1.    General Provisions
For the purpose of complying with the Personal Data Protection Act B.E. 2562 (2019) and its subordinate laws, including any amendments thereto (collectively referred to as “Laws on Personal Data Protection”), Taweerojn Wood Limited Partnership and its subsidiaries (“THAVII”, “Taweerojn Wood”, “us”, “we”, or “our”) have prepared this Personal Data Privacy Notice (“Privacy Notice”). This Privacy Notice informs you about how THAVII handles information that can or may identify you, whether directly or indirectly, according to the Laws on Personal Data Protection (“Personal Data”).

This Privacy Notice outlines the methods by which Personal Data is collected, used, disclosed, or otherwise processed, whether by manual or automated means, including recording, organization, storage, adaptation or alteration, retrieval, sending, transfer, disclosure, making available by any means, sorting, combination, restriction, erasure, or destruction (collectively referred to as “Processing”, “Process”, “Processes” or “Processed”). Additionally, it notifies you of the purposes for such Processing, the retention period of Personal Data, and your rights as the data subject.
THAVII recommends that you read and understand the following terms under the Privacy Notice:

2.    About THAVII
Under this Privacy Notice, THAVII refers to any one or more of the following entities:

1. THAVII Furniture Brand and Trademark

2. Taweerojn Wood Limited Partnership

3. Thong Heng Limited Partnership

Product Type: Doors, Windows, Furniture and Others

Taweerojn Wood Ltd., Part is a Thai company, parent to the brand THAVII, dedicated to crafting exceptional and timeless wooden furniture. We prioritize quality and responsible resource management, focusing on minimizing waste and maximizing the potential of each piece of wood entrusted to us.
Our commitment to quality is unwavering. We utilize high-grade lumber and employ skilled artisans to create wooden pieces: doors, windows, table, chair, and other furniture that is both aesthetically pleasing and built to last. We understand the importance of responsible sourcing practices; thus, our products are highest quality that are designed and built to last a lifetime and we are actively exploring partnerships and solutions that promote sustainable forestry management in Thailand. While we acknowledge the current challenges in achieving complete sustainability, we are committed to continuous improvement and minimizing our environmental impact through efficient wood utilization and waste reduction practices.

Taweerojn Wood aspires to be a leader in the global furniture industry, recognized for its unwavering commitment to quality, design, and responsible resource management. Our furniture is designed to be enjoyed for generations, becoming cherished heirlooms that reflect a respect for both craftsmanship and the environment. We invite you to experience the enduring beauty and quality of Taweerojn Wood furniture, crafted with a commitment to a sustainable future.
For more information, please visit: www.THAVII.com

If you have any questions or would like to exercise your rights as set out in this Privacy Notice, you may contact THAVII using the contact details provided below:
THAVII
E-mail: info@THAVII.com
Address: 179 Moo 10, Phutthasakorn Road, Suan Luang sub-district
Kratum Ban District, Samut Sakorn, Thailand, 74110
Telephone: (+66) 2-811-1021

 
Data Protection Officer
E-mail: dpo@THAVII.com
Address: 179 Moo 10, Phutthasakorn Road, Suan Luang sub-district
Kratum Ban District, Samut Sakorn, Thailand, 74110
Telephone: (+66) 2-811-1021
 
 
3.    Groups or Categories of Persons Whom THAVII Collects Personal Data
Under this Privacy Notice, the groups or categories of persons from whom THAVII collects and processes Personal Data are as follows:

1. Customers: This includes individuals who purchase products and/or use services of THAVII or those who are expected to do so (prospective customers). It also covers individuals with similar characteristics, such as business operators that purchase products and/or use services of THAVII, participants in marketing activities (including competitions and campaigns), gift voucher recipients, website users, individuals who contact THAVII to request information or services, and those who respond to surveys concerning THAVII’s products and/or services.

2. Persons Related to Customers: This includes individuals who are related to or represent juristic people that are customers or may become customers of THAVII. Examples include directors, executives, employees, staff, representatives, or personnel of customers who are juristic people. It also covers individuals whose Personal Data appear in relevant documents and processes, such as witnesses, purchasers, consignees, and cheque payers, etc.

 
4.    Personal Data Related to Minors
THAVII is not directed at, nor intended for the processing of Personal Data of individuals under the age of 20 (“Minors”, defined according to Thailand’s Laws and regulations). Please do not allow Minors to submit Personal Data to THAVII. We do not knowingly collect Personal Data from individuals under the age of 20. If you are a parent or guardian and you become aware that a Minor has provided us with Personal Data, please contact us using the contact details set out in Clause 2 of this Privacy Notice. If we become aware that we have collected Personal Data from Minors, we will take steps to remove that Personal Data from our possession and storage.

5.    Personal Data Collection and Processing
Your Personal Data that is collected and Processed under this Privacy Notice, regardless of whether such Personal Data was directly provided by you to THAVII or automatically collected from you by THAVII, or was provided to THAVII by other sources or third parties, includes the following: 

1. Personal information, such as first name, last name, gender, date of birth, identification number, passport number, photograph, occupation and signature, etc.

2. Contact information, such as type of residence, address, mailing address, delivery address, telephone number, fax number, e-mail, and user IDs and accounts for various applications for communications or other social media (e.g., Facebook, Twitter, Line and Instagram) etc. 

3. Customer business information, such as name and address of the company you are affiliated with, and position, etc. 

4. Information concerning transaction, such as transaction data, photos of installation place, schedule of works, drawing, customer code, purchase amount, bank account details, Personal Data which appears in the invoice, tax invoice and receipt, and details of complaints concerning products and services (e.g., date of order, type of product, relevant branch and the problem that is found), etc.

5. Information that is used as supporting evidence for the execution of transactions, such as Personal Data which appears in a copy of the national identification card, copy of passport, power of attorney, copy of company affidavit, copy of bank account, map, and sale and purchase agreement or any other agreements relating to the transaction, etc.

6. Sensitive personal data, such as religion, and health data including body temperature, etc.

7. Technical information, such as log file, IP Address, browser type, browser version, the pages of our service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data, and information that THAVII collects through the use of Cookies or other similar technologies, etc.

8. Other information, such as preferred brands, interested products and services, behaviors or trends to purchase products and/or services, photo and video recording by means of CCTV, and record of visitors including license plate number and time in and out, etc.

 
6.    How THAVII Collects and Receives Your Personal Data
THAVII collects and receives your Personal Data via the following methods: 
This section outlines the sources and methods by which THAVII collects personal data.
 
Personal Data You Directly Provide to THAVII
You may directly provide your Personal Data to THAVII in various ways, including:

1. When you contact, inquire, express an opinion or comment, or submit a complaint to THAVII, whether through written or oral communications via face-to-face interaction, at the place of THAVII, or through other channels such as telephone, fax, email, mail, website, communication applications, or other media platforms.

2. When you express an intention to purchase products or use services of THAVII, enter a contract with THAVII, or deliver documents containing Personal Data to THAVII.

3. When you participate in marketing activities, competitions, campaigns, events, or any other activities organized by or on behalf of THAVII.

 
Personal Data THAVII Automatically Collects from You
THAVII may collect your Personal Data by automated means, such as through the use of Cookies or other similar technologies. For more details, please see THAVII’s Cookie Policy.

Personal Data THAVII Receives from Other Sources or Third Parties
THAVII may receive your Personal Data from other sources or third parties, including:

1. If the customer is a juristic person, THAVII may receive your Personal Data from contact persons, representatives, or personnel of the juristic person you are affiliated with.

2. Business partners or service providers of THAVII, such as digital payment platform operators, food delivery platform operators, POS restaurant management system operators, delivery service providers, website service providers, application service providers, property developers, designers, interior design and decoration companies, and suppliers.

3. Designers and interior design and decoration companies you have contacted or engaged.

4. Companies under THAVII.

5. Government agencies, such as the Department of Business Development.

6. Public data sources or sources containing information related to your business or trades, regardless of whether you have disclosed the Personal Data yourself or have provided consent for someone else to disclose such Personal Data.

 
Notification of Data Collection
When collecting your Personal Data, you will be informed of the details as set out in this Privacy Notice, including but not limited to, the purposes and lawful bases for the collection, use, disclosure, and/or processing of Personal Data. THAVII will request your consent if the Laws on Personal Data Protection require your consent for any processing of Personal Data.
 
Previous Collection of Personal Data
Personal data collected that THAVII previously before the Laws on Personal Data Protection changed or became effective, THAVII will continue to collect and use your Personal Data in accordance with the original purposes of collection. After the Laws on Personal Data Protection have taken effect, if you do not wish for THAVII to collect and use your Personal Data, and if THAVII has relied on your consent as a basis for processing your Personal Data, you may contact THAVII using the contact details set out in Clause 2 of this Privacy Notice to request the withdrawal of your consent. THAVII reserves the right to consider your request for the withdrawal of consent and proceed in accordance with the Laws on Personal Data Protection.
 
7.    Purposes and Lawful Bases for the Processing of Personal Data

7.1 THAVII Processes your Personal Data for the purposes under lawful basis as follows:

(a) For the purpose of verifying the identification of customers or people related to customers.

• Legitimate interests’ basis: The Processing of Personal Data of the customers or people related to the customers is necessary for the legitimate interests of THAVII in verifying the identification of such persons, such as verifying the identification prior to granting award in a marketing activity.

(b) For the purpose of creating accounts for customers. 

• Legitimate interests basis:  The Processing of Personal Data is necessary for the legitimate interests in operating business or complying with THAVII’s policy, or in case where the customer is a juristic person, the Processing of Personal Data of persons related to the customer is necessary for the legitimate interests in operating business or complying with THAVII’s policy, such as the record of history and transaction data (customer’s account or AR code, PromptPay, Mobile Banking Payment), etc.

(c) For the purpose of managing customer orders, providing contracts, and performing obligations under the contract between THAVII and customers.

• Contractual basis: The Processing of Personal Data of the customers is necessary in executing the request of the customers before entering into contracts, providing the contracts and perform the obligation as stipulated in the sale and purchase agreements, service agreements and rental agreements where the customers are contracting parties, such as quotation, interior design, delivery, shipping, installation, repair, exchange, returning products, refund, billing and delivery of receipts to the customers, etc.

• Legitimate interests’ basis: In case where the customer is a juristic person, the Processing of Personal Data of persons related to the customers is necessary for the legitimate interests in operating business, preparing contracts, and managing contracts of THAVII, such as the use of director’s or representative’s data of the customers’ company in preparing contracts, managing customer orders, managing contracts and contacting with customers, etc.

(d) For the purpose of providing customers care and support.

• Legitimate interests basis: The Processing of Personal Data of the customers is for facility support, such as the record of order history and delivery location to facilitate the next purchase order and restaurant reservations, dealing with your inquiries and requests, etc.

(e) For the purpose of receiving complaints from customers or persons related to the customers. 

• Legitimate interests basis: The coordination and Processing of Personal Data of the customers or persons related to the customers is necessary for legitimate interests of THAVII in solving deficiencies and problems, as well as developing the quality of the products or services provided by THAVII. 

(f) For the purpose of informing news or publicizing products, services or activities.

• Consent basis: THAVII will inform news or publicize products, services and marketing activities, such as direct marketing, sending marketing messages to the customers, publicizing marketing activities, etc. THAVII will undertake such actions by relying on the consent received from you.

• Legitimate interests basis: When you notify, contact or provide information on interested products, services or activities in order for THAVII to contact back, inform news or publicize such matters to you, or in case where the customer is a business operator or juristic person, the Processing of Personal Data of persons related to the customer for publicizing products, services or activities to the persons related to customer is necessary for legitimate interests of THAVII, such as to present new products of THAVII to the contact person of the customer who is a juristic person, etc. 

(g) For the purpose of arranging marketing activities.

• Contractual basis: The Processing of your Personal Data is necessary to execute per your request in participating in marketing activities, such as an application and grant awards in the competition or campaign according to the terms and conditions that THAVII prescribed.

• Legitimate interests basis: The Processing of your Personal Data to issue a gift voucher in a customer’s name, or in case where a customer is a business operator or juristic person, the Processing of Personal Data of persons related to the customer in order to arrange marketing activities is necessary for legitimate interests of THAVII.

• Consent basis: In this regard, where the Laws on Personal Data Protection require your consent for any Processing of Personal Data, THAVII will explicitly request the consent from you.

(h) For the purpose of developing quality of the products and services, analysis and planning of marketing strategies. 

• Legitimate interests basis: The Processing of your Personal Data from purchasing products or services, surveying the interest or satisfaction of the customers on the products and services, including the usage of website or communication via other channels in which is necessary for legitimate interests of THAVII in operating  business and developing the products and services provided by THAVII, such as the analysis of feasibility study, purchasing strategies and marketing strategies, development of quality of products and services, improvement of the operation, improvement of the website, including the solving deficiencies and problems related to products and services.

• Consent basis: In case THAVII observes or monitors your behavior or interest to analyze and plan for marketing strategies, or to analyze the behavior and conduct direct publicize or advertise according to your behavior or direct marketing, or in the case where the Laws on Personal Data Protection require your consent, THAVII will undertake such actions by relying on the consent received from you.

(i) For the purpose of internal and external audit, and analysis of various information that is necessary for business operations of THAVII.

• Legitimate interests’ basis: The Processing of Personal Data is necessary for the legitimate interests of the business operation of THAVII, such as maintenance of IT system, detection, prevention and solution of technical issues, and other service planning, etc.

(j) For the purpose of the compliance with the laws relating to THAVII’s business and legitimate orders of courts, government agencies and relevant officers.

• Legal obligation basis: To comply with the applicable laws of THAVII, such as taxation, Laws on Personal Data Protection, computer crime law, laws on communicable diseases, laws on customs, and legitimate orders of the courts, government agencies and relevant officers, such as the Customs Department and Office of the Personal Data Protection Commission, etc.

• Legal obligation basis to achieve the purposes relating to public interests in public health: In some cases, the Processing of sensitive Personal Data is necessary for THAVII in complying with laws to achieve the purposes relating to public interests in public health, such as the collection of health data or body temperature of the persons entering into THAVII in order to protect from the spreading of COVID-19 and/or other contagious diseases according to the laws on communicable diseases, etc.

(k) For the purpose of establishment of legal claims, proceeding in accordance with and exercise of claims, or raising arguments to defend claims pursuant to the laws.

• Legitimate interests basis: The Processing of Personal Data is necessary for the establishment, compliance, exercise or defense of legal claims of THAVII in various stages according to the laws, such as investigation and/or inquiry by government officials, reporting the compliant, case preparation, prosecution and/or pursuit of the case in court, etc.

(l) For the purpose of monitoring and ensuring the security of persons and properties of THAVII.

• Preventing or suppressing a danger of person’s life, body or health basis: The Processing of Personal Data is necessary for the benefit in checking, monitoring, preventing or suppressing any circumstances which may be dangerous to person’s life, body or health.

• Legitimate interests basis: The Processing of Personal Data is necessary for the legitimate interests of THAVII in monitoring and ensuring the security of properties of THAVII. For example, the information of the visitors or the CCTV footage can be used to prevent loss or damage to THAVII’s properties or to track properties or claim damages in the case where the properties of THAVII are lost or damaged, etc.

(m) For any transaction that is necessary and beneficial to THAVII or other persons or juristic persons which are directly related to the purposes set forth above.

• Legitimate interests basis: The Processing of Personal Data is necessary for the legitimate interests of THAVII or other persons or juristic persons in carrying out any transactions which are necessary and/or beneficial to THAVII or any other persons or juristic persons, or directly related to the purposes set forth above. In this regard, where the Laws on Personal Data Protection require your consent for any Processing of Personal Data, THAVII will explicitly request the consent from you.

(n) For other purposes of which THAVII will notify you. 

• THAVII will notify you of any other purposes that cause THAVII to Process your Personal Data other than the purposes set forth above or when THAVII changes the original purposes that were set forth. In this regard, where the Laws on Personal Data Protection require your consent for any Processing of Personal Data, THAVII will explicitly request the consent from you.

7.2 Necessary Personal Data for Compliance and Contracts
Your Personal Data that THAVII will process for the purposes set forth in Clause 7.1, related to compliance with laws or contracts, or necessary for entering into contracts with you, is essential for achieving these purposes. If you do not provide such Personal Data to THAVII, there may be legal implications, or THAVII may not be able to fulfill its contractual duties or enter into a contract with you. In such cases, it may be necessary for THAVII to decline entering into the contract with you or to cancel the related sale and purchase or services, whether in whole or in part.
 
7.3 Processing for Additional Purposes
If THAVII processes your Personal Data in a manner or for purposes that are not consistent with those set forth above, THAVII will implement additional policies or notifications to explain such processing of Personal Data. You should review these additional policies or notifications in conjunction with this Privacy Notice (as applicable).
 
8.    Disclosure of Personal Data

THAVII may disclose your Personal Data in accordance with the purposes and legal requirements for the following people and entities:
1. Companies within THAVII:

• Directors, executives, staff, employees, and relevant in-house personnel, as necessary on a need-to-know basis for processing your Personal Data.

2. Business Partners and Service Providers:

• Business partners, service providers, suppliers, and data processors designated or hired by THAVII to perform duties related to the management/processing of Personal Data. This includes information technology services, website management, cloud services, document depository, payment services, printing, mailing, delivery, freight forwarding, shipping, installation, repair, data analytics, marketing, remarketing, banking, and other services beneficial to you or relevant to THAVII’s business operations.

3. Designers and Interior Design Companies:

• Designers, interior design, decoration companies and partner companies that you or THAVII have contacted or engaged.

4. Advisors of THAVII:

• Legal advisors, lawyers, auditors, and other internal and external experts.

5. Courts and Governmental Agencies:

• Courts and relevant governmental agencies with supervisory duties under the law or that have requested disclosure pursuant to their lawful powers or relevant to the legal process. This includes the Ministry of Commerce, Revenue Department, Customs Department, Department of Disease Control, Office of the Personal Data Protection Commission, Royal Thai Police, and Office of the Attorney General.

6. Consent-Based Disclosures:

• Any persons or entities to whom you have given consent to disclose your Personal Data, such as the disclosure of processed images of activities through various media platforms of THAVII to the general public.

Compliance and Consent
The disclosure of your Personal Data to third parties will be in accordance with the purposes or other purposes permitted by law. If the law requires your consent, THAVII will request your prior consent.

Safeguards for Disclosure
When THAVII discloses your Personal Data to third parties, appropriate safeguards will be put in place to protect the disclosed Personal Data and comply with the standards and duties related to the protection of Personal Data as prescribed by the Laws on Personal Data Protection. If THAVII sends or transfers your Personal Data outside Thailand, it will ensure that the recipient country, international organization, or such overseas recipient has a sufficient standard for the protection of Personal Data, or that such transfers have been carried out in accordance with the Laws on Personal Data Protection. In some cases, THAVII may request your consent for the transfer of your Personal Data outside Thailand, subject to the requirements under the Laws on Personal Data Protection.
 
9.    Retention Period
THAVII will retain your Personal Data for the period necessary to fulfill the purposes for which it was processed. The retention period will vary depending on these purposes and the applicable laws. THAVII will consider the statute of limitations under the laws for any legal proceedings that may arise from or relate to the documents or Personal Data collected and will take into account business practices and relevant business needs for each category of Personal Data.
 
General Retention Period

• THAVII will retain your Personal Data for a period not exceeding 10 years, starting from the date your legal relations or transactions with THAVII come to an end.

Extended Retention Period

• THAVII may retain your Personal Data for a longer period if permitted by law or if necessary for the establishment of THAVII's right of claim.

Deletion or Anonymization of Personal Data
After the period set forth above has expired, THAVII will delete or destroy such Personal Data from its storage or systems and those of any service providers. Alternatively, THAVII may anonymize your Personal Data.

• In cases where the Laws on Personal Data Protection or other applicable laws allow continued retention, THAVII may retain the Personal Data as prescribed.

 
10.      Your Rights in Relation to Personal Data
As the data subject, you have the following rights in relation to your Personal Data, subject to the rules, methods, and conditions under the Laws on Personal Data Protection. To exercise your rights, you can contact THAVII using the contact details provided in Clause 2 of this Privacy Notice.
 
Right of Access

• You have the right to access your Personal Data and may request a copy of such Personal Data in accordance with the requirements under the Laws on Personal Data Protection.

Right to Data Portability

• You have the right to obtain your Personal Data, including the right to request that your Personal Data be transmitted to another data controller or to you, except where it is technically unfeasible, in accordance with the requirements under the Laws on Personal Data Protection.

Right to Object

• You have the right to object to the processing of your Personal Data in certain circumstances prescribed under the Laws on Personal Data Protection.

Right to Erasure

• You may request that THAVII delete, destroy, or anonymize your Personal Data in certain circumstances prescribed under the Laws on Personal Data Protection.

Right to Restriction

• You have the right to request that THAVII restrict the processing of your Personal Data in certain circumstances prescribed under the Laws on Personal Data Protection.

Right to Rectification

• You have the right to request that your Personal Data be rectified if it is inaccurate, not up-to-date, incomplete, or may cause misunderstanding.

Right to Withdraw Consent

• If THAVII relies on your consent as the legal basis for processing your Personal Data, you have the right to withdraw such consent at any time.

Right to Lodge a Complaint

• If you have any concerns or questions about THAVII’s practices in relation to your Personal Data, please contact THAVII using the contact details in Clause 2 of this Privacy Notice. If you believe THAVII is in breach of the Laws on Personal Data Protection, you have the right to lodge a complaint with the expert committee appointed by the Personal Data Protection Commission in accordance with the rules and methods prescribed under the Laws on Personal Data Protection.

THAVII reserves the right to consider your request to exercise your rights and act in accordance with the requirements under the Laws on Personal Data Protection.
 
11.      Changes to This Privacy Notice
THAVII may update this Privacy Notice from time to time to reflect changes in our processing of your Personal Data and to comply with updates to the Laws on Personal Data Protection or other applicable laws. THAVII will notify you of any significant changes to the Privacy Notice through appropriate means, such as email or direct communication, and will also post the amended Privacy Notice on our website at www.THAVII.com/pages/privacy-notice.
We encourage you to review these communications periodically to stay informed about how we protect your Personal Data and any updates to our policies.