Last update: 13/05/2563
The privacy and security of your personal information is important to us. We implement the privacy concepts provided by the applicable laws and regulations including but not limited to local laws of Thailand, Japan, Singapore and the General Data Protection Regulation (GDPR) to ensure that your Personal Data (as defined below) will be collected, processed, used and shared in the appropriate manner and in accordance with the purpose we set out as follows. We also periodically train our staff and employees to comply with this privacy policy (“Policy”) and our Data Protection Officer is responsible to supervise our staff and employees in an appropriate manner.
This Policy of HAPPYLAND INTERTRADE CO.,LTD., our affiliates and group companies (the “Company”, “we” or “our”) will govern our treatment of your Personal Data during the term and performance of services provided by us through our official website, our process for onboarding merchants, and through our online payment services which customers transact via certain merchants’ online store/platform (“Services”). For the purpose of this Policy, “Personal Data” means any information relating to an individual who can be identified particularly by reference of certain information given by such individual as requested by the Company for specific purposes in the following sections.
- Personal Data We Collect
This Policy covers our collection, processing and treatment of the Personal Data on four (4) main categories:
onboarding new merchants;
visiting and interacting with our website;
payment via merchants’ platform; and
company’s marketing communication.
1.1 Onboarding New Merchants
Data we collect: We strictly comply with the laws relating to anti-money laundering, and combating of terrorist financing and proliferation of weapons of mass destruction (AML/CFT) as well as our policy for the purpose of conducting our KYC/CDD on our merchants. Before onboarding, we are responsible to verify our merchants and do our best to ensure that they do not carry out or involve in illegal or restricted business activities. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Policy. All Personal Data you provided to us is stored on our secure servers. Where we transfer our data outside of Japan or Singapore, we ensure that adequate safeguards are in place.
For these purposes, individual merchants wishing to use our Services must provide us with the following Personal Data as part of our onboarding process:
full Name;
ID card or passport;
registered address listed in the house registration and current address and (in case of foreigner) address of his/her home country and current address in the country where he/she applies for our service;
telephone number;
email addresses;
date of birth;
photographs;
details of bank account;
occupation and work address;
sample of signature(s) of merchants;
any other information specified in certain merchant service agreement to be entered into between each individual merchant and the Company or under local laws of the country where you apply for our Services.
For merchants which are juristic persons, we collect your information per our KYC process described in the merchant service agreement including Personal Data of the the merchants’ representatives or directors (e.g. their full names, ID cards or passports, registered address and contact addresses (or in case of foreigner) address of his/her home country and current address where such juristic persons apply for our Services, date of birth, telephone number and sample of signature(s) of such representative(s) or director(s)).
Method of data collection: We collect your Personal Data during our KYC process through documents given to us via our website, dashboard, email and hard copies of documents that you deliver us.
Data storage, processing and sharing: We verify, process and store the Personal Data provided by each individual merchant on the Company’s protected system in Thailand, Japan or Singapore (as the case may be) which such Personal Data will neither be disclosed nor shared to any third parties, unless otherwise specified by the applicable laws and regulations or requested by any government authorities.
Data retention: We will keep the Personal Data of each merchant during the term of the Services or the merchant service agreement(s) between the Company and each merchant.
Upon termination of the Services and/or each merchant service agreement, we are required by the applicable laws to further retain such Personal Data relating to the KYC/CDD process above and after that we will promptly delete or destroy such Personal Data from our system. The retention period after termination of our Services and closure of accounts as required by the laws vary in different jurisdictions as follows:
Thailand: 5 years retention period for the Personal Data relating to the KYC documents and information and 10 years retention period for CDD documents and information pursuant to the Anti-Money Laundering Act of Thailand;
Your rights: You may email directly to us requesting to access, change or update your Personal Data.
1.2 Visiting and Interacting with Our Website
Data we collect: When visiting our website, we will record in our web server logs your Personal Data as follows:
browser information (e.g. browser type and version, operating system, etc.) through user agent strings and metadata provided during the access request by your system;
Internet protocol (IP) Addresses and their associated location;
date and time of visit;
referral uniform resources locator (URL); and
pages visited by such visitor on our website.
For our website visitor analysis systems we will also additionally collect:
Email address (when signing up);
Google UUID (Unique User ID)
Data processing and sharing: Access to the Company’s website is logged to monitor system security as part of our intrusion detection program. We store the Personal Data that we collected for the purpose under this section on Amazon and Google Data Centers in Singapore and Tokyo, Japan.
Access information is also shared with our analytics provider, Google Analytics and Facebook using third party cookies.
Profiling: We use browser cookies to personalize contents and your preference, to selectively deliver and display the Company’s or others’ advertisements, to allow us to analyze statistical information of our website users including frequency and location of website access, and to measure conversion rate from website visit to account sign-ups. For this profiling purpose we embed third party javascript from Google and Facebook that share your browser information with them and link the site access with your browsing history using their cookies. In return, they provide us with anonymized visitor site usage analysis. Your actual user identity that you shared with these providers will not share with us. You consent to our browser cookies if you continue to use our website and decide not to block them.
Data Retention: The retention of the Personal Data collected for profiling is governed:
by Google Analytics where it will be be retained for 38 months; and
by Facebook Insights where it will be retained in accordance with the retention policy of Facebook.
Retention of logged access data that only provides IP and browser information of the accessing user, may be kept for one (1) year as required by PCI-DSS. Access to logs is strictly controlled and protected.
Your rights: When successfully shown that you are the owner of certain IP addresses at a certain time, we provide you with all information we have about it. You may request erasure of those IP addresses from our logs which we will comply if there is no regulation or obligation requiring it to be kept.
You can delete all site access and conversion data shared with Google anytime from https://myactivity.google.com/myactivity.
1.3 Payment via Merchants’ Platform
Data we collect: We are the processor of the online payments and process certain of your Personal Data transacted (purchase goods or services) online through the merchant’s platform or store including collecting of payment card numbers, expiration dates, name of cardholders, CVC code and card brands. The collection and processing of such Personal Data follows the merchants’ privacy policy or your agreement with the merchants which at least explain how the merchant share your Personal Data with us.
Data processing and sharing: For authorization and charging, your payment card data will be processed (and thus shared) through the relevant payment providers (e.g. Visa, MasterCard etc.) and third-party processors according to our contracts with them. The sharing is strictly secured as per data security standard (PCI-DSS).
Payment information (excluding payment card numbers or sensitive information) will also be shared with the merchant on our platform. We may also share such information with third parties for fraud detection and prevention.
We store the Personal Data that we collected for the purpose under this section on Amazon and Google Data Centers in Singapore and Tokyo, Japan.
We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Policy. All Personal Data you provided to us is stored on our secure servers. Where we transfer our data outside of Japan or Singapore, we ensure that adequate safeguards are in place.
Data retention: Your payment card information is securely kept with us for four (4) years, and your payment history will be retained with us for five (5) years from the transaction completion date as we may be required by the governmental authorities, issuing banks, acquiring banks and other source of funds to prove the existence of the transactions and cooperate and assist them in examining certain suspected transactions.
Your Rights: When successfully shown that you are the owner of certain transactions or card information, we will provide you with all details in our system except for the payment card information itself which we are not allowed to share. You may request us to remove your card data (except the cardholder name as may be requested by the governmental authorities, issuing banks, acquiring banks and other source of funds). We will remove your card data within one (1) year after your request. During such period, the card will be blocked for further processing or payments.
To exercise these rights please first contact your merchant through whom you bought goods or services. We can only take direct action if there is an issue contacting the merchant.
1.4 Company’s Marketing Communication
As part of our marketing and promotional plan, we may communicate with you through the channels (email, social media platform, telephone number and others) that you shared with us: (a) to provide information regarding our system and Services and (b) to advertise, deliver or promote our Services or our affiliates’ services.
Data retention and Sharing: We will retain the contact details and communication information under this section as we deem appropriate, to the extent provided by the applicable laws and regulations, and will not share such information to any persons, except our affiliate companies.
Your rights: At any time, you may contact us to cease to send and deliver you any marketing and promotional information. We will promptly remove your contact and communication information for such purpose upon your request.
- Sharing of Your Personal Data
The Company will not share or disclose your Personal Data to any third parties, except:
where expressly indicated in the previous sections;
the Personal Data is provided through a business transfer by way of merger or other similar transactions;
the Company is required to cooperate with state or local governmental organizations or their agents to perform their duties or obligations pursuant to applicable laws and regulations, and such performance is likely to be precluded if the consent of the user must be obtained;
if the sharing or disclosure is requested by the owner of the Personal Data;
in any event we obtain specific consent from the owner of the Personal Data.
- Protecting Children’s Personal Data
We do not intend to provide our Services to individuals under legal ages. We encourage parents and legal guardians to monitor their children’s internet usage and to help enforce this Policy by instructing their children never to provide their Personal Data through the website or our Services without their permission.
- Dispute Resolution
Any claim or dispute arising from or in connection with this Policy shall be resolved by the competent court of Thailand.
- Inquiries
Should you have any suggestions, questions, complaints, or other inquiries in connection with this Policy, please do not hesitate to communicate with our data protection officer at our contact points as follows.
Data Protection Officer
Our Offices
บริษัท แฮปปี้แลนด์ อินเตอร์เทรด จำกัด
139 ซอยศูนย์การค้าแฮปปี้แลนด์ 1 ถนนลาดพร้าว แขวงคลองจั่น เขตบางกะปิ กรุงเทพฯ 10240
Our email
At any time, you may request to have your Personal Data maintained by us returned to you or removed by emailing us or use the provided portal (in case of merchants). Requests to access, change, or remove your information will be handled within thirty (30) days. To protect your privacy and security, we may take steps to verify your identity before complying with the request.
- Changes to This Policy
The Company may amend this Policy from time to time. Such changes will be highlighted when accessing the Services and you may access to the latest version of our Policy on our website.