TERMS & PRIVACY
PRIVACY POLICY
SheHeIt Studios Co., Ltd., operating under the brand "oranfragrances" ("the Company" or "we"), recognizes the importance of protecting your personal data. This Privacy Policy explains our practices regarding the collection, use, and disclosure of personal data, as well as the rights of data subjects, in accordance with applicable Personal Data Protection Laws.
COLLECTION OF PERSONAL DATA
We collect your personal data that we receive directly from you through the following channels:
• Account registration
• Telephone
• Email address
• Facebook Login
• Google Login
TYPES OF DATA COLLECTED
• Personal data such as name, surname, age, date of birth, nationality, identification card, passport, etc.
• Contact information such as address, telephone number, e-mail address, etc.
• Account details such as username, password, transaction history, etc.
• Proof of identity such as copy of identification card, copy of passport, etc.
• Transaction and financial information such as purchase history, credit card details, bank account, etc.
• Technical data such as IP address, cookie ID, activity log, etc.
• Other data such as photos, videos, and other information considered personal data under the Personal Data Protection Laws.
CHILDREN
If you are under the age of 20 or subject to other legal restrictions, we may still collect, use, or disclose your personal data, provided that your parent or legal guardian is aware and has given consent to us, or as otherwise permitted by applicable law. If we become aware that we have collected personal data from a minor without verified parental consent, we will take steps to remove that information from our servers.
USE OF DATA
We use the collected data for the following purposes:
• To create and manage accounts
• To provide products or services
• To improve our products, services, or user experience
• To share and manage information within our organization
• To conduct marketing activities and promotions
• To provide after-sales service
• To gather user feedback
• To process payments for products or services
• To comply with our Terms and Conditions
• To comply with laws, rules, and regulatory authorities
DISCLOSURE OF PERSONAL DATA
We may disclose your personal data to the following parties under certain circumstances:
Organization
We may disclose your personal data within our organization in order to provide and develop our products or services. We may combine information internally across our different products or services to help us be more relevant and useful to you and others.
Service Providers
We may use service providers to help us deliver our services, such as payment processing, marketing, and product or service development. Please note that these service providers have their own privacy policies.
Business Partners
We may disclose certain personal data to our business partners in order to coordinate and provide our products or services to you, and to provide necessary information regarding the availability of our products or services.
DATA RETENTION
We will retain your personal data for as long as necessary during the period you remain a customer or maintain a relationship with us, or for as long as necessary to fulfil the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law. We will erase, destroy, or anonymize your personal data once it is no longer necessary or once the applicable retention period has lapsed.
DATA SUBJECT RIGHTS
Subject to the Personal Data Protection Laws, you may exercise the following rights:
• Withdrawal of consent: If you have given us consent to collect, use, or disclose your personal data, you have the right to withdraw that consent at any time, unless restricted by law or you remain bound by a beneficial contract.
• Data access: You have the right to access your personal data held by us, to request a copy of such data, and to request that we explain how we obtained your personal data.
• Data portability: You have the right to receive your personal data in a machine-readable, automatically processable format where technically feasible, and to request that we transfer such data directly to another data controller, or that another data controller transfer such data directly to us, by automated means.
• Objection: You have the right to object at any time to the collection, use, or disclosure of your personal data where such processing is carried out for our legitimate interests, the legitimate interests of a third party, or for the performance of a public task.
• Erasure or destruction: You have the right to request that we erase, destroy, or anonymize your personal data if you believe the collection, use, or disclosure of that data is unlawful, no longer necessary for the purposes set out in this Privacy Policy, or where you have withdrawn consent or objected to processing as described above.
• Suspension: You have the right to request that we suspend processing of your personal data while we review a rectification or objection request, or where the data is no longer necessary and would otherwise be erased, but you request suspension instead.
• Rectification: You have the right to request that your personal data be corrected to ensure it is accurate, complete, and not misleading.
• Complaint lodging: You have the right to lodge a complaint with the competent authorities if you believe our collection, use, or disclosure of your personal data violates applicable law.
You may exercise these rights by contacting our Data Protection contact using the details below. We will notify you of the outcome of your request within 30 days of receipt. If we deny your request, we will inform you of the reason via SMS, email, telephone, or registered mail, as applicable.
ADVERTISING AND MARKETING
To help you get the most benefit from our products or services, we use your personal data to analyze, personalize, and enhance our products, services, and marketing efforts through channels such as Google, Facebook, pixel tracking, and others. We use this information to provide you with customized and relevant recommendations for products or services we believe may interest you.
We may send you information or newsletters based on your preferences via email. If you no longer wish to receive communications from us, you may click the "unsubscribe" link in the email or contact us directly.
COOKIES
To enrich and improve your experience, we use cookies or similar technologies to display personalized content and relevant advertising, and to store your preferences on your device. We use cookies to identify and track visitors, monitor usage of our website, and understand website access preferences. If you do not wish to have cookies placed on your device, you may configure your browser to refuse cookies before using our website.
DATA SECURITY
We take reasonable measures to protect your personal data in accordance with the principles of confidentiality, integrity, and availability, in order to prevent loss, unauthorized or unlawful access, destruction, use, alteration, or disclosure of your data. These measures include administrative, technical, physical, and access-control safeguards.
DATA BREACH NOTIFICATION
In the event of a personal data breach, we will notify the Office of the Personal Data Protection Committee without undue delay and, where feasible, within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in a risk to your rights and freedoms. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you and inform you of remedial measures without undue delay, via our website, SMS, email, telephone, or registered mail, as applicable.
CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. We encourage you to check our website periodically for any changes to this Privacy Policy.
This Privacy Policy was last updated and became effective on [Please insert date].
LINKS TO OTHER SITES
This Privacy Policy applies to our provision of products or services and the use of our website. Any third-party websites linked from our site are subject to their own privacy policies, which are not affiliated with or controlled by us.
CONTACT INFORMATION
If you have any questions about this Privacy Policy or would like to exercise your rights, you may contact us using the details below:
Data Controller
SheHeIt Studios Co., Ltd. (operating the oranfragrances brand)
Address: 29/1157 Soi Hathairat 39, Samwa Tawan Tok, Khlong Samwa, Bangkok 10510, Thailand
Phone Number: +66 61 056 2459
Email: she.he.it.studios@gmail.com