Jong Stit Company Limited and Personal Data Protection Policy

As Jong Stit Company Limited and its Affiliates (collectively referred to as the "Company") recognize the importance of the protection of personal data which you have provided or will provide; therefore, the Company has prepared this Personal Data Protection Policy for your understanding and acknowledgment of the procedures of the Company concerning the collection, use, and disclosure of your Personal Data subject to the Personal Data Protection Act B.E. 2562 (2019).

This Policy covers the personal data that the Company has obtained or collected from your visit to the Company's website, purchase of goods and services, membership application, making suggestions, comments, or complaints, completing surveys or questionnaires, or performing any activities as required via the social media channels and stores of the Company. This Policy does not cover your use of websites, mobile phone applications, and/or social media channels of third parties that can connect to the website, mobile phone applications, and/or social media channels of the Company and stores that are not managed supervised by the Company. For these reasons, the Company advises you to read this Personal Data Protection Policy to understand and acknowledge the Company's methods, procedures, and purposes concerning the collection, use, and disclosure of your Personal Data.

The Company collects and protects your data for the following:

"Data" is Personal Data and non-personal data.

Personal Data is data relating to a Person, which enables or may enable the identification of this person. This Personal Data may include the followings:

• Personal Data submitting any information on our websites such as name, e-mail address, country, your company, industry, or information in the question (your submitted information) on our website. You will be deemed to have agreed and consented to us to share the general knowledge/the answer you submitted for yourself or your company. In addition, if you need us to contact you via phone, this will allow us to collect your Company's phone number.
• Computer data and usage data of the computer on our website.
• Social media channels or any platforms that use login data obtained through our alliance.
• Transaction Data and Financial information, including but not limited to name, phone number, and e-mail address such as purchasing information, purchasing history, services, delivery of goods, receipt/refund of money information, purchasing behavior, or a Person's message regarding the acceptance of goods, interests warranty information, complaints and claims other information concerning the purchase of goods and services, debit and/or credit card information, bank account, digital currency (cryptocurrency).
• We collect the sharing data, communications, and other information you provide when using our service, including creating or sharing in forums or communicating with others. This can include information when you use our service, such as the location, how you use our service, and public information.
• Other relevant information.

"Location Data" is the information we collect on your location when your location service is enabled, including:

• Location on your device when you use our services. With your permission, we may also collect information about your precise location using GPS, wireless networks, cell towers, Wi-Fi access points, and other sensors, such as compasses.
• The IP address on your device or network information when using our service.
• Other information you provide or others that enable us to locate you or your location. And sharing data that you or others specify, such as location information installed in your image. Suppose you have previously sent us information about your location and wish to remove it, you can conduct it through our service.

"Service Access Data" includes technical information that we automatically collect when you use our services, whether through the use of cookies (described in the cookies policy) or other information, including:

• Technical Data such as your mobile service provider, configuration information sent to us by a web browser or other application to access our services, your IP address, version, and registration number.
• Searching Data and view history while using our services, such as search history, social media accounts you visit, information, and other relevant content you have accessed or requested to use our services.
• Software Data you use and how you use it.
• Communication Data used in our service, such as the person with whom you communicated, includes the duration of your communication and metadata. Also, it refers to information about items you used through our services, such as the date, time, or geographical location of photos or videos you've shared.

"Non-Personal Data" refers to your information but cannot identify yourself, whether directly or indirectly, including personal information in summary or non-disclosure information or as a pseudonym.

"Sharing Data" refers to your information or relevant that you voluntarily disclose for posting to our service. Includes information you posted through our service (as well as your public profile and items you created). The information from the other's messages that you reposted includes the location and information about the service associated with that post. In addition, sharing data includes your information (location and accessibility information.) Others who have used our service have shared your information.

"Sensitive Data"we may collect, use or disclose your sensitive data when we have obtained explicit consent from you or where necessary for us as permissible under the law. We may collect, use or disclose your sensitive Personal Data as follows:

• Racial
• Ethnic
• Political opinions
• Cult
• Religious or philosophical beliefs
• Sexual behavior
• Criminal records
• Health data
• Disability
• Trade union information
• Sexual behavior
• Genetic data
• Biometric data such as facial recognition data, iris recognition data, or fingerprint recognition data
• Any data which may affect the data subject in the same manner, as prescribed by the Personal Data Protection Committee.

The Company collects Personal Data for the following purposes.

• To operate our service and provide you with our service
• To maintain service to the customer, conduct security risk assessments and investigations—storage and backup information relevant to our service.
• To advertise to you (as the following details "Advertising and Marketing").
• To understand how you access and use our services. And to improve our services, including service implementation, customers' needs and preferences, and language customization and location. Personalized assistance and clarification or other actions about how you and other customers use our service.
• To help us develop new services and maintain our websites.
• To maintain and improve our advertising and services for existing or related marketing or service purposes.
• To enable you to participate in surveys and other activities related to our products and services and software verification or update management.
• The process and analysis for market research, surveys, analysis of internal markets, creating customer data, analysis of customer patterns and choices for purchase of goods, and the planning and analysis of statistics and trends concerning goods and/or services of the Company
• To comply with laws, rules, and regulatory authorities

You have rights under the Personal Information Protection Act. For example, you may request that your use be modified, deleted, or restricted. In addition, you may be able to refuse to use, request transfer, or revoke your consent to use your personal information. Please read more about your legal rights below.

We will uphold your rights under the Personal Information Protection Act. According to the Personal Information Protection Act.

• Request access to your Personal Data (commonly known as a "subject access request"). This enables you to receive a copy of your collected personal data.
• Request correction of your Personal Data. This enables you to ask us to correct any incomplete or inaccurate personal information we hold about you.
• Request erasure of your Personal Data is you have the right to ask us to delete or remove your Data from our service.
• Request the restriction of processing of your Personal Data. This enables you to ask us to suspend the processing of your Personal Data.
• Request cancellation of marketing communications. This enables you to manage them manually by canceling our communications sent to you or balancing them at a central marketing management center that enforces our services.
• Object to processing of your Personal Data. This right exists where we rely on legitimate interest as the legal basis for our processing, and there is something about your particular situation makes you want to object to our processing of your Personal Data on this ground. You also have the right to object to where we are processing your Data for any legal purposes or third party.
• Request the transfer of your Personal Data to another party or services.
• Withdraw your consent. You have the right to withdraw your consent from using your Personal Data. According to the law, if you withdraw your consent, we may be unable to provide you with access to certain specific functionalities of the site we previously used.
• Depending on the circumstances and the nature of your request, it may not be possible for us to do what you have asked. Please note that we may ask you to verify your identity before responding to such requests if necessary. If we are unable to respond to your request, we will notify you of the reason.

Please check more information about our Cookies Policy in how we use cookies.

• To enable you to receive benefits from using our products or services, we use your Personal Data to analyze, personalize and enhance our products or services and marketing efforts through Google, Facebook, pixel tracking code, and others. We use such information to provide you with customized and personalized recommendations for products or services we think will interest you.
• Our website may display advertisements from third parties to facilitate our services, such as Google AdSense and BuySellAds. These third parties may access your Personal Data only to perform these tasks and are obligated not to disclose or use it for any other purpose.
• We do not use automated decision-making without human intervention, including profiling, in a way that produces legal effects concerning you or otherwise significantly affects you.
• We may send certain information or a newsletter to utilize your preference via your e-mail. If you no longer want to receive the communications from us, you can click the "unsubscribe" link in the e-mail or contact us through our e-mail.

We may disclose your Personal Data to the following parties in certain circumstances:

• Organization: We may disclose your Personal Data within our organization (including our affiliated companies, e.g., Jong Stit Company Limited, Thai Polyester Company Limited, or Fashion Hometex Company Limited) to provide and develop our products or services. We may combine information internally across the different products or services covered by this Privacy Policy to help us be more relevant and valuable to you and others.
• Service Providers: We may use service providers to help us provide our services such as payments, marketing, and development of products or services. Please note that service providers have their privacy policies.
• Business Partners: Concerning our business partners, we may disclose certain personal data to them to coordinate and provide our products or services to you and provide necessary information about the availability of our products or services.
• Business Transfer: In connection with any reorganization, restructuring, merger or acquisition, or other transfer of assets, we will transfer information, including certain of your personal data, provided that the receiving party agrees to respect your personal data in a manner that is consistent with this Privacy Policy and the Personal Data Protection Laws.
• Law Enforcement: Under certain circumstances, we may be required to disclose your personal data if required to do so by law or in response to valid requests by government authorities such as courts and government authorities.
• Cross-Border Data Transfer: We may disclose or transfer your personal data to third parties, organizations, or servers located in foreign countries. We will take steps and measures to ensure that your personal data is securely transferred and that the receiving parties have an appropriate level of personal data protection standard or as allowed by laws.
• Please consider carefully when you post messages and communications through our services.

In the case of links provided to the third party's website, we do not have control over those websites, privacy policy of which may differ from that of us.

The said websites of third parties are responsible for their own privacy policy and you should check the privacy policy on those websites. If a third party has the right to share your personal information with us, information sharing is governed by the third party's privacy policy.

Generally, business activities are intended to serve the majority. However, our service can easily access. Suppose we have collected the data from children under the age of 10 and/or underage of majority. In that case, the parent or guardian's consent is required to process a child's Personal Data on the grounds of the consent up to a certain age before contacting us.

We protect your information using technical, physical, and administrative security measures to reduce the risk of loss, misuse, unauthorized access, disclosure, or modification of your information. In addition, our website is scanned regularly for security holes and known vulnerabilities to make your visit to our site as safe as possible.

To protect some important data and all sensitive/credit information you supply is encrypted via Secure Socket Layer (SSL) technology, the security software for an online transaction that is the most up to date. In addition, we ensure a high level of international security for your payment and personal information. While we have employed security technologies and procedures to assist in safeguarding your personal information, please note that no system or network can be guaranteed to be 100% secure. Our systems and the communications networks you access our services may be subject to security breaches and failures due to circumstances beyond our reasonable control.

The Company will retain your Personal Data within the period necessary for the purposes specified in this Policy except for the case that laws require a more extended period of retention. After the expiration of the retention period, or if your Personal Data is no longer required, the Company will erase, destroy, or anonymize such Personal Data.

We will post any changes we may make to our privacy policy in the future on our website. If any changes affect you, please check back to see any updates or changes to our privacy policy.

If you have any questions about this Privacy Policy or would like to exercise your rights, you can contact us by using the following details:

Data Controller

Jong Stit Company Limited

470 Bangkuntien-Chaitalay Rd, Samaedum, Bangkuntien, Bangkok 10150 Thailand

E-mail: support@jongstit.com

Website: www.jongstit.com

Tel: (+66) 34-852-401-5