Privacy Policy
Naruemit Pride Co., Ltd. places great importance on the protection of your personal data. This Privacy Policy outlines our practices regarding the collection, use, and disclosure of personal data, as well as your rights as a data subject under applicable data protection laws.

Collection of Personal Data
We collect personal data directly from you through the following channels:
Registration
Telephone
Email
Google Login

Types of Personal Data Collected
We may collect the following categories of personal data:
Personal Information: such as first name, last name, age, date of birth, nationality, national ID number, passport number, etc.
Contact Information: such as address, telephone number, email address, etc.
Account Information: such as user accounts and usage history
Identity Verification Documents: such as copies of national ID cards or passports
Transaction and Financial Information: such as purchase history, credit card details, and bank account information
Technical Information: such as IP address, Cookie ID, and website activity logs

Minors
If you are under 20 years of age or legally incompetent, we may collect, use, or disclose your personal data. In such cases, we may require consent from your parent or legal guardian, unless otherwise permitted by law. If we become aware that personal data has been collected from a minor without proper consent, we will take steps to delete such data from our systems.

Data Retention Methods
Your personal data will be stored in both physical (documentary) and electronic formats.
Server providers located in Thailand
Server providers located overseas

Processing of Personal Data
We collect, use, or disclose your personal data for the following purposes:
To create and manage user accounts
To deliver products or services
To improve products, services, and user experience
For internal business operations
For marketing and promotional activities
For after-sales services
To collect feedback
To process payments
To comply with our Terms and Conditions

Disclosure of Personal Data
We may disclose your personal data to third parties with your consent or as permitted by law, including:
Service Providers:
We may share necessary personal data with our service providers (e.g., payment processing, marketing, product/service development). These providers have their own privacy policies.
Business Partners:
We may disclose certain data to business partners for coordination and service delivery purposes, limited to what is necessary.

Data Retention Period
We will retain your personal data for as long as necessary while you remain our customer or have a relationship with us, or as required to fulfill the purposes outlined in this Policy. We may retain data beyond this period if required by law.
When no longer necessary, we will delete, destroy, or anonymize your personal data.
Your Rights as a Data Subject
Under applicable data protection laws, you have the following rights:

Right to Withdraw Consent
Right of Access
Right to Data Portability
Right to Object
Right to Erasure/Destruction
Right to Restrict Processing
Right to Rectification
Right to Lodge a Complaint
You may exercise your rights by contacting our Data Protection Officer using the details provided at the end of this Policy. We will respond within 30 days from the date of receipt of your request. If we reject your request, we will inform you of the reasons via appropriate channels (e.g., SMS, email, phone, or letter).
Marketing and Communications
We may send information or newsletters to your email for marketing purposes. If you no longer wish to receive such communications, you may click the “unsubscribe” link in the email or contact us directly.
Cookies and Tracking Technologies
To enhance your user experience, we use cookies and similar technologies to improve access to our products/services, deliver relevant advertisements, and track website usage.
You may disable cookies through your browser settings before using our website.

Data Security
We implement appropriate security measures to protect your personal data in accordance with the principles of:
Confidentiality
Integrity

Availability
This includes administrative, technical, and physical safeguards, particularly in relation to access control.
Personal Data Breach Notification
In the event of a personal data breach, we will notify the Personal Data Protection Committee within 72 hours of becoming aware of the incident, where feasible.
If the breach poses a high risk to your rights and freedoms, we will notify you promptly along with appropriate remedial measures via channels such as website announcements, SMS, email, phone, or mail.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be published on our website.

Effective Date
This Privacy Policy was last updated and is effective as of May 1, 2024.
Third-Party Privacy Policies
This Privacy Policy applies only to our website and services. If you access third-party websites via links from our platform, their privacy policies will apply. We are not responsible for such third-party practices.