Privacy and Personal Data Protection Policy

This website https://www.ksgshop.com is operated by King Stella Group Co., Ltd. (“the Company”), which collects and processes personal data from consumers and individuals who interact with us (collectively referred to as “customers” or “you”) for various purposes, including product development, promotions, and improving our products and services to meet customer satisfaction.

Recognizing the importance of privacy and the protection of personal data under the Personal Data Protection Act B.E. 2562 (2019), the Company has established this Privacy Policy to ensure the lawful and appropriate collection, retention, use, and disclosure of personal data. The Company also prioritizes the security of personal data, with the details of this policy as follows:

​

1. Policy on Respecting Rights and Lawful Basis

The Company respects the privacy rights of individuals and adheres to lawful practices. We do not collect personal data unless we have obtained consent or are permitted by law. The legal bases include:

  1. Necessity for the performance of a contract or to take steps at your request before entering into a contract.
  2. Necessity to prevent or suppress danger to life, body, or health.
  3. Legitimate interests of the Company or a third party, unless such interests are overridden by your fundamental rights.
  4. In your interest where consent cannot be obtained at that time.
  5. Necessity for investigations by law enforcement or legal proceedings.
  6. Compliance with applicable laws (e.g. labor law, computer law, accounting law, tax law, anti-money laundering law, occupational health and safety law, civil and criminal procedure codes).
  7. For development and promotion of products and services.
  8. To provide product and service information.

The provision of personal data is not legally or contractually required. It is entirely voluntary. However, failure to provide such data may affect the Company’s ability to fulfill contractual obligations or provide services effectively.

​

2. Types of Personal Data Collected

The Company may collect, use, store, and share the following categories of personal data:​

  1. Identifying and Contact Information: Name, photo, shipping/billing address, email, phone number, national ID, username, or similar identifiers.
  2. Financial Information: Billing address, payment-related details.
  3. Transaction Information: Payment details, purchases made, and other transaction data.
  4. Technical Information: ​IP address, login data, browser type and version, time zone settings, location, browser plug-ins, operating system, platform, and other technologies used to access our website, software, or products.
  5. Profile Information: Username, password, purchase/order history, interests, preferences, feedback, age, gender, product reviews, survey responses, contact preferences.
  6. Usage Information: How you use the website, products, and services, and your feedback on these.
  7. Marketing and Communication Preferences: Your preferences in receiving marketing from us and how you wish to be contacted.

​

3. Purpose Limitation Policy

We will only collect, use, or disclose personal data for the specific purposes you have consented to. If the purpose changes, we will obtain new consent unless the law allows otherwise.

​

4. Disclosure to Third Parties

The Company will not disclose your personal data to third parties except in the following circumstances:

  1. With your prior consent.
  2. When required or permitted by law or court order.
  3. To service providers (including employees, contractors, and agents) within their responsibilities.
  4. Shared data with affiliated companies.
  5. For business continuity during mergers, acquisitions, or similar events.

In compliance with applicable law, we may also disclose data to:

  1. Current or future affiliated companies.
  2. Thai or international government or regulatory authorities.
  3. The Bank of Thailand and other institutions as required.
  4. Any other parties deemed necessary.

Such persons may be located outside of Thailand, for the aforementioned purposes or for any other purposes related to the disclosure of your personal data as notified to you at the time of its collection.​

​

5. Transparency Policy

The Company provides privacy notices for all personal data collection activities, regardless of the legal basis.

​

6. Data Management and Protection

The Company has appointed a Data Protection Officer (DPO) and enforce compliance among employees to appropriately manage and protect your personal data. 

​

7. Security and Confidentiality Policy

As the data controller, the Company has a policy of taking responsibility for personal data under its control by maintaining its confidentiality and implementing security measures. These measures include: administrative controls through internal policies and regulations for employees; physical security such as secure storage areas, cabinets, equipment, data rooms, CCTV surveillance, and designated responsible personnel; and technical safeguards through the use of hardware and software to prevent unauthorized access or cyberattacks.

​

8. Data Retention Policy

The Company will not retain personal data longer than necessary. Once retention is no longer required, the data will be deleted, destroyed, or anonymized.

​

9. External Links and Third-Party Services

Our services may contain links to third-party websites or services with separate privacy policies. We encourage you to review those policies before use. We are not responsible for their content, policies, damages, or actions.

​

10. Your Rights

  1. Right to Withdraw Consent: You may withdraw your consent at any time, particularly for marketing communications, without affecting prior lawful processing. Please contact us if you wish to do so.
  2. Right of Access: You may request confirmation of data processing and access your personal data, including processing purposes, categories of data, and recipients. We may charge a reasonable fee for additional copies.
  3. Right to Rectification: You may request correction of inaccurate or incomplete data.
  4. Right to Erasure ("Right to be Forgotten"): You may request deletion of your data. Contact our DPO for this.
  5. Right to Restriction of Processing:  You may request to limit processing under specific circumstances.
  6. Right to Data Portability: You may request your data in a machine-readable format to transfer it to another controller.
  7. Right to Object: You may object to data processing for specific reasons, especially in direct marketing or profiling contexts.

The Company will act on your request once your identity is verified, unless there are legitimate grounds for refusal.​

​

Data Protection Officer
King Stella Group Co., Ltd.
Address: 98 Moo 1, Khlong Niyom Yatra, Bang Bo, Samut Prakan, Thailand 10560 
Tel: +66 2 317 5487-9 ext.117
Email: ​​[email protected]
Business Hours: Monday – Friday, 8:30 AM – 5:40 PM (excluding public holidays)