Privacy Policy

1. Data Controller

This policy applies jointly to:

• Big-Ben (Paints) Company Limited
  Tax ID 0745535001302 — 38 Moo 7, Suanluangruamjai Road, Suanluang Sub-district, Krathum Baen District, Samut Sakhon 74110
• Big Ben Chemical Company Limited
  Tax ID 0745560001230 — 168 Moo 2, Saiyairak-Donkaidee 6, Donkaidee Sub-district, Krathum Baen District, Samut Sakhon 74110

Collectively referred to as "the Company" / "we" in this document.

2. Data We Collect

We collect personal data only for necessary purposes, as follows:

3. Purposes of Use

1. To fulfil orders and contracts between us
2. To issue accounting, tax-invoice, and export documents required by law
3. To communicate about sales, shipping, and after-sales service
4. To improve products, services, and website experience
5. To send marketing communications (only with your consent)
6. To comply with applicable law

4. Disclosure to Third Parties

We disclose data only in the following cases:

• Shipping providers — only data needed for delivery
• Payment providers — only data needed to process transactions
• Government agencies — when required by law
• IT service providers (e.g., hosting, email) — under confidentiality agreements

We never sell your personal data to third parties under any circumstances.

5. Storage and Security

We store data with appropriate security measures, including encryption (HTTPS), access controls, and regular backups.

Accounting/tax-related data is retained for at least 5 years as required by Thai law. Other data is retained only as long as necessary for the stated purposes.

6. Cookies and Tracking

Our website uses cookies to:

• Necessary cookies — Maintain login state, shopping cart (required for site use)
• Analytics cookies — Understand site usage to improve experience

You may disable cookies in your browser settings.

7. Data Subject Rights (under PDPA)

Under the Personal Data Protection Act B.E. 2562 (2019), you have the right to:

• Right of access — Request a copy of your personal data
• Right to rectification — Correct outdated information
• Right to erasure — Delete personal data (except where law requires retention)
• Right to object to processing
• Right to withdraw consent — previously given
• Right to data portability
• Right to complain — to the Personal Data Protection Committee (PDPC)

To exercise these rights, please contact us via the channels in Section 8.

8. Contact Us / Data Protection Officer (DPO)

For questions or to exercise data subject rights:

9. Policy Updates

We may update this policy from time to time. Major changes will be announced on the website or by email at least 30 days in advance.