Purpose
22.214.171.124.1. To Protect the Company’s business and Platform.
126.96.36.199.2. To manage and protect the Company’s business and Platform including inspecting for possible violation of Terms of Services.
188.8.131.52. Types of data
184.108.40.206.1. Personal Information
220.127.116.11.2. Recent Platform Usage Information
18.104.22.168.3. Financial Information
22.214.171.124.4. Contacting Information
126.96.36.199.5. Technical Information
188.8.131.52.6. Visiting Information
184.108.40.206. Legal Justification and/or Legitimate Interest
220.127.116.11.1. To comply with rules and regulations when necessary.
3.1.6. 6th Purpose
18.104.22.168.1. To comply with rules and regulations.
22.214.171.124. Types of data
126.96.36.199.1. Personal Information
188.8.131.52.2. Recent Platform Usage Information
184.108.40.206.3. Financial Information
220.127.116.11.4. Contacting Information
18.104.22.168.5. Technical Information
22.214.171.124.6. Visiting Information
126.96.36.199. Legal Justification and/or Legitimate Interest
188.8.131.52.1. To comply with rules and regulations when necessary.
3.2 The Company may share your personal data with:
3.2.1 Government agencies and/or the agencies responsible for the oversight of the Company’s business;
3.2.2 Company’s business partners, agencies or other organizations (such as independent Auditors, data processors, and other Platforms that have legal relation with the Company and/or you);
3.2.3 Third parties in case of business, merging, transferring, selling, purchasing, joint venturing, delivering, sharing, distributing, or other similar transactions, in whole or in parts, business assets and shares of the Company;
3.2.4 Courts, organizations, or entities that legally ordered or allowed the Company to disclose your personal data;
3.2.5 Data analyst and Search Engines service providers to improve and increase efficiency to Company’s Platform;
3.2.6 Social and Advertisement service providers whose purpose is to provide you and other related users relevant information about the Company's Platform. Data shared include your digital footprint for advertisement purposes; however, the data will be broad and will not lead to the specific identification of users. (such as data about 500 male that are 30 years old that used the advertisement link during a specific date);
3.2.7 Other service providers of the Company includes, but is not limited to, (1) Internet service provider (2) Information technology service providers (3) Service providers of payment systems and payment (4) Marketing and advertising service providers (5) Telecommunication service providers (6) Local or international cloud storage service providers (7) Printing service providers (8) Lawyer, legal consultant, auditor or other professions who support or assist business operations of the Company (9) Storage or documents-shredding service providers; and/or;
3.2.8 Our legal representative.
3.3 Nevertheless, entities or other organizations that the Company shared your data with, will only collect, gather, use, or disclose your personal data only within the limit of the law.
4 Sending or transferring personal data to foreign countries
4.1 It may be necessary for us to send or transfer personal data to foreign countries for the purposes listed above as the Company has subsidiaries in foreign countries. Therefore, we will use our best effort to send or transfer personal data to countries that have sufficient credibility and security measures equivalent to Thai laws except when
4.1.1 The Company need to comply with the law;
4.1.2 You consented even after the Company provided notice of the foreign country’s insufficient security measures.
4.1.3 We are acting in accordance with the contract entered into between you and the Company or as your stated request before entering into the contact;
4.1.4 We are acting in accordance with the contract entered into between the Company and entities or other juristic persons for your benefit;
4.1.5 The transfer is critical to protect or prevent extreme harm to a person's life, health and body, when you are unable to provide consent at that time.
4.1.6 The transfer is critical to perform any necessary actions for public interest.
5 Security protocol for storing personal data
5.1 The Company has implemented security measures (both organizational and technical measures) to ensure that your personal data is adequately secured, such as via the use of Passwords, strict data security policy standards, and confidentiality obligations of employees, employers, and service providers.
5.2 When you or the Company set a password, you have the duty and obligation to keep the password confidential to prevent unauthorized access to your personal data.
5.3 Transferring data through the internet is not 100% secured; however, we will do our best to protect your personal data. Unfortunately, the Company cannot guarantee the security of data transmitted to the Company’s Platform, so you will have to take risks for each time data is transmitted.
6. Retention period of personal data
6.1 The Company will collect your personal data throughout the duration in which you are a user of the Company’s Platform to achieve the relevant objectives. Additionally, the Company may store or keep your personal data per the legal prescription period or other relevant laws:
6.1.1 Personal information
6.1.2 Recent Platform usage information
6.1.3 Travel information
6.1.4 Financial information
6.1.5 Contacting information
6.1.6 Feedback information
6.1.7 Technical information
6.1.8 Visiting information
The Company will delete, destroy, or anonymize your personal data 5 years after you stop using the Company’s Platform or when it is no longer necessary, or the stated time period above lapsed.
7. Your Rights
7.1 You may request to exercise your rights relation to your personal data in accordance with the law and current outstanding policy and procedures or any further amendment in the future. In case, you are under 20 years old or are deemed to be juristically incapable, you may ask for your rights to be exercised by your parent, legal guardian, or representative.
7.1.1 Right to access and to request copies of data: you have the right to access and receive copies of your personal data which the Company possessed.
7.1.2 Right to request amendment on data: you have rights to request amendment or adjustment on your own personal data that is not up to date because it is incorrect or incomplete.
7.1.3 Right to request the data be deleted: you have rights to request that your personal data be deleted or anonymized.
7.1.4 Right to request the use of data be suspended: you have rights to request the usage of your data be suspended during the processing of your other requests regarding your rights and personal data.
7.1.5 Right to object processing data: you have rights to object to collecting, processing, or disclosing your personal data when the Company is operating based on legitimate interest or for purposes of direct marketing or scientific, history, or statistical research.
7.1.6 Right to transfer data: you have rights to collect your personal data when the Company makes available your data in readable or usable form through automatic means. Additionally, you have rights to request the Company send or transfer your personal data to third parties and yourself, unless the Company is unable to comply for technical reasons.
7.1.7 Right to withdraw consent: if you have given consent to the Company for data collecting, processing, and/or disclosing of your personal data (regardless of whether you gave consent before the date when the PDPA has been enforced or thereafter), you have the right to withdraw your consent at any time if the Company still holds your personal data unless limited by law or there are existing contracts which benefits you.
Your withdrawal will not affect collecting, processing, or disclosing of personal data that the Company had already done with your consent. However, in some cases, your withdrawal may affect your use of the Company’s Platform, such as the Company not being able to receive promotions, news, new products, or improved services. Therefore, after receiving your withdrawal request, the Company will inform you of the adverse effects to allow you to decide on whether or not you want to continue with the process.
7.1.8 Right to complaint: you have the right to make complaints to relevant authorities (such as the Personal Data Protection Committee, Office of the Personal Data Protection Commission-PDPC) when you believe that the collecting, processing, and/or disclosing of your personal data is done wrongfully or not in accordance with related law(s)
7.2 The exercise of your rights may be limited under related laws, and the Company may decline and not comply with your request. For example, the Company may elect to not comply with your request when the Company is required to comply with the law, court orders, public interests, or when exercising such rights may infringe on the rights or liberty of others. When the Company declines such rights requests, the Company will inform you of the reason for declining.
8. Exercising your rights
8.1 Any request to exercise your rights as mentioned above must be made in writing following procedures provided by the Company. The Company realizes that your consent withdrawal process must be as simple as the process of giving consent, and we will do our best to process your request or provide notification within 30 days or within the period allowed by law.
9.1 When you use the Platform, the Company may run Cookies within your browser. A Cookie is a small digital file which contains letters or numbers that the Company has stored within your browser or your computer’s hard drive. Cookies contain information that have been sent to your computer’s hard disc.
9.2 The purposes of using Cookies are (1) for enabling functions (2) for analysis (3) for recording your preference (4) for sending advertisements.
9.3.1 Cookies are necessary for the Platform functions such as access to your shopping cart or electronic payment service.
9.3.2 Cookies allow the Company to record and count the number of visitors and see visitors' characteristics. This information is vital for further developing the Platform, such as ensuring that users can easily find what they are looking for on the Platform.
9.3.3 Cookies help recognize you when revisiting the Platform. With such information, the Company will be able to provide you with suitable content such as your name and your interests, such as your chosen language and geographic area.
9.3.4 Cookies record your visit on the Company’s Platform, web pages you have visited, and links you have followed. The Company will use this information to arrange the Platform in accordance with your interests. Additionally, the Company may also share such information with Third parties for the same purposes.
9.4 We have no authority over Third parties (including advertising networks and other outsourced service providers) who may use the same Cookies as well.
9.5 You can delete Cookies by using the delete function on the mobile application or your web browser. However, you may not be able to access some parts of the Company's Platform.
10 Marketing Channels
10.1 The Company and Company’s Partners may deliver marketing data, advertisement, and sale promotion information through notifications in the application, post office, telephone, short message service (SMS), emails, and/or other relevant communication application channels when you consented to such correspondence.
12 Contact us
Contacting address: Ricult (Thailand) Co., Ltd 97 Chalermprakiat Rama 9 Road Soi 34, Nongbon, Pravet, Bangkok, Thailand 10330
Contacting channels: firstname.lastname@example.org
Last Amended Month June 2021