Introduction

Novax Thailand ("we", "company") values your privacy. This policy explains how we collect, use, and disclose your personal data when you use our services or website.

We comply with Thailand’s PDPA and international data protection standards.

1. Data We Collect

1.1 Data You Provide Directly

• Full name
• Shipping address and billing address
• Phone number
• Email
• Payment information
• Order history

1.2 Data Collected Automatically

• IP address
• Browser type and version
• Website usage logs
• Cookies and tracking technologies
• Device and location information

2. Purposes of Use

We use your personal data to:

• Process orders and ship products
• Process payments
• Communicate about orders and services
• Send news and promotions (with consent)
• Improve products and services
• Analyze website usage
• Prevent fraud and maintain security
• Comply with legal requirements

3. Data Disclosure

We may disclose your data to:

• Shipping companies: To deliver products to you
• Payment processors: To process payments
• Technology providers: To maintain and improve systems
• Government agencies: When required by law

Note: We do not sell, rent, or trade your personal data to third parties for marketing purposes.

4. Data Security

We implement appropriate safeguards to prevent loss, misuse, or unauthorized alteration of your data, including:

• Encryption (SSL/TLS)
• Access controls
• Firewalls and anti-malware
• Regular backups
• Employee security training

5. Data Retention

We retain personal data for as long as necessary to fulfill the purposes in this policy or as required by law. Generally:

• Account data: retained until account deletion
• Order data: retained for at least 5 years (accounting requirements)
• Marketing data: retained until consent is withdrawn

6. Your Rights

Under PDPA, you have the right to:

• Right of Access: Request access and a copy of your data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict: Request temporary suspension of processing
• Right to Data Portability: Receive data in a machine-readable format
• Right to Withdraw Consent: Withdraw consent previously given
• Right to Object: Object to certain processing activities

7. Cookies

Our website uses cookies to improve your experience.

Cookies are small text files stored on your device.

We use the following types of cookies:

• Necessary: Support core functionality of the site
• Analytics: Analyze website usage
• Marketing: Deliver relevant ads

You can refuse or delete cookies via your browser settings.

8. Children’s Privacy

Our services are not intended for individuals under 20. We do not knowingly collect data from children. If you believe a child has provided personal data, please contact us to remove it.

9. Policy Updates

We may update this policy from time to time. Significant changes will be notified via email or website announcements. Please review regularly.