1. Introduction

Hatari Electric Co., Ltd. (“the Company”, “we”, “us”) respects your privacy and is committed to protecting your personal data in accordance with the Personal Data Protection Act B.E. 2562 (2019). This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal data when you access or make purchases on our website (www.hatari.co.th)

We are dedicated to handling your personal information with transparency, security, and compliance to build your trust in how we manage your data.

2. Definitions

In this Privacy Policy, the following terms shall have the meanings indicated below:

“Customer” refers to any individual who accesses or uses the Hatari website, including users who place orders, subscribe to newsletters, register products, or participate in any services provided by us.

“Personal Data” means any information relating to an individual that enables the identification of such individual, directly or indirectly.

“Data Controller” means the person or entity with the authority to make decisions about the collection, use, or disclosure of personal data.

“Data Processor” means the person or entity that processes personal data on behalf of the Data Controller.

“PDPA” refers to the Personal Data Protection Act B.E. 2562 (2019) of Thailand.

“Website” refers to www.hatari.co.th, owned and operated by Hatari Electric Co., Ltd.

3. Collection of Personal Data

We collect personal data through various means, including when you register an account, place an order, subscribe to marketing communications, or interact with the website. The types of data collected include:

3.1 Data you provide directly

(a) Full name, email address, phone number, delivery address, and product registration information

(b) National ID or passport number (in cases requiring identity verification for returns, redemptions, or tax invoices)

(c) Preferences, feedback, and any other information submitted via forms on the website

3.2 Data collected automatically through your use of the website

(a) IP address, browser type, device identifier, cookies, and behavioral data (e.g. pages visited, session duration)

(b) Log files, transaction history, and interaction history with our services or customer service

3.3 Sensitive Personal Data

We do not intentionally collect sensitive personal data (e.g., religious beliefs, health data) unless required by law or explicitly consented by you.

3.4 Indirect collection from other sources

In some cases, we may collect data from CCTV footage at company premises or from official documents submitted via online forms (e.g. vehicle registration for warranty-related delivery or service).

4. Purpose of Use of Personal Data

We collect and use your personal data for the following purposes:

4.1 To process your product orders, deliveries, returns, refunds, and warranty services.

4.2 To verify your identity for account management, loyalty points redemption, or issuing full tax invoices.

4.3 To analyze customer behavior in order to improve website features, services, products, and marketing strategies.

4.4 To communicate with you regarding transactions, promotions, order status, reward redemptions, and service updates via email, SMS, LINE Official, or other contact channels.

4.5 To prevent fraud and misuse, including unauthorized account creation or manipulation of loyalty points and promotional activities.

4.6 To comply with legal obligations, including tax regulations and requests from competent authorities.

4.7 If consent is given, to provide personalized marketing, promotional offers, newsletters, and targeted communications tailored to your interests.

5. Disclosure of Personal Data

5.1 To service providers or partners who perform services on behalf of the Company, such as payment processors, logistics providers, IT support, CRM or loyalty system providers, and marketing agencies. These parties are required to protect your data in accordance with applicable law and contractual obligations.

5.2 To government agencies or regulators if required by law, court orders, or legal obligations, including tax filings, consumer protection, or legal claims.

5.3 In the event of a business transfer, merger, or restructuring, your data may be transferred to a successor organization, with the same level of protection maintained.

5.4 To Hatari’s authorized CRM partner and loyalty program provider (e.g., Buzzebees Co., Ltd.) for the purposes of user verification, reward redemption, and customer service in accordance with applicable privacy laws.

 5.5 Your data will not be sold, rented, or disclosed for purposes beyond those specified here unless we have received your explicit consent or are legally permitted to do so.

6.Access and Correction Rights

6.1 If you do not wish to receive promotional communications from us, you may notify us via the contact details provided in Section 12.

6.2 You may submit a "Personal Data Request Form" to exercise your rights under the Personal Data Protection Act (PDPA) through the contact channels provided in Section 12. These rights include:

6.2.1 The right to access or request a copy of your personal data we have collected.

6.2.2 The right to rectify inaccurate, incomplete, or outdated personal data.

6.2.3 The right to temporarily suspend the use of your personal data.

6.2.4 The right to object to the collection, use, or disclosure of your personal data.

6.2.5 The right to request the deletion of your personal data.

6.2.6 The right to withdraw consent previously given.

6.2.7 The right to know the existence, nature, and purpose of personal data we hold.

6.2.8 The right to be informed of the sources of personal data that you did not directly provide.

We will review your request and respond within 30 days unless otherwise restricted by law. If we are unable to fulfill your request, we will record the reason.

6.3 Please note that if you request deletion or withdraw consent, it may limit or prevent us from providing services to you or impact the effectiveness of service delivery.

6.4 We will make reasonable efforts to comply with your requests unless doing so risks the rights of others, violates the law, or is technically unfeasible.

6.5 If you wish to exercise your rights under the PDPA (e.g., right to access, erase, object, rectify, restrict processing, data portability, or withdraw consent), please contact us via the methods listed in Section 12.

7. Data Security Measures

7.1 We take the security of your personal data very seriously. We implement appropriate technical, administrative, and physical safeguards to protect your personal data against unauthorized access, loss, misuse, alteration, or disclosure.

7.2 Access to your personal data is limited to employees, contractors, and service providers who require it to perform their duties. They are required to handle your data in accordance with our instructions and under confidentiality obligations.

7.3 If we engage external parties to process personal data on our behalf, we will ensure that they maintain appropriate security standards and sign agreements consistent with this Privacy Policy.

7.4 In the event of a personal data breach that may pose a risk to your rights and freedoms, we will notify the Personal Data Protection Committee (PDPC) within 72 hours. If the risk is deemed high, we will also inform you without undue delay and provide recommended mitigation steps.

8. Links to Third-Party Websites and Services

8.1 The Hatari website may contain links to third-party websites, products, or services. These third parties may collect certain information about your interaction with their services.

8.2 Hatari Electric Co., Ltd. is not responsible for the privacy practices, security, or content of those external websites or services.

8.3 We strongly recommend that you carefully review the privacy policies of any third-party websites, products, or services before using them.

9. Enforcement of the Privacy Policy

9.1 This Privacy Policy applies to all personal data collected, used, and disclosed by Hatari Electric Co., Ltd.

9.2 By using our website or services, you consent to the collection, use, and disclosure of your personal data—whether already collected, currently collected, or to be collected in the future—within the scope specified in this Privacy Policy.

9.3 If any updates are made to this Privacy Policy, your continued use of the services after such updates shall be deemed as acceptance of those changes.

10. Policy Review

Hatari Electric Co., Ltd. and relevant departments will review this Privacy Policy at least once a year to ensure it remains up to date, accurate, and compliant with applicable data protection laws and best practices.

11. Governing Law and Jurisdiction

11.1 This Privacy Policy shall be governed by and construed in accordance with the laws of Thailand.
11.2 Any disputes arising under or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of Thai courts.

12. Contact Channels

If you have any questions or concerns regarding this Privacy Policy, you may contact Hatari Electric Co., Ltd. using the following channels:

• Postal Mail:
  Hatari Electric Co., Ltd.
  10 Soi 94, Rama 2 Road, Samae Dam Subdistrict, Bang Khun Thian District, Bangkok 10150, Thailand
• Phone: +66 2 508 8787
• Email: marketingsupport@hatari.co.th

Data Protection Officer (DPO):

The Company has appointed a Data Protection Officer to oversee and provide guidance on personal data protection:

• Data Protection Office, Hatari Electric Co., Ltd.
• Address: 10 Soi 94, Rama 2 Road, Samae Dam, Bang Khun Thian, Bangkok 10150, Thailand
• Phone: 02 896 2390
• Email: dpo@hatari.co.th

In the event of a complaint related to the Company’s employees or actions in violation of the law, data subjects may file a complaint with the relevant supervisory authority:

Office of the Personal Data Protection Committee (PDPC)

Contact Address: Hatari Electric Co., Ltd.
10 Soi 94, Rama 2 Road, Samae Dam Subdistrict, Bang Khun Thian District, Bangkok 10150, Thailand

Data subjects must file their complaints within the period specified by law.