Privacy policy
"Better Vision" ("we") believes that customer privacy, beyond being a legal obligation to protect and a current indicator of business sustainability, is also a shared value in modern Thai society that should be preserved. In this regard, in addition to legal compliance, we want to be a part of Thai society in creating transparency and appropriate control over your personal data. We thank you for your trust in giving us the opportunity, and we will take utmost care of your personal data while continuing to deliver the best products and services we can offer you.
This Privacy Policy covers retail stores, websites, social media channels, online communication channels, customer service channels, as well as other locations where your personal data is collected in Thailand.
We may amend this Privacy Policy from time to time to align with potential changes in our business operations. Any policy changes will take effect immediately upon publishing the revised Privacy Policy on our websites, applications, or other communication channels, unless we deem it necessary to postpone the enforcement, in which case we will specify the effective date in advance within this document. Please review this policy and contact us for further information if you have any questions, through the channels provided in this document.
1. Personal Data We Collect
We collect or receive data that can identify an individual, which can be classified into the following categories:
- Personal details: such as name, title, age, date of birth, photographs, including eyesight prescriptions for making eyeglasses.
- Contact details: such as telephone number, postal address, delivery information, email address, social media information (e.g., Line ID, Facebook and/or Google accounts, etc.), including contact person details or contact information on other channels.
- Financial and transaction details: such as bank accounts or other payment instruments, PromptPay ID, information regarding your payments, date and/or time of payment, payment amount, refunds, accumulated points, date and location of purchase, order number, service appointment date, address, date and time of pickup or delivery, recipient's acknowledgment messages, recipient's email sign-offs, product warranty information, claims, and other information related to products and/or services you purchased.
- Membership details: such as membership number, accumulated points, points expiration date, membership type, customer type, joining/registration date and month, membership duration, including records of your preferences to receive our marketing information.
- Technical details: such as Internet Protocol (IP) address, cookies, time spent on our website, login information, GPS location data, latitude, longitude, and time spent on each web page, search history, browsing information, browser type and version, time zone setting and location, browser plug-in types and versions, operating system, platform, and other technologies on the devices you use to access our website, as well as any other technical information arising from the use of our system services.
The personal data we collect may vary depending on the context of our relationship with you and the purpose of data usage specified in this policy.
2. Purposes of Our Data Usage
We clarify the purposes and lawful bases for using personal data according to the following situations:
|
Purpose of Data Usage |
Our Lawful Basis |
|
Selling our products and providing services (e.g., eyesight testing, making eyeglasses, contacting for delivery and pickup, product warranty, exchange, modification or return of products, and refunds, etc.) |
To perform the contract between us, and to provide health services to you according to optometry professional standards. |
|
Customer relationship contact (e.g., inquiring about product/service satisfaction, providing customer service through various channels including receiving complaints or claims, etc.) |
To perform the contract between us and you, and/or for your legitimate interests in receiving services from us. |
|
Verifying your identity (e.g., for registration or authentication to prove you are the rightful person to receive services or exercise legal rights with us, etc.) |
To perform the contract between us and you. |
|
Marketing contact through various channels (e.g., contacting for advertising, offering promotions via email, and various social media platforms, etc.) |
We will proceed only upon receiving your consent. |
|
For the benefit of business operations, product, and service development (e.g., preparing anonymous overview business reports, measuring marketing performance, or evaluating our operations and services, etc.) |
For our legitimate interests. |
|
Performing duties according to legal provisions (e.g., acting to comply with laws or orders of government agencies, cooperating in court proceedings, issuing tax invoices, disclosing information to tax collection authorities, and disclosing information for investigation or prevention of illegal acts, etc.) |
For legal compliance and public interest. |
|
Protecting our interests (e.g., detecting, preventing, and responding to fraud and illegal acts to prevent damage to our property and credibility, etc.) |
For our legitimate interests. |
Any consent we rely on to contact you may be managed through channels we cannot control, such as agreeing to receive promotional contacts via the Line platform or other social media platforms. In this regard, you can manage your consent or news subscriptions through the settings available in those programs or platforms yourself.
3. Third Parties Who May Receive Your Personal Data From Us
We do not have a policy to disclose or transfer your personal data to third parties. However, in certain necessary cases, we may need to disclose personal data for specific reasons to the following entities:
- Other affiliated companies of Better Vision, such as Namsin Thai Co., Ltd., etc., as these companies act as supporters of our business operations.
- Our service providers, such as transportation companies, printing houses, outsourced customer service centers, data analytics providers, sales agents, outsourced advertising and marketing agencies, system or computer program providers, as well as cloud computing service providers, to facilitate the provision of services to you, etc.
- Social media service providers, such as Facebook, Google, or Instagram, etc.
- Business partners, such as E-commerce platforms or any platforms where we may offer products or services, etc.
- Government agencies, such as law enforcement agencies, courts of justice, government bodies, or other third parties. We will proceed only when we believe it is necessary to comply with legal obligations, or to protect our rights, or the legitimate rights of others, etc.
- Our advisors, such as lawyers, technical experts, auditors, or other types of professionals, for business operations or to protect our legitimate interests or those of third parties legally, etc.
- Legal assignees or transferees, such as in cases of corporate restructuring, mergers, or business transfers, etc.
In cases where these entities operate or provide services on our behalf, we will control the use of your data only as necessary and as assigned by us. We will also set conditions to keep data secure through data processing agreements and/or appropriate security assessments of the services on the data. However, if third parties have the right to use your data themselves, we may not be able to control their use of such data. Please study the privacy policies of the relevant third parties to understand how they collect, use, or disclose your personal data.
4. Collection and Processing of Personal Data of Legally Incapacitated Persons
We may collect data of minors, quasi-incompetent persons, and incompetent persons to provide our normal services. However, if we detect that we have collected or used the data of such individuals without a legal basis other than consent, or if the consent is legally invalid, we will consider stopping that processing immediately.
5. Retention Period for Your Personal Data
We strictly need to retain your personal data according to our internal regulations for an appropriate period not exceeding legal professional principles, which generally aligns with the statute of limitations for litigation. After that, we will appropriately delete or anonymize the data to prevent any potential risks to you in the future.
6. Data Security
We will strive to protect your data appropriately to prevent it from being lost, accessed, destroyed, used, altered, modified, or disclosed without authorization or unlawfully. We have implemented security measures for personal data, examples of which include: (1) Standardized, properly licensed, and updated computer systems that support appropriate security patches. (2) Enterprise-grade antivirus programs. (3) Multi-factor authentication systems for individuals with access to critical data systems. (4) Active Directory systems to control employee access rights to computer systems and revoke rights upon termination of employment. (5) Physical security measures, such as identity verification systems before entering data storage areas, etc. And (6) other measures according to our information security policies.
7. Cookie Policy
When you visit our website, we automatically collect certain information from you using cookie technology. Cookie technology generally serves the purpose of remembering website visitor details or even browsing history to be applied in various situations. Some cookies are strictly necessary to enable the website to function at full capacity. Meanwhile, some cookies exist to track information about your website usage and are used to analyze your browsing behaviors.
You can configure your cookie settings through your internet browser yourself. However, refusing the use of cookies may affect the website's performance or even your service experience, preventing you from fully enjoying the convenience of visiting or using services through our website.
8. Rights of the Data Subject
Under the Personal Data Protection Act, relevant legal exceptions, and the conditions we set, you may have the following rights as a data subject:
- Right of Access: You may have the right to request access to or request a copy of the personal data we collect, use, or disclose about you.
- Right to Rectification: You may have the right to request that your data collected by us be corrected, complete, and up-to-date.
- Right to Data Portability: You may have the right to receive your data in an organized, readable electronic format, and to transmit or transfer such data to another personal data controller.
- Right to Object: You may have the right to object to the collection, use, or disclosure of your data in certain cases.
- Right to Restriction of Processing: You may have the right to request the suspension of the use of your data in certain cases.
- Right to Withdraw Consent: For purposes where we requested your consent prior to processing, you can withdraw that consent, resulting in us stopping the processing that relies on your consent.
- Right to Erasure: You may have the right to request us to delete or anonymize your data according to our conditions. We will consider deleting the data appropriately and may still retain your personal data for necessary business purposes, such as legal compliance or protecting our legitimate interests or those of third parties according to the law.
For your privacy and the security of your personal data, we may ask you to verify your identity before proceeding with any requests to exercise the above legal rights.
Furthermore, since some rights have strict conditions under legal provisions, we may need to consider approving your request on a case-by-case basis.
9. Contact Details
If you wish to exercise your rights as a data subject, or have inquiries or complaints regarding the use of your personal data under this Privacy Policy, please contact us via pdpa@visionventures.co.th.
