Privacy Policy

Customer Privacy Policy

Customer Privacy Policy
Jubilee Enterprise Public Company Limited

Jubilee Enterprise Public Company Limited (“Company”) places importance on privacy and respects the rights of the Company’s customers’ personal data. We guarantee to protect and process customers’ personal data properly and in accordance with the Personal Data Protection Act applicable to the Company. In order to demonstrate the Company’s commitment as a personal data controller, the Company aims to prepare and inform this Customer Privacy Policy (“Policy”), which stipulates the rights, conditions, and necessity of the Company in collecting, processing, and using your personal data as a customer who contacts the Company, purchases products, and/or uses services related to products under the “Jubilee Diamond” and “Forevermark” brands (“Customers”) for your acknowledgement. The Company will collect, compile, use, and disclose your personal data in accordance with this Policy only.

Acceptance of Policy It is important for customers to read this policy so that they are aware of how the company collects and uses their personal information. When customers contact, purchase products and/or use the company's services through various channels, including sending their personal information to the company, the company will assume that the customer agrees and accepts this policy. The company would like to inform customers that the processing of all personal information specified in this policy is important and necessary for the company's performance of its duties in selling products and/or providing services to customers. Therefore, if customers do not agree to the processing of personal information under this policy, it may affect the company's ability to perform such duties for you.

Scope of Policy This Policy applies to direct contact and/or purchase of the Company's products, which may be through communication channels, both Offline, such as purchasing products at the store or directly purchasing products from the Company, and Online, which includes communication via the Company's website or Social Media (Facebook / Line Official Account or other online channels). It does not apply to the processing of personal data by other external parties over which the Company has no control, even if it is connected to the Company's services (including but not limited to the processing of personal data by other Marketplace channel providers). For the processing of personal data by such external parties, customers must study the personal data processing policies of such external parties that are separate from this Policy.

The Company reserves the right to amend this Policy from time to time to comply with relevant laws and the Company's communication, sales, delivery, and services to customers. The Company will notify customers of such changes by announcing the revised Policy through the Company's communication channels. If customers continue to communicate, purchase products and/or services of the Company after the Policy has been updated, it will be considered that the customers agree to accept the revised Policy at all times.

Definition of term

For the purposes of this Policy, (a) Personal Data means any information that directly or indirectly identifies an individual, but does not include information about a deceased person; and (b) Personal Data Owner means any person whose Personal Data the Company collects, uses or discloses, including but not limited to a Customer who is an individual and an authorized representative or other related person of a Customer who is a legal entity (e.g. an authorized director or relevant attorney, etc.).

For the avoidance of doubt, in the event that the Customer submits personal data of other personal data owners related to the Customer to the Company, upon receipt of such personal data, the Company shall assume that the Customer has given its guarantee of the right to forward and disclose the data of all external personal data owners to the Company for data processing under this Policy.

Sources of personal data processed

The Company may receive personal data of customers and/or personal data owners from 2 sources as follows:

1. Obtained directly from customers through various channels, including (a) contacting through various channels that the Company may have, such as telephone, social media / website, (b) using the Company's storefront services or visiting the Company's website, (c) customers participating in the Company's sales promotion activities through various channels, (d) customers filling out, submitting information, including any other forms and documents for purchasing products and using the Company's various support services, or (e) automatic collection by the Company's system that may collect, compile, and use personal information of customers who contact to use the services through the Company's website.
2. Obtained from other persons, which may include social media, public media (that the customer may use to link to use the company's services), commercial partners that may submit the customer's personal information to the company (including but not limited to financial institutions or department stores that submit the customer's information for receiving gift, etc.), external service providers that the company has hired to be involved in selling products and providing services of the company (including but not limited to Marketplace service providers) who are external persons or other persons who may refer you to the company, which the company will inform the customer.

Processed data

In the coordination, purchase and sale of goods, payment, and delivery of goods between the Company and you, the Company is required to process the customer's personal data at each step as follows:

1. For customers who purchase products at Jubilee stores or customer facial photo data that the company may collect using the CCTV camera system installed in the store area and collecting photos from participating in the company's activities that may be organized, both in the form of organizing activities and organizing live broadcasts or recording videos within the store area. In the case of organizing such activities or organizing live broadcasts, if customers do not want their photos taken, they should avoid entering the area where the live broadcast is being held or customers can inform their intention to refuse to take photos.
2. For customers who purchase products through the Company's Website , including (1) information for creating a user account, which the customer must create before ordering products, including email or Social Media Account (Facebook / Google / etc. that is to be linked), password, first and last name, telephone number, date of birth, address, including user account information that will be created to link each individual customer again.

   (2) Product order information (including order details, products purchased and total purchase amount, etc.), including all transaction information that the Customer may conduct through the Company's website.

   (3) Technical information (Online Identifier) ​​of the customer, including location information, numbers used to identify computers connected to the network (IP), login information, browser type and version, time and location settings, connection and type of browser used to connect, operating system and platform, and other technologies on the device you use to access the Company's website.

   (4) Use of cookies (in cases where the customer has given consent). Customers can study the company's cookie policy further at: https://www.jubileediamond.co.th/cookies-policy.

3. Payment information and/or information for issuing tax invoices , including payment information for products, which may include payment slips or credit card information that will be collected through the POS system or payment service provider, including a copy of the credit card with the national ID card attached that the customer may submit to the company's employees to process the card payment, including other evidence of payment, and in the case of requesting a tax invoice, including identification documents including copies of such documents, such as national ID cards or passports, etc.
4. Product delivery information for purchases that customers want to have delivered, whether through online / offline channels or other direct sales, including full name, delivery address, and contact information such as telephone number or email, etc.
5. Other information that the Customer may provide to the Company in various forms that may be prepared between the Company and such Customer, including but not limited to, Warranty Card forms, Product exchange or return forms, in accordance with such terms and conditions as the Company may specify, or providing information for participation in promotional activities, surveys, contests, sweepstakes, or any activities of any kind with the Company.
6. Other personal data that customers may consent to or submit to the Company for the processing of such personal data, such as contact information to receive support services or to file complaints through the channels specified by the Company, etc.

Purpose and duration of personal data processing

The Company is required to collect, compile, use and process the Customer's personal data as stated above for the following purposes and periods:

1. In order to perform the contractual obligations, the Company shall process such personal data for (1) contacting, coordinating, performing the rights and obligations that the Company may have to the Customer, including completing the transaction of purchasing products and/or providing services to the Customer, which may include verifying the identity of the Customer who purchases the products and/or contacts to use the service, verifying the accuracy of the order, verifying the payment, delivering the products, providing other support services to the Customer, (2) responding to inquiries, suggestions, handling complaints that the Customer may submit to the Company, and (3) performing other contracts to which the Customer and the Company are parties (such as the sales contract or terms of service specified on the Company’s website), or for use in taking action on the Customer’s request, including considering the qualifications and suitability to participate in activities that the Customer may participate in. For this purpose, the Company shall retain the Customer’s personal data for as long as the Company is still obligated to provide, deliver or deliver the Products to the Customer under the sales contract or other service contracts that may be relevant, or for as long as the Customer still has a website user account with the Company.
2. To perform the legal duties that the Company must perform, such as preparing the Company's accounts and paying taxes, especially in cases where customers may request tax invoices from the Company or foreign customers want to prepare a VAT Refund, in which case the Company must collect customer information for preparing such documents throughout the period as prescribed by relevant laws.
3. For the purpose of legitimate interests without unreasonably affecting the rights of the customer as the data owner, including (1) establishing and improving the business relationship that the company has with the customer, which may include analyzing, investigating, managing and solving various problems related to the company's services, inquiring about service satisfaction, preparing internal monitoring and auditing reports on the company's services to customers, analyzing and managing overall corporate risks, training or monitoring the services of the company's employees, analyzing to improve the business relationship that the company has with the customer, including analyzing and improving the services, product design, including customer grouping for the benefit of planning marketing and public relations of the company; (2) using and analyzing purchasing and service behavior, preferences and interests of customers as a whole and individual customers for the benefit of planning, designing, and developing sales and services specifically for customers to be more in line with and suitable for customers' needs; (3) using customer facial photos in front of the store, collected by CCTV system, to maintain security within the store area and for the safety of customers using services in the store area; (4) using photographic data and other public relations data of the data owner who participates in various marketing activities for the benefit of preparing public relations media of the company; and (5) collecting data for the benefit of protecting the company's legitimate rights. In the event of any complaint or dispute between the company and the customer for this purpose, the company guarantees to limit the use of personal data only as necessary for a period appropriate for the operation of the company's business in accordance with the stated purposes. No action will be taken that unreasonably affects the rights of the data owner and data may be collected in the form of statistics that cannot identify the customer continuously.
4. In the event that the customer consents, the Company will process the customer's personal data for the specific purposes for which the customer has given consent, such as using the data to contact and publicize information and offers about the Company's products, services, discounts, and other benefits via the Company's communication channels, such as SMS, E-mail, Post, LINE application, and other electronic and online channels of the Company, which are in line with the customer's interests, to the customer via various communication channels. The Company will process the customer's personal data for such purposes until the customer revokes the consent that the customer has given to the Company. Such withdrawal of consent will not affect the collection, use, disclosure, or processing of personal data that the customer has already given consent to.

Disclosure of Personal Information

In principle, the Company will not disclose or forward the Customer's personal information to any third party. However, in case of necessity, the Company may need to disclose and forward the Customer's personal information to the following persons:

1. Relevant external service providers , which may include external service providers who provide support services to the Company in performing its duties and exercising the rights that the Company may have towards customers, such as payment service providers, information technology service providers, delivery service providers, business partners who may jointly organize activities, and service providers involved in the Company's business operations, such as various consultants (including auditors or internal control system auditors), under the condition that the Company will disclose customers' personal data only as necessary, in accordance with the framework of the personal data processing agreement that the Company will enter into and sign with such external service providers. In the event that the Company transfers, transfers, and/or sends personal data to service providers who operate and process personal data abroad, the Company will set standards for making agreements and/or contracts for processing personal data with the service providers who will receive such personal data, with standards for protecting personal data that are acceptable and in accordance with relevant laws, to ensure that such personal data will be protected securely.
2. Government agencies to which the Company may be required by law to disclose customers' personal information as ordered by the relevant agencies, such as the Revenue Department, etc., whereby the Company will disclose and forward information only as necessary for the performance of such duties.
3. In the event that the customer gives consent, the Company may disclose personal data to specific persons specified by the customer.

Personal Data Security Measures

The Company guarantees to have appropriate security measures in place, under applicable laws, to prevent unauthorized or unauthorized access, use, alteration, modification or disclosure of Personal Data. The Company will review such measures from time to time to ensure compliance and suitability with industry standards and changes in applicable laws.

Data Owner Rights

The Company respects the legal rights of customers as data owners with respect to their personal data under the Company’s control. You may exercise the following rights within the framework of relevant laws: (1) The right to withdraw consent; (2) The right to request access to and a copy of your personal data; (3) The right to request correction of your personal data; (4) The right to request personal data in the event that the Company makes such personal data in a format that can be read or used generally by automated tools or devices, including the right to request that such data be sent or transferred to another data controller; (5) The right to object to the processing of personal data; (6) The right to request that personal data be erased, destroyed or anonymized when such data is no longer necessary. In the event that you request to exercise the right to erase or anonymize your data, the Company may not be able to provide you with other products or services or perform any contract with you. The Company therefore reserves the right to refuse to request deletion of such data if it is still necessary to retain your personal data; (7) The right to request that the use of personal data be suspended.

Customers may contact us to inquire about this policy or to exercise their rights related to their personal data. The Company will notify the results of its consideration of your request within a reasonable time frame in accordance with the law.

By sending an email to DPO@demosite.jubileediamond.co.th or contacting the head office of Jubilee Enterprise Public Company Limited, 179 Bangkok City Tower Building, 10th Floor, Sathorn Tai Road, Thung Maha Mek Subdistrict, Sathorn District, Bangkok 10120.

You can also contact the company via Call Center at 02-625-1111, Monday-Friday, 9:00 a.m. – 6:00 p.m.

Last modified: May 26, 2022