Privacy Policy
1. Principles and Objectives
TGX Co., Ltd. (“TGX”) recognizes the importance of protecting personal data and respects the privacy rights of its customers, service users, contacts, website visitors, and other individuals involved in the Company’s operations.
The Company has therefore established this Privacy Policy to explain the principles and procedures governing the collection, use, disclosure, retention, and protection of your personal data. Such data may be obtained through the website at www.tgxcard.com, service application forms, online channels, social media platforms, communications with the Company, or other channels designated by the Company.
The Company will process personal data lawfully, fairly, transparently, and only to the extent necessary for the purposes communicated to you. Appropriate security measures will be implemented to prevent personal data from being lost, accessed, used, altered, corrected, or disclosed unlawfully or without authorization.
This Privacy Policy is intended to inform you of the types of personal data collected by the Company, the purposes and legal bases for processing such data, retention periods, disclosures or transfers of data, security measures, and your rights as a data subject under Thailand’s Personal Data Protection Act B.E. 2562 (2019) and other applicable laws.
2. Types of Personal Data Collected by the Company
The Company may collect your personal data as necessary to provide its services, including the following:
2.1 Identification Information
Such as your first name, surname, username, date of birth, age, gender, and national identification number.
2.2 Contact Information
Such as your contact or delivery address, telephone number, email address, LINE account, social media accounts, and any other contact information you provide to the Company.
2.3 Transaction and Payment Information
Such as order details, payment information, partial credit or debit card details, bank account information, information required for issuing receipts or tax invoices, and payment history. The Company will collect only the information necessary and will maintain appropriate security measures.
2.4 Technical and Website Usage Information
Such as IP address, MAC address, device model and type, web browser information, website access records, usage behavior, and session ID.
The Company may collect such information directly from you through service application forms, its website, online channels, telephone, email, LINE, social media platforms, visits to the Company’s premises, or communications between you and the Company.
3. Sources of Personal Data
The Company may collect your personal data from the following sources:
Directly from you when you create an account, complete a form, submit cards for service, purchase products, make payments, contact the Company, participate in activities, exercise your rights, or submit a complaint.
Automatically when you access the Company’s website or online services through cookies, system logs, and similar technologies.
From persons authorized by you, such as individuals submitting cards on your behalf, authorized recipients, representatives, partner stores, or customer referrers.
From service providers and business partners as necessary, such as payment service providers, delivery companies, website service providers, cloud service providers, or social media platforms.
From publicly available or lawful sources, such as information you have made publicly available or databases that may lawfully be accessed.
4. Purposes of Collecting Personal Data
The Company may collect, use, or disclose your personal data for the following purposes:
4.1 To verify your identity, create and manage customer accounts, process orders, and manage customer relationships.
4.2 To receive, inspect, photograph, grade, encapsulate, and label cards; issue certificates or reference numbers; and provide verification results for cards or certificates.
4.3 To provide service status updates, arrange appointments, receive and return cards, deliver products, track shipments, and confirm receipt.
4.4 To charge and verify payments, issue receipts or tax invoices, process refunds, and maintain accounting records.
4.5 To respond to inquiries, provide after-sales service, handle requests to exercise data subject rights, and manage complaints, damage claims, or disputes.
4.6 To perform quality control, train personnel, and analyze and improve the Company’s products, services, website, and customer experience.
4.7 To maintain security, prevent counterfeiting, fraud, and unauthorized access, and protect the property and rights of the Company and other persons.
4.8 To send news, promotions, or relevant offers where the Company has an appropriate legal basis and to provide you with the option to unsubscribe.
4.9 To prepare statistics or reports using anonymized data or data that has been appropriately processed so that it cannot reasonably be linked back to you.
4.10 To comply with applicable laws, court orders, or orders issued by regulatory authorities, and to establish, exercise, or defend legal claims.
5. Legal Bases for Processing Personal Data
The Company will collect, use, or disclose your personal data based on an appropriate legal basis, including:
5.1 Performance of a contract or taking steps at your request before entering into a contract.
5.2 Compliance with legal obligations to which the Company is subject.
5.3 The legitimate interests of the Company, provided that such interests do not unduly affect your rights and freedoms.
5.4 Your consent, where consent is required by law.
The Company will collect and use personal data only to the extent necessary for the purposes communicated to you.
6. Disclosure of Personal Data to Third Parties
The Company may disclose your personal data, only to the extent necessary, to the following third parties:
6.1 Delivery and logistics service providers for the collection and delivery of cards or parcels.
6.2 Banks and payment service providers for processing transactions and verifying payments.
6.3 Technology, data analytics, and marketing service providers for the development and promotion of the Company’s services.
6.4 Professional advisers, business partners, or representatives of the Company who support its operations.
6.5 Government officials or government authorities where disclosure is required by law or a lawful order.
The Company will disclose only the information necessary for the relevant purposes and will require recipients to maintain appropriate confidentiality and security measures for personal data.
7. Retention of Personal Data
The Company will retain your personal data only for as long as necessary to fulfill the purposes of providing its services and conducting its business, and for any period required by applicable law.
When the personal data is no longer necessary, the Company will securely delete, destroy, or anonymize such data using appropriate methods.
8. Security of Personal Data
The Company recognizes the importance of maintaining the security of personal data and has implemented appropriate measures to prevent its loss and any unlawful or unauthorized access, use, alteration, correction, or disclosure.
The Company uses electronic security measures, including data encryption and SSL/TLS technology for its website, and restricts access to personal data to authorized persons who require such access for relevant purposes, in order to appropriately protect your personal data.
9. Rights of Data Subjects
Subject to applicable personal data protection laws, you have the following rights:
9.1 Right to Withdraw Consent
You may withdraw any consent previously provided at any time. The withdrawal of consent will not affect the lawfulness of any processing carried out before the withdrawal.
9.2 Right of Access
You have the right to request access to and obtain a copy of your personal data, including the right to request information regarding the source from which the data was obtained.
9.3 Right to Rectification
You have the right to request that the Company correct your personal data to ensure that it is accurate, current, complete, and not misleading.
9.4 Right to Erasure
You have the right to request that the Company delete, destroy, or anonymize your personal data when it is no longer necessary or when the conditions prescribed by law are met.
9.5 Right to Restriction of Processing
You have the right to request the temporary restriction of the use of your personal data in circumstances prescribed by law.
9.6 Right to Data Portability
You have the right to obtain or transfer your personal data in a structured, commonly used, and machine-readable format, subject to the conditions prescribed by law.
9.7 Right to Object
You have the right to object to the collection, use, or disclosure of your personal data, including the processing of your data for direct marketing purposes.
9.8 Right to Lodge a Complaint
You have the right to lodge a complaint with the competent authority if you believe that the Company has processed your personal data unlawfully.
You may submit a request to exercise your rights by emailing tgxgrading@gmail.com or calling 063-984-9999. The Company will consider your request and notify you of the outcome within 30 days from the date it receives your completed request and all required identity verification documents, unless otherwise prescribed by law.
10. Links to External Websites or Services
The Company’s website may contain links to third-party websites or services that maintain their own privacy policies. The Company is not responsible for the collection, use, or disclosure of personal data by such third-party websites or services. You are therefore advised to review their privacy policies before using them.
11. Refusal or Withdrawal of Consent
You have the right to refuse or withdraw your consent to the processing of your personal data. However, doing so may prevent the Company from providing certain services to you.
Any refusal or withdrawal of consent will not affect the lawfulness of processing carried out before such refusal or withdrawal.
12. Amendments to This Privacy Policy
The Company may amend or update this Privacy Policy as appropriate. The latest version of the Policy and its effective date will be published on the Company’s website or communicated through other Company channels.
13. Deletion of User Accounts
You may request the deletion of your user account by contacting the Company. Once your account has been deleted, you may no longer be able to access or use certain services.
The Company may retain certain information to the extent necessary to comply with applicable legal obligations.
14. Contact Information
If you have any questions or wish to exercise your rights concerning your personal data, please contact:
TGX Co., Ltd.
Address: 41/1 Soi Phahonyothin 5, Phahonyothin Road, Phaya Thai Subdistrict, Phaya Thai District, Bangkok 10400, Thailand
Email: tgxgrading@gmail.com
Telephone: 063-984-9999
Website: www.tgxcard.com