This website is operated
by Spider Collection Company Limited
by Spider Collection Company Limited
(the “Company,” “we,” “us,” or “our”) We respect the privacy of every individual who visits this website. Any personal details you provide us with are held in accordance with the Data Protection Act B.E. 2562 (2019) (“PDPA”) and always protected by a number of safeguards.
We are committed to ensuring that your information is secure. In order to prevent unauthorized access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.
1. What Personal Data we collect
For the purpose of this Privacy Policy, “Personal Data” means any information relating to an identified or identifiable natural person.
We may collect or obtain the following types of information which may include your Personal Data directly or indirectly from you or other sources or through our affiliates, subsidiaries, business partners, or other companies. The specific type of Personal Data collected will depend on the context of your interactions with us, and the services or products you need or want from us and companies in Spider Collection Group's data ecosystem.
1.1 Personal details, such as title, full name, gender, age, occupation, job title, position, business type, company name, nationality, country of residence, date of birth, marital status (e.g., national identification number, the photograph of the national identification,
1.2 Contact details, such as a postal address, billing address, residential address, workplace address, the address shown on the national identification card, telephone number, email address, LINE ID, Facebook account, Facebook ID, Google ID, Twitter ID, and other ID from social networking sites, your contact person's contact details (e.g., telephone number, contact data on any correspondence (e.g. written communication with you), and any other contact details you provided to us;
1.3 Membership details, such as account details, member card number, reward points, member ID, member type, customer type, member join/registration date and month, membership period, bank account and payment details, service and product applications (e.g. membership application);
1.4 Financial details, such as debit/credit card or bank information, credit/debit card number, credit card type, issuance/expiration date, cycle cut, account details, bank account details, prompt pay number payment details and records, your information regarding the risk profile for the business partner, credit rating and solvency, information in accordance with the declaration of suitability, suitability of transaction and any other financial details;
1.5 Technical details, such as Internet Protocol (IP) address, cookies, media access control (MAC) address, web beacon, log, device ID (such as international mobile equipment identifier (IMEI), electronic serial number (ESN), mobile equipment identifier (MEID) and serial number (SN)), including any other technical information arising from the use of our platform and systems;
1.6 Behavior details, such as information about your purchasing behavior and data supplied through the use of our products and services;
1.7 Marketing and communication details, such as your preference in receiving marketing from us, our affiliates, subsidiaries, business partners or other companies, and your communication preferences; and/or
1.8 Sensitive data, such as race, religion, political opinions, fingerprints, facial recognition, personal identity information (biometrics), face, information from the iris recognition, physical or mental health or condition, genetic data, medical history, disability, and criminal records.
If you provide Personal Data of any third party to us, e.g., their name, family name, address details, and telephone number for emergency contact, family member income, or if you use the service on any of our platforms with your consent, we can access and collect third party personal information relating to you, such as information on name, picture and/or phone number, as well as personal and contact information of family, friends, emergency contact persons, recommended persons or referrals accessible from your mobile number, etc.; please provide this Privacy Policy for their acknowledgement and/or obtaining consents if necessary.
We will only collect, use, or disclose sensitive data on the basis of your explicit consent or where permitted by law. We only collect the information of children, quasi-incompetent persons, and incompetent persons where their parent or guardian has given their consent. We do not knowingly collect information from customers under the age of 20 without their parental consent when it is required, or from quasi-incompetent persons and incompetent persons without their legal guardian's consent. In the event, we learn that we have unintentionally collected personal information from anyone under the age of 20 without parental consent when it is required, or from quasi-incompetent persons and incompetent persons without their legal guardians, we will delete it immediately or process it only if we can rely on other legal bases apart from consent.
2. Why we collect, use or disclose your Personal Data
We reserve the right to modify this Privacy Policy from time to time, so please review it frequently to see when this Privacy Policy was last revised. Any changes to this Privacy Policy will become effective when we post the revised Privacy Policy on our website or application. We will provide additional notice of significant updates. In case any modification deprives your rights of sensitive data in relation to this Privacy Policy, the Company will first obtain your consent, except as otherwise permitted by law.
2.1 The purpose for which your consent would be required
Marketing and Communications: We collect, use and disclose your Personal Data to provide privileges and promotions, discounts, special offers, advertisements, notices, news, information and any marketing and communications about the products and services from us, Spider Collection Group, our affiliates, subsidiaries and business partners which we cannot rely on other legal bases.
Please contact services@spdc.co.th to manage your consent for marketing and communications.
2.2 The purposes we may rely on any other legal grounds for processing your Personal Data
We may also rely on (1) a contractual basis, for our initiation or fulfillment of a contract with you; (2) legal obligation, for the fulfillment of the legal obligations; (3) legitimate interest, for the purpose of our legitimate interests and the legitimate interests of third parties; (4) vital interest, for preventing or suppressing a danger to a person’s life, body, or health; and/or (5) public interest, for the performance of a task carried out in the public interest or for the exercising of official authorities.
We may collect, use and disclose your Personal Data for the following purposes
1)
To provide products and services to you: To enter into a contract and manage our contractual relationship with you; to support and perform other activities related to such services or products; to complete and manage bookings and to carry out the financial transaction and services related to the payments including transaction checks, verification, and cancellation; to process your orders and collections and returns;
2)
Marketing and Communications: To provide privileges, offers, updates, sales, special offers, promotions, advertisements, notices, news, information and any marketing and communications about services from us, Spider Collection Group, affiliates, subsidiaries, and business partners.
3)
Promotions, special offers, loyalty programs, reward programs, and other offer promotions: To allow you to participate or earn promotions, special offers, loyalty programs, reward programs, privileges, and other offer/promotions (e.g., sending you reminder emails and transferring your Personal Data to business partners) to participate in activities and seminars, and all services related to advertising. This includes processing and administering your account registration, gift registration, event registration; for processing, collection, addition, exchange, redemption, payment; examining your entire user history, both online and offline; to provide and issue gift vouchers;
4)
To manage our relationship with you: To contact and communicate with you as requested by you or in relation to services you obtain from us, those within Spider Collection Group's data ecosystem, affiliates, subsidiaries and business partners; to handle customer service-related queries, request, feedback, complains, claims, disputes or indemnity; to provide technical assistance and deal with technical issues; to process and update your information; to facilitate your use of services;
5)
Personalization, profiling and data analytics: To recommend products and services that might be of interest to you, identify your preferences and personalize your experience; to learn more about you, services you receive and other services you may be interested in receiving; to measure your engagement with services, undertake data analytics, data profiling, market research; profiling based on the processing of your Personal Data, for instance by looking at the types of services that you use, how you like to be contacted; to know you better; qualitative information development. For this purpose, we will collect, use and disclose your Personal Data for your interest and benefit and for legitimate interest.
6)
To improve business operations and services: To evaluate, develop, manage, and improve, research and develop the services, system, and business operations for you and all of our customers within Spider Collection Group's data ecosystem, including but not limited to our business partners; to identify and resolve issues; to create aggregated and anonymized reports, and measure the performance of our physical products, digital properties, physical measurement of products performance, digital features and marketing campaigns as well as developing business models;
7)
Functioning of the sites, mobile application, and platform: To administer, operate, track, monitor, and manage the sites and platform to facilitate and ensure that they function properly, efficiently, and securely; to facilitate your experience on the sites and platform; improve the layout, and content of the sites and platform;
8)
IT Management: For business management purposes including IT operations, management of communication systems, operation of IT security and IT security audit; internal business management for internal compliance requirements, policies, and procedures;
9)
Compliance with regulatory and compliance obligations: To comply with legal obligations, legal proceedings, or government authorities' orders which can include orders from government authorities outside Thailand, and/or cooperate with the court, regulators, government authorities, and law enforcement bodies when we reasonably believe we are legally required to do so, and when disclosing your Personal Data is strictly necessary to comply with the said legal obligations, proceedings, or government orders and other regulatory and governmental bodies, and investigating or preventing crime;
If you fail to provide your Personal Data when requested, we may not be able to provide our products and services to you.
3. Sharing Personal Data
We may share your Personal Data with third parties, under the Data Protection Act and used for this particular purpose as defined below:
3.1 The company within Spider Collection Group's data ecosystem
As Spider Collection Company Limited is part of data ecosystem of Spider Collection Group which all collaborate and partially share customer services, products and systems including website-related platforms and systems, we may need to disclose or transfer your Personal Data to, or otherwise allow access to such Personal Data by other companies within Spider Collection Group's data ecosystem for the purposes set out in this Privacy Policy.
3.2 Our service providers
We may use other companies, agents or contractors to perform services on behalf or to assist with the provision of products and services to you. We may share your Personal Data to our service providers or third-party suppliers including
In the course of providing such services, the service providers may have access to your Personal Data. However, we will only provide our service providers with the Personal Data that is necessary for them to perform the services, and we ask them not to use your information for any other purposes.
3.3 Our business partners
We may transfer your Personal Data to our business partners in the businesses of banking, finance, credit, loan, asset management, investment, insurance, credit cards, telecommunications, marketing, retail, e-commerce, warehouse, logistics, wellness, lifestyle products and services, spa and fitness, reward and loyalty program, and data analytics, including platform sellers or providers whom we may jointly offer products or services, or whose products or services may be offered to you. Data shared in this way will be governed by the third party’s privacy policy and not this Privacy Policy.
3.4 Social networking sites
We allow you to log in to our sites and platforms without the need to fill out a form. If you log in using the social network login system, you explicitly authorize us to access and store public data on your social network accounts (e.g. Facebook, Google, Instagram), as well as other data mentioned during the use of such social network login system.
3.5 Third parties required by law
In certain circumstances, we may be required to disclose or share your Personal Data in order to comply with legal or regulatory obligations. This includes any law enforcement agency, court, regulator, government authority or other third parties where we believe it is necessary to comply with a legal or regulatory obligation, or otherwise to protect our rights, the rights of any third party or individuals’ personal safety, or to detect, prevent, or otherwise address fraud, security, or safety issues.
3.6 Professional advisors
This includes lawyers, technicians and auditors who assist in running our business, and defending or bringing any legal claims.
3.7 Assignee of rights and/or obligations
Third parties as our assignee, in the event of any reorganization, merger, business transfer, whether in whole or in part, sale, purchase, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock or similar transaction; will comply with this Privacy Policy to respect your Personal Data.
4. International transfers of your Personal Data
We may disclose or transfer your Personal Data to third parties or servers located overseas, which the destination countries may or may not have the same equivalent level of protection for Personal Data protection standards. We take steps and measures to ensure that your Personal Data is securely transferred and that the receiving parties have in place an appropriate level of protection standards or other derogations as allowed by laws. We will request your consent where consent to cross-border transfer is required by law.
5. How long do we keep your Personal Data
We retain your Personal Data for as long as is reasonably necessary to fulfil purpose for which we obtained it, and to comply with our legal and regulatory obligations. However, we may have to retain your Personal Data for a longer duration, as required by applicable law.
6. Security of your Personal Data
The Company recognizes the importance of maintaining the security of your Personal Data. Therefore, the Company endeavours to protect your information by establishing security measures for your Personal Data appropriately and in accordance with the confidentiality safeguard of Personal Data, to prevent the loss, unauthorized or unlawful access, destruction, use, alteration, rectification or disclosure; provided, however, that the Company will ensure that the method of collecting, storing and processing of your Personal Data, including physical safety measures follow the information technology security policies and guidelines of the Company.
7. Our Contact Details
If you wish to contact us to exercise the rights relating to your Personal Data or if you have any queries about your Personal Data under this Privacy Policy, please contact us or our Data Protection Officer at:
Spider Collection Company Limited.
26th floor, 46 Kronos Sathorn Building,
North Sathorn Road, Bangrak District, Bangkok.
Tel: 02-078-1600
North Sathorn Road, Bangrak District, Bangkok.
Tel: 02-078-1600
