Privacy Policy

CURIOOkids Co., Ltd. recognizes the importance of maintaining the security of your personal data. Therefore, the Company has implemented appropriate measures to safeguard personal information from loss, unauthorized access, destruction, misuse, alteration, modification, or disclosure—whether unauthorized or unlawful. These measures comply with the Company’s policies and/or IT security practices. CURIOOkids pledges to securely store and protect any information you provide for use on this website under the terms set forth in this Privacy Policy.

Definitions

  • User/Customer: An individual or legal entity who owns the personal data and uses any services of CURIOOkids Co., Ltd.
  • Authorized Approver: A person assigned by the Company to approve any matters within the delegated authority from the Company.
  • System Administrator: A department or person assigned by the system owner or data owner to manage a particular system.
  • System Owner: A business unit executive or administrator responsible for a specific system.
  • Executives and Employees: Includes executives, managers, officers, employees, temporary staff, and contractors employed or engaged by the Company.
  • Data Subject: An individual who can be identified directly or indirectly by personal data. This refers to the person to whom the data relates, not the owner or creator of the data.
  • Personal Data: Any data relating to a person that allows the identification of that person, either directly or indirectly, but not including the data of deceased persons.

As defined in Section 6 of the Personal Data Protection Act B.E. 2562 (2019), this includes names, surnames, emails, photos, fingerprints, ID numbers, etc. Data like location or cookies, although indirectly identifying, are also included. Even data that is not identifiable alone may become personal data when combined with others, such as address, gender, or age.

  • Sensitive Personal Data: Personal data about race, ethnicity, political opinions, religious or philosophical beliefs, sexual behavior, criminal records, health data, disabilities, union membership, genetic or biometric data.
  • Public Data: Personal data disclosed by the data subject to the public, such as social media profiles when using social media credentials (e.g., Facebook, Twitter, Line) to log into Company services. This may include account IDs, interests, likes, and friend lists. Users can control these settings via their social media privacy settings.
  • Data Controller: A person or organization with authority to make decisions regarding the collection, use, or disclosure of personal data.
  • Data Processor: A person or organization that collects, uses, or discloses personal data on behalf of the Data Controller.
  • Data Processing: Any operation performed on personal data, whether automated or not, including collecting, recording, organizing, storing, altering, using, disclosing, transferring, restricting, erasing, or destroying.
  • Application: A program or set of commands used to operate mobile computers and devices to perform tasks as instructed, with a User Interface (UI) for interaction.
  • IP Address: A numerical label assigned to each device (e.g., computer, printer) participating in a computer network that uses Internet Protocol for communication.
  • Cookies: Small pieces of data sent from the Company’s website to your computer or internet-connected device to store personal data. Cookies are returned to the originating site during subsequent visits.

Collection of Personal Data

CURIOOkids Co., Ltd. collects the following types of personal data:

  1. Identity Data: Name, surname, gender, date of birth, age, nationality, ID card number, or other identifying data.
  2. Contact Data: Address, phone number, email, etc.
  3. Financial Data: Billing information, credit or debit card details, receipt data.
  4. Service Usage Data: Appointment information, service requests.
  5. Marketing Data: Information for newsletter subscriptions and marketing event participation.
  6. Website Usage Data: Web traffic logs, IP address, geolocation, browser types, login and transaction records, search history, social media activity, cookies, and other related technologies.

Purposes of Data Collection

  • To communicate with customers/users for service-related matters and customer care.

  • To provide services based on customer orders and manage registration with CURIOOkids platforms.

  • To administer and manage customer services.

  • To send emails, notifications, or newsletters about services the user may be interested in.

  • For research, development, and enhancement of user experience.

Measures for Safeguarding and Processing Personal Data

CURIOOkids Co., Ltd. has implemented comprehensive security measures covering administrative, technical, and physical safeguards to control access to or use of personal data, including but not limited to:

  • Access controls for personal data and storage/processing devices, considering usability and security.

  • Authorization rules for access to personal data.

  • Access management to ensure only authorized personnel can access personal data.

  • Assignment of responsibilities to prevent unauthorized access, disclosure, knowledge, copying, or theft of storage/processing devices.

  • Audit trails to review access, changes, deletions, or transfers of personal data consistent with the collection, use, or disclosure method.

Use of Cookies

  1. “Cookies” are small pieces of computer data sent to be stored in the user’s browser to collect information during website visits, aiming to improve the website and provide better services.

1.1 The Company will store cookies or similar technologies to enhance the performance of the platform and the accessibility of its services via the internet. These will be used for the following purposes:

2.1 To allow you to log in to your account on the Company’s platform continuously and securely.

2.2 To store information about your usage of the platform, including the settings you have configured.

2.3 To store information regarding your usage patterns and interests so that the Company can develop and improve the website to match your preferences, ensuring the website is more convenient, fast, and efficient.

 

Types of Cookies Used by CURIOOkids Co., Ltd.

3.1 Functional Cookies: These are used to remember what you have selected or set on the platform, including personal preferences such as account name, language, and platform layout.

3.2 Advertising Cookies: These are used to remember the pages you have visited and your usage patterns, to present products, services, or ads that are relevant to your interests, and to assess the effectiveness of various advertising campaigns.

3.3 Technical Cookies: These cookies are essential for the platform’s functionality, ensuring that you can access data securely and comprehensively.

3.4 Performance Measurement Cookies: These are used to store anonymous data about platform visitors and to analyze the number and behavior of visitors in order to improve the platform’s performance and better meet user needs.

3.5 Third-Party Cookies: These cookies are set by third-party service providers.

Cookie Settings and Opt-Out Options

You can reject cookies through your browser or privacy settings. However, disabling all cookies may impact the full functionality of the Company’s website.

Manage cookie settings in your browser as follows:

  1. Cookie settings in Chrome

  2. Cookie settings in Safari / iOS

  3. Cookie settings in Internet Explorer

  4. Cookie settings in Firefox

Rights of the Personal Data Subject

As the owner of your personal data, you have the right to request CURIOOkids Co., Ltd. to take action regarding your personal data within the scope permitted by law, as follows:

  • You have the right to know or request a copy of your personal data that is under the responsibility of the Company, or request the Company to disclose the source of the data that you did not consent to.

  • You have the right to request that CURIOOkids Co., Ltd. correct your data to ensure that it is accurate, up-to-date, complete, and not misleading, in case you believe that any of your personal data is incorrect, outdated, incomplete, or may cause misunderstanding.

  • You have the right to withdraw your consent previously given to CURIOOkids Co., Ltd. for the collection, use, and/or disclosure of your personal data at any time, unless such withdrawal is restricted by law or a contract that provides benefits to you (e.g., if you still have legal obligations or debt with the Company).

  • You have the right to obtain your personal data from CURIOOkids Co., Ltd. in a format that is readable or usable with an automatic device and can be used or disclosed automatically. You also have the right to request that the Company send or transfer such data to another data controller where technically feasible, or to receive the data that the Company has sent or transferred directly to another data controller, unless it is not technically possible.

  • You have the right to object to the processing of your personal data at any time, in the following cases:

     1.1 When the data is collected for the necessity of performing a task carried out in the public interest or for legitimate interests of the Company.
     1.2 When the processing of personal data is for direct marketing purposes.
     1.3 When the processing is for scientific or statistical research purposes, unless it is necessary for the performance of a task carried out for the public interest of the Company.

  • You have the right to request CURIOOkids Co., Ltd. to delete, destroy, or anonymize your personal data for certain reasons.

  • You have the right to request CURIOOkids Co., Ltd. to suspend the use of your personal data, in the following circumstances:

     3.1 While the Company is verifying your request to ensure your personal data is accurate, up-to-date, complete, or not misleading.
     3.2 When your personal data must be deleted or destroyed because it was processed unlawfully, but you request a suspension of use instead.
     3.3 When your personal data is no longer necessary for the Company to retain, but you request the Company to retain it to establish, exercise, or defend legal claims.
     3.4 When you object to the processing of your personal data and the Company is verifying the basis to reject your objection.

You have the right to file a complaint with the expert committee under the Personal Data Protection Act if CURIOOkids Co., Ltd., the data processor, or their employees or contractors violate or fail to comply with the law or related announcements.

CURIOOkids Co., Ltd. reserves the right to review your request to exercise any of the above rights and will proceed as required by the Personal Data Protection Act. If you wish to exercise your rights, you may contact:

CURIOOkids Co., Ltd. Headquarters
 11 Kaennakhon Office Park Building, 2nd–3rd Floor, Sithat Prachasanti Road, Nai Mueang Sub-district,
 Mueang Khon Kaen District, Khon Kaen Province 40000
 Tel: 043-000-980, 085-853-2021
 Website: https://www.curiookids.in.th
 Email: [email protected]

Disclosure and Receipt of Personal Data

Disclosure and Receipt of Personal Data

  1. Disclosure of Personal Data
     Disclosure of personal data to individuals or organizations outside of CURIOOkids Co., Ltd. must receive consent from the data subject and must be approved by the Data Governance Committee, unless such disclosure is required by law or regulations.

The Company may disclose personal data to external individuals and/or organizations or agencies only under the following circumstances:

1.1 Authorized intermediaries, such as logistics companies, data storage and collection service providers, and companies that develop or maintain systems necessary for CURIOOkids Co., Ltd. operations.
 1.2 Business partners, affiliates, and/or external service providers for the purpose of offering benefits and other services to the data subjects, including developing or improving the Company’s products or services. This may include data analytics, data processing, IT services, infrastructure provision, customer service platform development, email/SMS delivery, website and mobile app development, surveys, research, and customer relationship management. In such cases, confidentiality agreements must be in place, and the external party (if a legal entity) must have industry-accepted personal data protection standards.
 1.3 Government agencies or organizations under the law for the purpose of complying with legal requirements, orders, or requests and coordinating with relevant authorities on legal matters.

  1. Receipt of Personal Data
     The receipt of personal data from external individuals or organizations must ensure a valid legal basis for data processing and must be approved by the Data Governance Committee, unless it is in compliance with legal requirements. The Company may collect personal data provided directly by the data subject or obtained through the Company’s services or operations via the following channels:

2.1 Information received when the data subject registers or applies to join Company activities or use its services (e.g., name, surname, ID card number or other identification, phone number, date of birth, address, email, etc.)
 2.2 Information from account registration or participation in activities, including profile data used to access services through the Company’s platforms, such as the Company’s website, web application accounts, and data provided when registering for activities or contacting the Company through the website or other channels defined by the Company.
 2.3 Data from newsletter subscriptions, survey responses, or participation in various activities, including preferences, interests, or consumer behavior.
 2.4 Transaction-related data with the Company or others, such as representative registration, bidding information, including credit/debit card information, bank account numbers, and payment dates/times depending on the transaction type.
 2.5 Information from visiting or using the Company’s website or other websites or applications operated by the Company, usage of social media, interaction with online advertisements, type and version of software used to access the site, device types (e.g., PC, laptop, smartphone), OS/platform type, IP address, location, and services/products viewed or searched.
 2.6 Data from communications with the Company, such as service logs, satisfaction evaluations, research/statistics, voice recordings, or CCTV footage when the data subject contacts the Company (e.g., customer service), including information provided via research media like SMS, social media, apps, or email.
 2.7 Social media profile data when the data subject uses social media login credentials (e.g., Facebook, Twitter, Line) to access Company services, including social media account ID, interests, likes, and friend lists. The data subject may control privacy settings via their social media account settings provided by the social media platform.

  1. Use of External Processors
     If CURIOOkids Co., Ltd. engages external individuals or organizations to collect, use, or disclose personal data on its behalf (data processors), such processors must implement appropriate and equivalent security measures to the Company’s own standards, in accordance with the IT service provider management policy. A formal agreement must be established to control the operations of data processors to ensure legal compliance. The agreement must define the specific purposes or instructions for collecting, using, or disclosing the data, and include safeguards preventing processors from acting beyond those purposes or instructions.

 

Changes to the Privacy Policy

CURIOOkids Co., Ltd. reserves the right to amend this Privacy Policy. The Company will inform you of any such changes. Additionally, the Company may notify you of other privacy-related details, such as specific purposes for collecting personal data that fall outside of this policy. The Company may review and revise this Privacy Policy in the future to enhance personal data protection measures. You will be notified each time there is a change to the policy.

Contact Information

If you wish to contact us, have any questions, or would like more information about the processing of your personal data, including your rights as a data subject under this policy, or if you believe your personal data has been misused, you can contact us via the following channels:

 

Data Controller Information

  • Name: CURIOOkids Co., Ltd.

  • Phone: 02-0268918

  • Contact Address:
     Head Office: No. 11 Kaennakhon Office Park Building, 2nd–3rd Floor, Srithat Prachasanti Road, Nai Mueang Subdistrict, Mueang Khon Kaen District, Khon Kaen Province 40000

  • Phone: 043-000-980, 085-853-2021

  • Website: https://www.curiookids.in.th/

  • Email: [email protected]

 

Data Protection Officer (DPO) Information

CURIOOkids Co., Ltd. is committed to protecting your personal data from unauthorized access. We have implemented systems and security measures to keep your data safe and secure. The Company welcomes questions, suggestions, and feedback, which are valuable for improving our website and services in the future.