Privacy Policy for Customers
Big C Supercenter Public Company Limited (“the Company”),including its affiliates, acknowledges and recognizes the importance of individuals’ rights to privacy and personal data protection. These rights are fundamental and protected by law. Since certain information that the Company is required to obtain from you for the purpose of providing services and conducting the Company’s business constitutes personal data protected by law, the Company is committed to establishing high standards in its operations and in safeguarding personal data.
To ensure that the collection, use, or disclosure of such data complies with the Personal Data Protection Act B.E. 2562 (2019), the Company has issued this Notice to inform you of the details regarding your personal data that the Company collects, uses, or discloses, the retention period of such data, as well as the necessity and purposes for collecting your personal data, including your legal rights. Please read this Notice carefully and make sure you understand it in order to fully exercise your rights with the Company.
If you have any questions regarding the information in this Notice, you may contact the Company through any of the channels provided below at your convenience.
How does the Company collect your personal data?
The Company primarily collects your personal data directly from you through various communication and transaction channels. These include completing application forms, documents, contracts, or through any other means of communication, as well as via electronic systems such as websites, applications, cookies, or the Company’s online platforms. The Company may also collect data through other communication channels, such as telephone systems, where call recordings may be made as permitted by law.
In some cases, the Company may collect your personal data from sources other than directly from you. These sources may include the Company’s affiliates or related group companies, business partners, or public sources or legally accessible public databases. In such instances, the Company will inform you of the collection of such data without delay and obtain your consent when required by applicable law.
What Personal Data Does the Company Collect from You?
The Company places great importance on the protection of your personal data and is committed to collecting, using, and disclosing such data in a transparent, fair, and lawful manner in accordance with applicable personal data protection laws. The Company will collect and use your personal data only as necessary, under lawful purposes and in alignment with its business operations, service provision, and legal compliance obligations.
The types of personal data that the Company may collect from you depend on the nature of your use of the Company’s services, your contractual relationship with the Company, and relevant legal requirements. Such personal data may be categorized as follows:
Identity Data refers to any data that can be used to identify or verify your identity, either directly or indirectly. This includes, but is not limited to, your title, first and last name, date of birth, national identification number, passport number, customer ID or membership number, occupation, gender, and age.
Identification Document Data refers to information contained in official documents issued by government authorities. This includes, but is not limited to, copies of national ID cards, passports, visas, work permits, household registration documents, name change certificates, driver’s licenses, or military documents.
Contact Data refers to information that enables the Company to communicate with you, such as your mailing address, telephone number, email address, and communication channels linked to the Company’s online platforms.
User Profile Data refers to information related to your account registration, identity verification, and account management. This includes your username, encrypted password, account settings, and system access permissions.
Transaction Data refers to information related to your transactions or use of services. This includes, for example, order or service history, transaction dates and times, selected products or services, and transaction reference numbers.
Financial Data refers to information related to your financial activities or financial status, including your income information, bank account details, payment methods, invoices, receipts, and other financial documents.
Technical Data refers to information automatically collected when you use the Company’s website, systems, or applications. This includes your IP address, device type, operating system, browser type, and log files.
Usage Data refers to information about how you interact with the Company’s services, such as pages you visit, time spent using the service, interactions with features, and general usage patterns.
Location Data refers to information indicating your geographical location, whether precise or approximate. This includes country or province, location derived from your IP address, or GPS based location data where consent is required.
Communication Data refers to information generated through your interactions with the Company, such as messages, emails, documents you submit, chat logs, and call recordings.
Sensitive Personal Data refers to data that requires special protection under the Personal Data Protection Act. The Company collects this type of data only when necessary and supported by a valid legal basis. This includes, but not limited to data related to health, religious or belief information, labor union information, and biometric data such as fingerprints or facial recognition data.
Aggregated Data refers to data that has been combined, analyzed, or processed in a way that does not directly identify you, such as overall usage statistics, analytical reports, or anonymized data.
Purposes for Collection, Use, and Disclosure of Personal Data