Privacy policy
1. Introduction
This Privacy Policy explains how Suneight Entertainment Co.,Ltd. ("Company," "we," "us," or "our"), the operator of the e-commerce website "Chiitan House" ("Site"), collects, uses, discloses, and protects your personal data.
We are committed to complying with the Personal Data Protection Act B.E. 2562 (2019) of the Kingdom of Thailand (hereinafter, "PDPA"). By using our Site or services, you acknowledge that you have read, understood, and agreed to this Privacy Policy.
2. Definitions under the PDPA
・Personal Data: Any information relating to a person which enables the identification of such person, whether directly or indirectly, but not including the information of deceased persons.
・Data Subject: The individual who owns the personal data (i.e., you, the customer).
・Data Controller: The person or entity having the power to make decisions regarding the collection, use, or disclosure of the personal data (i.e., Suneight Entertainment Co.,Ltd.).
3. Personal Data We Collect
We may collect the following categories of personal data from you:
| Category | Examples of Data Collected | Purpose of Collection |
| Contact and Identity | Name, address, phone number, email address. | Order processing, delivery, customer service, account management. |
| Payment and Transaction | Payment method (e.g., credit card number in hashed form), purchase history, transaction details. | Processing payments, managing returns/refunds, auditing. |
| Technical and Usage | IP address, browser type, device information, browsing history, Cookies, log files. | Website improvement, security, analyzing user behavior, personalized marketing. |
| Marketing and Communication | Marketing preferences, feedback, communication records. | Sending promotional materials (with consent), customer relationship management. |
4. Legal Basis for Processing Personal Data
We process your personal data based on the following lawful bases as required by the PDPA:
・Contractual Basis: To fulfill a contract with you (e.g., processing and delivering your purchase order).
・Legal Obligation: To comply with our legal and regulatory obligations (e.g., tax, accounting, and consumer protection laws).
・Legitimate Interest: Where necessary for our legitimate interests and those of third parties, provided that such interests do not override your fundamental rights (e.g., fraud prevention, site security, business analysis).
・Consent (where required): We will obtain your explicit consent for processing data where required by the PDPA (e.g., direct marketing, or processing sensitive personal data).
5. Purposes of Using Your Personal Data
We use your personal data for the following purposes:
1.To process your product orders and complete transactions on the Site.
2.To manage and deliver the products you purchased, including tracking and shipping updates.
3.To manage your customer account and provide customer support.
4.To process returns, exchanges, and refunds.
5.To comply with legal, regulatory, and tax obligations in Thailand.
6.To improve and personalize your experience on the Site.
7.To conduct marketing and promotional activities, only if explicit consent has been provided.
8.To prevent and detect fraudulent transactions and ensure the security of the Site.
6. Disclosure of Personal Data
We may disclose your personal data to the following categories of recipients, subject to appropriate contractual safeguards:
・Affiliates and Group Companies: For internal administration and business operations.
・Service Providers: Third parties who perform services on our behalf, such as payment gateways, shipping and logistics partners, IT infrastructure providers, and marketing agencies.
・Legal/Regulatory Authorities: Government bodies, law enforcement, or regulators, when required by law or a valid legal process.
・Business Transfers: In connection with any merger, sale of assets, or acquisition.
7. International Data Transfer
Your personal data may be transferred to and processed in countries outside of Thailand where we or our service providers maintain facilities. When transferring personal data outside of Thailand, we ensure that an adequate level of protection is provided as required by the PDPA (e.g., through legally approved contractual clauses or appropriate safeguards).
8. Data Retention Period
We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purpose of satisfying any legal, accounting, or reporting requirements. Generally, data related to a transaction will be kept for the duration required by Thai tax and accounting laws (typically 5 to 10 years).
9. Your Rights as a Data Subject (PDPA Rights)
Under the PDPA, you have the following rights concerning your personal data:
1.Right to Access: The right to request a copy of your personal data we hold.
2.Right to Rectification: The right to request correction of inaccurate or incomplete data.
3.Right to Erasure (Right to be Forgotten): The right to request the deletion or destruction of your personal data in certain circumstances.
4.Right to Restrict Processing: The right to request the suspension of data processing in certain circumstances.
5.Right to Data Portability: The right to obtain your personal data in a structured, commonly used, and machine-readable format.
6.Right to Object: The right to object to the processing of your personal data (e.g., for direct marketing purposes).
7.Right to Withdraw Consent: The right to withdraw your consent at any time, where processing is based on consent. Withdrawal does not affect the lawfulness of processing before the withdrawal.
To exercise any of these rights, please contact us at the email address provided in Section 10.
10. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact our designated contact person (Data Controller) at:
Email: hide.suneight.thailand@gmail.com