"The Hominians Co., Ltd., operating under the name www.taste-map.com (referred to collectively as "Taste-Map," "we," "us," or "our"), acknowledges the importance of the protection of your rights regarding information concerning any identified or identifiable natural person ("Personal Data") gathered through our products and services. We understand you concern about how your information is collected, used, disclosed and transferred outside of Thailand. The information you entrust to us empowers us to provide you with products and services that are custom-tailored to your needs, not only from us, but also those within The Hominians’ data ecosystem. We greatly value your trust in our responsible and thoughtful management of your personal information. We have trustworthy services to protect your Personal Data, ensuring that it is not utilized without your prior consent.
This privacy policy applies to our services, including the services available through our website at www.taste-map.com, our mobile, browser, and desktop applications, and other locations where we collect your Personal Data. However, please read this Privacy Policy in conjunction with the terms and conditions of particular service that you use, this may set out separately according to the Personal Data we collect from you.
We reserve the right to modify this Privacy Policy as needed, with or without prior notice. To ensure that you stay informed about any changes, we recommend reviewing this Privacy Policy each time you engage in a transaction with us. Significant updates will also be brought to your attention. If any modifications affect your rights concerning sensitive data governed by this Privacy Policy, we will seek your consent, unless permitted otherwise by law.
1) What Personal Data we collect
We may collect, maintain, and use the following types of information which may include your Personal Data, directly or indirectly, from you, other sources, or through our affiliates, subsidiaries, business partners or other companies. The specific type of Personal Data collected will depend on the communication and interaction with us, including the services or products you desire from us and companies in The Hominians’ data ecosystem.
From 1.1) to 1.12)
1.1) Personal details, such as title, full name, gender, age, blood type, nationality, date of birth, educational background, occupation, position, workplace, information on government-issued cards (e.g., national identification number, passport number, driver’s license details, government official identification card, or similar identifiers), photograph, CCTV records, vehicle details (e.g., copy of vehicle registration book, license plate number, brand, and color), and/or other physical characteristics;
1.2) Contact details, such as postal address, delivery details, billing address, telephone number, email address, LINE ID, and/or other ID from social networking sites;
1.3) Financial details, such as credit card information (e.g., name and number on the credit card), financial status, income and/or other financial related information
1.4) Transaction details, such as details about payment to and from you, payment date and time, purchased items, payment amount, branch that you received product or service, address/date and time for pick up or delivery, acknowledgement of receipt, receipt, invoices, transaction history, and/or transaction status;
1.5) Computer system, device and equipment details, such as User ID, PIN, type of device, geography location, operating system, network information of the mobile, computer traffic information, and/or information of the use of service on website and application (e.g., searching history, date, and time);
1.6) Behaviour details, such as information about your behavior, lifestyle, opinion, interaction and/or your location data in our building;
1.7) Membership details, such as membership number, membership password or username, purchasing behaviour, and/or other details of products and services you have purchased, filed complaints about, claimed, complimented, and suggested;
1.8) Marketing and communication details, such as your preference in receiving marketing from the Company, third parties, business partners and/or your communication preferences;
1.9) IT Management: For business management purpose including for IT operations, management of communication system, operation of IT security and IT security audit; internal business management for internal compliance requirements, policies, and procedures;
1.10) Profile details, such as your username and password, profile details and picture, purchases, historical orders, past orders, purchase history, items bought, item quantity, orders or product recalls made by you, orders via website, Cash On Delivery details, order ID, financial records, PIN, your interests, preferences, feedback and survey responses, satisfaction survey, social media engagement, participation details, loyalty programs, your use of discount codes and promotions, customer order description, customer service, attendance to trade exhibitions and events, trade exhibitions, litigation, testing and trials;
1.11) Usage details, such as information on how you browse or use our websites, platform, application products and services, products in customer's cart, wish list record, remind me flash sale record, follow-shop record, and timestamp of last click and Q&A record; and
1.12) Sensitive Data, such as race, religion, political opinions, fingerprints, facial recognition, person identity information (biometrics), face, information from the iris recognition, physical or mental health or condition, genetic data, medical history, disability and criminal records.
If you provide Personal Data of any third party to us (e.g., name, surname, address details, telephone number for emergency contact, family member income), please provide this Privacy Policy for their acknowledgement and/or obtaining consents where applicable.
We will only collect, use, and/or disclose sensitive data on the basis of your explicit consent or where permitted by law.
We only collect the information of children, quasi-incompetent persons, and incompetent persons where their parent or guardian has given their consent. We do not knowingly collect information from customers under the age of 20 without their parental consent when it is required, or from quasi-incompetent persons and incompetent persons without their legal guardian’s consent. In the event we learn that we have unintentionally collected personal information from anyone under the age of 20 without parental consent when it is required, or from quasi-incompetent persons and incompetent persons without their legal guardians, we will delete it immediately or collect, use and/or disclose only part that we can rely on other legal bases apart from consent.
2) Why we collect, use, and/or disclose your Personal Data
2.1) The purpose of which you have given your consent:
1) Marketing and Communications: To offer marketing communication, benefits, discounts, public relations, notifications, updates, promotions, exclusive deals, campaigns, events, marketing initiatives, advertising, direct marketing, and information regarding the Company's products and services, as well as those of our business partners, when we cannot rely on alternative legal grounds.
2) Data Analytics Businesses: To conduct data analytics businesses
2.2) The purposes we may rely on and other legal grounds for collection, use and/or disclosure of your Personal Data
We may also rely on a range of legal foundations for collecting, using, and disclosing your Personal Data. These include contractual grounds when we are initiating or fulfilling a contract with you, complying with legal obligations as required by law, pursuing our legitimate interests and those of third parties, ensuring vital interests are protected to prevent or address risks to an individual's life, body, or health, and fulfilling tasks in the public interest or exercising official authority, in accordance with other legal grounds permitted by applicable data protection laws. The specific basis we use depends on the context of our interactions with you.
3) To whom we may disclose or transfer your Personal Data
We might disclose your Personal Data with the subsequent third parties who handle Personal Data in alignment with the objectives outlined in this Privacy Policy. These third parties could be situated either within or outside Thailand. You can explore their privacy policies to gain a deeper understanding of how they gather, utilize, and release your Personal Data, as you are equally governed by their privacy policies.
3.1) The Hominians Co., Ltd.
As Taste-Map operates under The Hominians Co., Ltd., which provides various services, products, and systems to customers, including web-related services and systems, there may be instances where we need to disclose your Personal Data or grant access to it for the reasons outlined in this Privacy Policy. This enables our company to also utilize the consent obtained. Nevertheless, we will safeguard your information and disclose your Personal Data to ensure your benefit when receiving services from The Hominians Co., Ltd.
3.2) Our service providers
We may engage other firms, agents, or service providers to carry out tasks on behalf of the Company or to aid in delivering products and services to you. In such cases, we may provide your Personal Data to these service providers or external suppliers, which may include, but are not limited to (1) bank and financial institution; (2) logistic and courier service providers; (3) marketing, advertising media, and communications agencies; (4) event organizers; (5) telecommunications and communication service providers; (6) outsourced administrative service providers; (7) data storage and cloud service providers; (8) insurance company; (9) risk management service provider; (10) travel agencies; (11) building renovator; (12) gift card issuance service provider; and/or (13) internet, software, digital media, IT system service providers, and IT support company.
While rendering these services, the service providers may have the opportunity to access your Personal Data. Nonetheless, we will solely furnish our service providers with the essential Personal Data needed for them to execute their duties, and we request that they refrain from utilizing your information for any other objectives. We will confirm that the service providers we collaborate with adhere to the stipulations of data protection laws.
3.3) Our business partners
We might convey your Personal Data to our business associates. We could engage in partnerships with our business associates (e.g., vendors, rewards program collaborators, or credit card associates), with whom we may collectively present goods or services, or whose offerings may be extended to you.
3.4) Third party sites
We may have advertisements that direct you to external websites, mobile apps, social media platforms, or online communication channels. These external platforms may have their own terms of service and privacy policies, which may vary from our company's Privacy Policy and terms of use. We recommend that you personally review the terms of service and privacy policy of these external websites and platforms.
3.5) Third parties required by law
In certain circumstances, we may be required to disclose or share your Personal Data in order to comply with legal or regulatory obligations. This includes any law enforcement agency, court, regulator, government authority or other third parties where we believe it is necessary to comply with a legal or regulatory obligation, or otherwise to protect our rights, the rights of any third party or individuals’ personal safety, or to detect, prevent, or otherwise address fraud, security, or safety issues.
3.6) Professional advisors
This includes legal consultants, auditors or other consultants who assist in running our business, and the defending or bringing of any legal claims.
3.7) Assignee of rights and/or obligations
Third parties as our assignee, in the event of any reorganization, merger, business transfer, whether in whole or in part, will comply with this Privacy Policy to respect your Personal Data.
3.8) Other third parties
Third parties as our assignee, in the event of any reorganization, merger, business transfer, whether in whole or in part, sale, purchase, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock or similar transaction; will comply with this Privacy Policy to respect your Personal Data.
4. International transfers of your Personal Data
We may disclose or transfer your Personal Data to third parties or servers located overseas, which the destination countries may or may not have the same data protection standards. We take steps and measures to ensure that your Personal Data is securely transferred and that the receiving parties have in place suitable data protection standards or other derogations as allowed by laws. We will request your consent where consent to cross-border transfer is required by law.
5. How long do we keep your Personal Data
We shall retain your Personal Data for as long as is reasonably necessary to fulfil the purpose for which we obtained it, and to comply with our legal and regulatory obligations. However, we may have to retain your Personal Data for a longer duration, as required by applicable law.
6. Cookies and cache file and how they are used
When you browse our websites, we employ cookies or similar tracking technologies to monitor, gather, and store specific Personal Data. Regarding our applications, cookies initiate tracking upon your login, enabling them to remember your credentials and keep you logged in, unless you manually log out. It's important to note that we don't have direct control over cookies, and we don't actively collect information from or access them.
We utilize cached data to store your information. If you access our websites from different devices, your data may be retained and recorded as a cache file, and in some instances, a portion of your data might be duplicated on your computer or mobile device for future use. It's important to note that we lack control over the data stored in the cache file or its access.
7. Your rights as a data subject
Subject to applicable laws and exceptions thereof, you may have the following rights to:
7.1) Access: You may have the right to access or request a copy of the Personal Data we are collecting, using or disclosing about you. For your own privacy and security, we may require you to prove your identity before providing the requested information to you.
7.2) Rectification: You may have the right to have incomplete, inaccurate, misleading, or or not up-to-date Personal Data that we collect, use or disclose about you rectified.
7.3) Data Portability: You may have the right to obtain Personal Data we hold about you, in a structured, electronic format, and to send or transfer such data to another data controller, where this is (a) Personal Data which you have provided to us, and (b) in the case where we are collecting, using or disclosing such data on the basis of your consent or to perform a contract with you.
7.4) Objection: You may have the right to object to certain collection, use or disclosure of your Personal Data such as objecting to direct marketing.
7.5) Restriction: You may have the right to restrict the use of your Personal Data in certain circumstances.
7.6) Withdraw Consent: For the purposes you have consented to our collecting, using or disclosing of your Personal Data, you have the right to withdraw your consent at any time.
7.7) Deletion: You may have the right to request that we delete or de-identity Personal Data that we collect, use or disclose about you, except we are not obligated to do so if we need to retain such data in order to comply with a legal obligation or to establish, exercise, or defend legal claims.
7.8) Lodge a complaint: You may have the right to lodge a complaint to the competent authority where you believe our collection, use or disclosure of your Personal Data is unlawful or noncompliant with applicable data protection law.
8. Security of your Personal Data
The Company acknowledges the significance of safeguarding your Personal Data's security. To this end, the Company is committed to safeguarding your information by implementing security measures for your Personal Data in a suitable manner and in line with the confidentiality protections for Personal Data. These measures are designed to prevent loss, unauthorized or unlawful access, destruction, use, alteration, correction, or disclosure of your data. It's worth noting that the Company ensures that the processes involved in collecting, storing, and processing your Personal Data, including physical security measures, adhere to the Company's information technology security policies and guidelines.
9. Our Contact Details
If you wish to contact us to assert your rights regarding your Personal Data or if you have any inquiries regarding your Personal Data in accordance with this Privacy Policy, please reach out to us or our Data Protection Officer at:
● The Hominians Co., Ltd.
● 102 Yasoob 1 Alley, Vibhavadi Rangsit Road, Chom Phon Sub District, Chatuchak District, Bangkok 10900
● Contact Number: 095-480-1010
● E-mail: neeranutp@taste-map.com