Privacy Policy and Personal Data Protection Notice

Effective Date:  21 August 2026

This Privacy Policy is effective from the date specified above.

1. Introduction, Purpose, and Acceptance

Knuckle Olive Co., Ltd. (“Company”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy (“Policy”) explains how we collect, use, disclose, transfer, and safeguard your personal information when you visit our website, purchase products, create an account, or interact with our services, in accordance with the Thailand Personal Data Protection Act B.E. 2562 (PDPA) and other applicable privacy laws.

By accessing our Website, purchasing products, or utilizing our services, you acknowledge that you have read, understood, and agreed to the data processing practices outlined in this Policy. If you do not agree with any part of this Policy, please refrain from using our Website and services immediately.

2. Personal Data We Collect

We collect personal data only to the extent necessary to fulfill legitimate operational and statutory purposes. The categories of data collected include:

2.1 Identification and Contact Data

• Full name, title
• Company or organization name (for corporate clients)
• Shipping address, billing address, and tax identification details
• Telephone number, email address, and messaging handles (e.g., Line ID)

2.2 Transactional and Financial Data

• Order history, product specifications, purchase details, and service records
• Payment receipts, tax invoices, and accounting documentation
• Bank account details (for refunds or payment processing)
• Note: We do not directly store sensitive credit card or debit card numbers. Online payment processing is handled by PCI-DSS compliant third-party payment gateway providers.

2.3 Technical and Usage Data

• Internet Protocol (IP) address, system log data
• Browser type and version, operating system, device identifiers
• Cookies and related web analytics tracking technologies
• Page interaction details, browsing patterns, session duration, and referral URLs

3. Purposes of Collection, Use, and Disclosure

We process your personal data for the following legitimate purposes:

• To process order fulfillment, verify payments, issue tax invoices, and arrange product deliveries.
• To verify identity, handle customer inquiries, provide technical support, and offer after-sales service.
• To manage financial accounting, auditing, and comply with statutory tax obligations.
• To evaluate, maintain, and optimize Website usability, product offerings, and customer service experience.
• To prevent, detect, and mitigate fraud, unauthorized access, and security breaches.
• To satisfy legal mandates, judicial orders, or regulatory enforcement requests.

4. Legal Bases for Processing Personal Data

We process personal data pursuant to the lawful bases prescribed under the PDPA:

4.1 Contractual Necessity

• Necessary for the performance of a contract to which you are party (e.g., purchase and delivery) or to take pre-contractual steps at your request.

4.2 Legal Obligation

• Necessary for compliance with statutory obligations imposed on the Company (e.g., tax law, commercial accounting).

4.3 Legitimate Interests

• Necessary for the legitimate business interests of the Company or a third party, provided such interests do not override your fundamental data rights.

4.4 Consent

• Where explicitly required by law, we will obtain your prior consent before processing your personal data.

5. Disclosure and Sharing of Personal Data

We may disclose your personal data to trusted third-party service providers subject to strict confidentiality and security safeguards, including:

• Logistics, shipping, and courier service providers.
• Payment processing gateways and banking institutions.
• Information technology, web hosting, and cloud infrastructure service providers.
• Professional advisors, including accountants, auditors, and legal counsel.
• Government authorities, courts, or regulatory bodies where mandated by law.
• We do NOT sell, rent, trade, or commercialize your personal data to third parties for independent marketing purposes.

6. Cross-Border Data Transfers

Your personal data may be stored on cloud servers or processed by third-party vendor systems located outside Thailand. In such instances, the Company ensures that the receiving jurisdiction or entity provides adequate data protection standards consistent with the PDPA requirements.

7. Data Retention Period

Personal data is retained only for as long as necessary to fulfill the operational purposes described herein, or as required by applicable laws (e.g., tax and accounting retention rules mandating 5 to 10 years).

Upon expiration of the retention period, the data will be securely deleted, destroyed, or rendered permanently anonymized.

8. Information Security Measures

The Company implements robust physical, technical, and administrative security safeguards (such as SSL encryption, firewalls, and strict access controls) to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

9. Data Subject Rights

Under the PDPA, you possess statutory rights regarding your personal data:

• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
• Right to Access: Request access to and obtain a copy of your personal data held by us.
• Right to Rectification: Request correction of inaccurate, incomplete, or out-of-date personal data.
• Right to Erasure: Request deletion, destruction, or anonymization of your data under statutory conditions.
• Right to Restriction: Request restriction of data processing in specified circumstances.
• Right to Data Portability: Receive personal data in a structured, machine-readable format.
• Right to Object: Object to processing activities, including direct marketing and legitimate interest grounds.
• Right to Lodge a Complaint: File a complaint with the Personal Data Protection Committee if non-compliance occurs.

Requests will be evaluated and responded to within 30 days upon receipt of a valid request.

10. Cookies and Web Analytics

We utilize cookies and tracking technologies to optimize Website functionality, analyze user traffic, and enhance browsing experience. You can manage or disable cookie preferences via browser settings, though doing so may limit certain Website functions.

11. Third-Party Links and External Services

Our Website may contain links to external third-party sites or services. The Company is not responsible for the privacy practices, policies, or content of third parties. We encourage you to review their respective privacy notices.

12. Protection of Minors' Data

Our Website is not directed at minors, incapacitated, or quasi-incapacitated persons without legal parental or guardian consent. If we inadvertently collect data without proper authorization, we will take immediate steps to delete such data.

13. Amendments to Privacy Policy

We reserve the right to revise or update this Policy periodically to reflect legal, technical, or business updates. Revised policies will be published with an updated 'Effective Date'.

14. Contact Us

If you have any questions regarding this Privacy Policy, wish to exercise your data protection rights, or have concerns regarding the Company’s handling of personal data, please contact:

Knuckle Olive Co., Ltd.

Address: Warehouse 30, 48, 52-56 Trok Kaptan Bush (Charoen Krung 30), 

Charoen Krung Road, Bangrak Sub-district, Bangrak District, Bangkok 10500, Thailand

Telephone: +662 102 6413

Email: hello@knuckleolive.com