A.I. Technology Group Co., Ltd., consisting of A.I. Technology Co., Ltd., Tokai Gauge Technology Co., Ltd., A.I. Foundry & Manufacturing Co., Ltd., and AI Innovative Plus Co., Ltd. (hereinafter referred to as “we”) respects the privacy rights of our customers, including individuals who operate on behalf of customers who are legal entities (hereinafter referred to as “Processing”). To ensure that your personal data is protected, we have created this Privacy Policy to inform you about the details related to the collection, use, and disclosure (collectively referred to as “Processing”), including the deletion and destruction of your personal data through both online and other channels as required by applicable personal data protection laws.

1. Purpose of Personal Data Processing

1.1 To process your requests before entering into a contract or to perform a contract to which you are a party, such as for the sale of goods and/or services to you or the performance of any contract with you, including managing your user account, delivering goods, handling accounts and finances, providing after-sales service, and processing returns, as well as actions to ensure you receive goods and/or services as requested.

1.2 For the legitimate interests of us or others:

(1) To enable us to manage, develop, and operate our business, including the management and development of goods and/or services (including websites and applications), preventing and detecting fraud or other crimes, managing customer and potential customer relationships, and maintaining and using IT systems.

(2) For safety purposes, such as implementing security measures, including those for your personal data, like access to our premises, logging into our website or applications.

(3) For marketing and data analysis purposes, such as sending news and benefits via email, SMS, apps, social media, phone, direct mail, and for market research purposes like conducting surveys and interviews.

(4) To exercise legal rights.

1.3 To prevent and mitigate harm to your life, body, or health or that of others, such as in emergency contact situations or controlling and preventing communicable diseases.

1.4 To comply with legal obligations, such as following the provisions of laws, regulations, and orders from authorized bodies.

1.5 To perform public interest duties or use the powers granted by the state.

1.6 Where you have provided consent, we will process your personal data:

(1) For our company, our group companies, and partners to send news and benefits through email, SMS, apps, social media, phone, and direct mail.

(2) For us to organize activities beyond those mentioned above, which may involve collecting additional personal data, for which we will notify you and request further consent as needed.

For further details on consent, please refer to Section 4.

2. Personal Information Collected

2.1 When you purchase or intend to purchase products and/or services, or register as a member on websites or applications, we collect the following personal data:

(1) Personal information: Full name, date of birth, place of birth, marital status, address, details on identification cards and passports, Line ID, copies of ID cards, copies of passports, chat history on various applications.

(2) Contact information: Email, phone number, address, social media contact channels, workplace.

(3) Employment information: Occupation, position, work experience.

(4) Transaction information: Purchase history, claim history, complaints.

(5) Information provided during contact: Details shared during customer service, after-sales services, research, or interviews.

2.2 When you browse or shop online, or visit websites or applications, we collect the following personal data:

(1) Registration information: Full name, email, phone number, password.

(2) Electronic device information: IP address, location data, and other device identifiers.

(3) Browser information: Type and version of the browser, type and version of browser plug-ins.

(4) Time zone settings: Time zone preferences.

2.3 When you contact us or participate in activities with us, such as contacting the contact center or participating in customer satisfaction activities, we collect the following personal data:

(1) Personal information: Full name, date of birth, photo, ID card number, passport number, membership numbers for benefits (e.g., Royal Orchid Plus), health information, food allergy information.

(2) Contact information: Full name, email, phone number, address.

(3) Activity participation information: Records of previous participation, photos from activities.

2.4 Collection and processing of special categories of personal data:

(1) Religious data: ID cards containing religious information may be used for identity verification or tax-related purposes.

(2) Health information: Food allergies may be used for organizing activities.

2.5 Processing special categories of personal data:
In necessary cases, we will process your special categories of personal data only with your explicit consent or for purposes permitted by law. We will ensure the best possible security measures to protect your special personal data.

3. Cookies

We use cookies to collect personal data, which includes descriptions of the types, purposes, and nature of cookies used on this website, as well as how to manage cookies as follows:

3.1 Cookies
Cookies are small computer data files (text files) installed or stored on your computer or electronic device when you visit our website. Cookies remember your website usage data. We also refer to similar technologies performing similar functions as cookies. When you visit our website, we use cookies categorized as follows:

• Strictly Necessary Cookies: These cookies are essential for the website’s functioning, ensuring its normal operation, security, and access for users. Examples include logging into the website or identity verification. You cannot disable these cookies via our website system.
• Analytic Cookies: These cookies collect information about your website usage, enabling us to measure, evaluate, improve, and develop our content, products/services, and website to enhance your user experience. If you do not consent to these cookies, we cannot measure or improve the website effectively.
• Functional Cookies: These cookies help remember your computer or electronic device information, registration or login details, and settings or preferences you have selected on the website, such as language settings or shipping addresses. This allows for more convenient website usage without re-entering information or adjusting settings each time. Without these cookies, your website experience may be less convenient and efficient.
• Targeting Cookies: These cookies collect data, including personal data, to create a profile about you. This enables us to analyze and present content, products/services, and/or advertisements tailored to your interests. Without these cookies, you may receive generic information and advertisements unrelated to your preferences.

3.2 Third-Party Cookies
Our website uses third-party cookies. Their use and settings align with the cookies mentioned in Section 2. However, you cannot selectively configure third-party cookies through this website. We do not control third-party data usage. You can review the third party’s list, privacy policies, and cookie policies, which differ from our website, on their respective websites.

3.3 Cookie Management
You can manage cookie settings, except for Strictly Necessary Cookies, via “Cookie Settings” or your web browser settings (e.g., disabling cookies on your device). Note that disabling cookies may affect the efficiency and functionality of certain websites.

4. Consent and Possible Impacts of Withdrawal

4.1 Consent Withdrawal Rights
If we collect and process your personal data based on your consent, you have the right to withdraw your consent at any time. Withdrawal of consent will not affect the collection, use, disclosure, or processing of personal data that you had already consented to prior to the withdrawal.

4.2 Impact of Consent Withdrawal or Denial
If you withdraw consent or refuse to provide certain information, it may impact our ability to fulfill some or all of the purposes specified in this Privacy Policy.

4.3 Consent for Individuals Under 20
If you are under 20 years of age, please inform us of the details of your legal guardian so that we can obtain consent from your legal guardian to process your data.

5. Duration of Personal Data Retention

5.1 We will retain your personal data for as long as necessary to fulfill the purposes for each type of personal data. Unless the law permits a longer retention period. In cases where the retention period of personal data cannot be clearly defined, we will retain the data for a period that can be reasonably expected based on the standard for data collection (e.g., the general statute of limitations, which is up to 10 years).

5.2 We have implemented a system to ensure the deletion or destruction of personal data when it has exceeded the retention period or is no longer relevant or necessary for the purposes for which the data was collected.

5.3 In cases where we use your personal data based on your consent, we will process the data until you notify us of the withdrawal of your consent, and we have completed your request. However, we will still retain your personal data as necessary to record that you have withdrawn consent, so we can respond to your future requests.

6. Disclosure of Personal Data to Third Parties

6.1 We disclose and share your personal data with:

(1) The A.I. Technology Group, including A.I. Technology Co., Ltd., Tokai Gauge Technology Co., Ltd., A.I. Foundry & Manufacturing Co., Ltd., and AI Innovative Plus Co., Ltd., to provide services as requested or authorized by you and to facilitate efficient communication within the group of companies.

(2) Other individuals and entities outside our group (“Others”) to fulfill the purposes of collecting and processing personal data as outlined in this Privacy Policy. These may include our distributors, transportation service providers (e.g., postal services), tour companies and their networks both domestic and international, external service providers acting under our control, such as those assisting in transaction processing, sending advertisements for our products and services, or offering support and services to you, travel service companies (land, air, and water), transaction and financial service providers (e.g., banks, payment processors), technology service providers (e.g., cloud systems, blockchain, SMS services, data analytics), IT system developers, insurance companies, auditors, legal entities, consultants, government agencies (e.g., Revenue Department, Anti-Money Laundering Office), or any other third parties (in Thailand or elsewhere) related to subpoenas, court orders, or legal processes and other legal requirements under the laws or regulations of Thailand or applicable jurisdiction, and financial institutions to manage risks, detect and prevent illegal activities, fraud, and other violations of our policies and agreements. Additionally, other parties necessary to carry out our business and provide services to you and fulfill the purposes of collecting and processing personal data as outlined in this Privacy Policy.

6.2 We will ensure that recipients of the information implement appropriate measures to protect your data and only process the personal data necessary for their purposes. We will also take steps to prevent unauthorized use or disclosure of personal data.

7. Transfer or transfer of personal data abroad

7.1 We may transfer or send your personal data to group companies or other third parties abroad when necessary to fulfill a contract that you are a party to, or as part of a contract between us and another person or entity for your benefit, or to act on your pre-contract request, or to prevent or avert harm to your life, body, or health, or the life, body, or health of others, or to comply with the law, or when necessary to carry out a mission for the important public interest.

7.2 We may store your data on computer servers or clouds provided by third parties and may use third-party software or applications in the form of ready-made software services or platform services to process your personal data. However, we will not allow unauthorized persons to access your personal data and will ensure that third parties take appropriate security measures.

7.3 In the case of transferring your personal data abroad, we will comply with the personal data protection laws and use appropriate measures to ensure that your personal data is protected and that you can exercise your rights regarding your personal data according to the law. We will also require the recipients of the data to take appropriate protective measures for your data and process it only to the extent necessary, and we will take steps to prevent unauthorized persons from using or disclosing your personal data.

8. Security Measures for Personal Data

8.1 The security of your personal data is important to us, and we have implemented appropriate technical and administrative security standards to protect personal data from loss, unauthorized access, use, or disclosure, misuse, alteration, and destruction. We utilize technologies and security measures such as encryption and access restrictions to ensure that only authorized individuals can access your personal data, and these individuals are trained on the importance of protecting personal data.

8.2 We have established appropriate security measures to prevent the loss, access, use, alteration, modification, or disclosure of personal data by unauthorized persons. We will review these measures as necessary or when technology changes to maintain the appropriate level of security.

9. Your Rights Regarding Personal Data

9.1 You have rights under the Personal Data Protection Law, as summarized below:

(1) Withdraw consent given to us for processing your personal data.
(2) Request to view and copy your personal data or ask for the source of your personal data.
(3) Transfer your personal data in electronic format as defined by the personal data protection law to another data controller.
(4) Object to the collection, use, or disclosure of your personal data.
(5) Delete or destroy your personal data, or anonymize it so that it no longer identifies you.
(6) Suspend the use of your personal data.
(7) Correct your personal data to ensure it is accurate, up-to-date, complete, and not misleading.
(8) File a complaint with the Personal Data Protection Committee if we or any data processor, including our employees or contractors, violate or fail to comply with the personal data protection law.

We will review and notify you of the result of your request for the exercise of your rights within 30 days from the date we receive your request. The rights mentioned above are in accordance with the personal data protection law.

9.2 You can exercise your rights by following information available at [ https://www.aitechgroup.net/ ] and can contact us at 02-159-8600 or email: info.marketing@aitech.co.th (rights can be exercised once the personal data protection law becomes applicable to the data controller).

10. Information about the Data Controller and the Personal Data Protection Officer.