Privacy Policy
GALAXY by Optometrist, operated by RUAY KHUEN MAI CO., LTD. ("we" or "the shop"), values your privacy under Thailand's Personal Data Protection Act B.E. 2562 (PDPA). This policy explains how we collect, use, and disclose your personal data.
1. Scope
This policy applies only to personal data we process ourselves in selling eyewear and contact lenses and delivering products (the "Services"). It does not cover processing by third parties such as delivery companies; please read their privacy notices separately.
By visiting our website, contacting us, or using our Services, you acknowledge this policy. We may update it from time to time and will notify you of changes.
2. Personal Data We Collect
We collect data directly when you visit our website, contact us (website, social media, phone), register an account, join a campaign, or make a complaint, and indirectly from partners who refer your order to us. This includes:
Contact information: name, phone number, social media account, and other details you give us
Technical data: IP address, operating system settings, browser, and cookies
Account information: email, date of birth, gender, interests, username and password (if you register)
Delivery data: delivery address or Google Maps location
Payment information: card details are processed by our payment provider (PayPal) and are not stored by us; bank transfer slips; and details for a tax invoice (if requested)
Transaction data: order details, prices, website usage and search history, and use of discount codes
3. How We Use Your Data
To provide our Services from first contact through delivery and after-sales care, including processing website orders. We keep data as long as needed for the Services, or for as long as you have an account
For accounting and tax purposes, kept for the period required by law
To improve our products, Services, and your experience; handle complaints; segment customers for marketing planning (including Facebook Lookalike); and advertising (excluding direct marketing), keeping data only as long as necessary
Where you give consent, for the purposes you consented to until you withdraw it, such as non-essential cookies and direct marketing
4. Cookies
Our website uses three types of cookies:
Strictly necessary cookies: required for the website to work securely
Functionality cookies: remember your preferences, such as account, language, and display settings
Performance cookies: third-party cookies that measure how well the website performs
Cookies other than strictly necessary cookies are used only with your consent and only for the stated purpose.
5. Disclosure of Your Data
We generally do not disclose your personal data to third parties, except:
Service providers who help us deliver our Services, such as website and IT providers, delivery companies, payment providers, and legal, accounting, or marketing advisors, on a need-to-know basis under a data processing agreement
Government authorities where required by law, court judgment, or order
Others you explicitly consent to
6. Data Security
We apply appropriate security measures under applicable law to prevent unauthorized access, use, change, or disclosure of your personal data, and review them regularly.
7. Your Rights
Under applicable law, you have the right to:
Withdraw consent
Access or obtain a copy of your data
Correct your data
Request data portability
Object to processing
Request deletion or anonymization once the data is no longer needed
Request restriction of processing
8. Data Deletion Requests
Email galaxy.opticalshop@gmail.com with the subject "Data Deletion Request", including your full name, the email address linked to your account, and a description of the data you want deleted. We will:
Verify your identity
Confirm receipt within 7 business days
Complete the deletion within 30 days of confirmation and let you know when it is done
Some data may need to be kept for legal or regulatory reasons; we will tell you if so.
9. Contact Us
RUAY KHUEN MAI CO., LTD. (GALAXY by Optometrist), 2nd Floor, Room 2026, Pantip Ngamwongwan, 217 Ngamwongwan Road, Bang Khen, Mueang Nonthaburi, Nonthaburi 11000, Thailand
Email galaxy.opticalshop@gmail.com · Phone 065-259-4141 · LINE @galaxy_od
Your Personal Data to be Processed We may collect or receive your personal data either directly (i) from your visit to our website or your contact to our communication channels (i.e., website, social media, or call center); (ii) your registration for the user account on our website; or (iii) from other circumstances that you may submit your personal data to us directly for the event or campaign participation or complaint handling process; and indirectly from our partner who may refer you or your order to us to process in performing the Services. In the delivery of our Services to you, we would need to collect, use, or disclose the following personal data of yours: 1. Your contact information, including your full name and contact information (i.e., telephone number, social media account), and any other personal data information that you may give to us to process during the first contact; in the participation in any campaign hosted by us and you may interested to join; or in case of any complaint made; 2. Technical Identifier, including IP address, operating system settings, and browser connection that you use to connect to our website, and cookies; 3. User Registration Information, including e-mail, date of birth, gender, interest, and preference that you may fill in the form for the user registration; and your username and password for login. 4. Delivery Data, the delivery address or the Google map location (longitude/latitude) that you would give for the delivery purposes; 5. Payment Information, including credit card information that will be processed by the third-party payment gateway or bank transfer payment slip; and in case you request for a tax invoice, we would need to collect your identification documents to be included in such tax invoice. 6. Transaction Data, including your order information (i.e., product details, purchase price and total costs), your website usage or search history, and the use of discount and promotional code, where our system will collect that information automatically when you use your user account to transact on our website;
Purpose for Personal Data Use & Processing We would need to process your personal data for the following purposes: 1. To perform our Service to you from the first contact to product delivery and feedback handling; and in case of online delivery via website, to verify your qualification and to transact your order made on the website; provided that we would need to retain your personal data for the period of time as required for the delivery of the Services; and in case that you have the user account, for so long as you still have the user account on our website; 2. For our accounting and tax purposes, we would need to collect and retain your personal data in accordance with the timeframe specified under the relevant laws. 3. To build and improve our Services and your user experiences, we would process your personal data for product and Services development and improvement; complaint management; customer segmentation for marketing and public relations planning (including Facebook Lookalike); and for other advertisement purposes (except for the direct marketing purposes); provided that we will retain your personal data as necessary to fulfill those business purposes without causing excessive impact on your right as the data subject; and 4. In case Consent is given, we will process your personal data for the specific purpose permitted by the Customer until such consent is withdrawn, including, without limitation, for the use of cookies (other than strictly necessary cookies) to customize your experiences on our website, and for direct marketing purposes.
Cookies For the performance of the website, to ensure the basic functionality of the website, and to enhance your online experience, we need to use four types of Cookies for specific purposes as defined below: 1. Strictly Necessary Cookies, which are cookies required for the website to function and for you to receive Services in the most secure and feasible manner; 2. Functionality Cookies, which are cookies that keep track of the preferences you make when using website (including your account information, preferred language, font, or display layout); 3. Performance Cookies, which are third-party cookies used to assess how well each function of the website performs; and For any cookies, other than the Strictly Necessary Cookies, with your consent, we will only use those Cookies for a limited purpose as defined.
Disclosure of your Personal Data Generally, we will not disclose or transfer your personal data to any third party, except the disclosure to these following persons where we would need to do so in order to ensure the performance of our Services to you: (1) To the relevant external service provider, being engaged to provide support service to us in the performance of our Services to You (i.e., outsourced IT service provider, outsourced deliverymen, payment gateway); or being engaged to support our business operation (i.e. legal, accounting or marketing consultant); provided that we will only disclose your personal data on the need-to-know basis under the defined scope of the data processing agreement to be entered into between us and such external service providers; (2) To government authorities, that we may be obliged under the relevant laws or the government judgment or orders to disclose your personal data to; and to other persons that you give explicit consent to us to disclose such personal data to.
Protection for your Personal Data We will implement appropriate information security measures in accordance with applicable laws to prevent unauthorized access, use, amendment, or disclosure of your personal data and we will review those information security measures to ensure compliance with the applicable laws.
Your Rights We respect your statutory rights as the data subject with regard to your own personal data under our control. You can request to exercise your data subject rights under the applicable laws as follows: (1) the right to withdraw consent; (2) the right to request access to or a copy of their personal data; (3) the right to revise their personal data; (4) the right to request data portability; (5) the right to object to any processing of their personal data; (6) the right to request deletion or de-identification of their personal data once no longer required; and (7) the right to request the suspension of processing of their personal data.
Data Deletion Policy At GALAXY BY OPTOMETRIST we respect your privacy and are committed to protecting your personal data. If you wish to delete your data from our systems, please follow the process outlined below. How to Request Data Deletion If you want to request the deletion of your personal data, please send an email to our customer service team at Galaxy.opticalshop@gmail.com with the subject line "Data Deletion Request." In your email, please include the following information: 1. Your full name 2. The email address associated with your account 3. A detailed description of the data you wish to delete Processing Your Request Upon receiving your request, we will: 1. Verify your identity to ensure the security of your data. 2. Review your request and confirm receipt within 7 business days. 3. Process your data deletion request within 30 days of confirmation, and inform you once the deletion is complete. Please note that some data may need to be retained for legal or regulatory reasons, but we will inform you if this is the case. For any questions or further assistance, please contact us at galaxy.opticalshop@gmail.com