Privacy Policy
PRIVACY POLICY: POLICIES AND PROCEDURES
Interpretation and Definitions
- You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
- Company (referred to as either “the Company”, “We”, “Us” or “Our” in this Agreement) refers to ARRK (MALAYSIA) SDN BHD, Kuala Lumpur, Malaysia. Block E-10-01, Oasis Ara Damansara, Jalan PJU 1A/7, Ara Damansara, 47301 Petaling Jaya, Selangor.
- Affiliate means an entity that controls, is controlled by or is under common control with a party, where “control” means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
- Account means a unique account created for You to access our Service or parts of our Service.
- Website refers to ARRK (MALAYSIA) SDN BHD, accessible from asia.arrk.com
- Service refers to the Website.
- Country refers to: Kuala Lumpur, Malaysia
- Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used.
- Third-party Social Media Service refers to any website or any social network website through which a User can log in or create an account to use the Service.
- Personal Data is any information that relates to an identified or identifiable individual.
- Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.
- Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.
- Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
- Do Not Track (DNT) is a concept that has been promoted by US regulatory authorities, in particular the U.S. Federal Trade Commission (FTC), for the Internet industry to develop and implement a mechanism for allowing internet users to control the tracking of their online activities across websites.
- Business, for the purpose of the CCPA (California Consumer Privacy Act), refers to the Company as the legal entity that collects Consumers’ personal information and determines the purposes and means of the processing of Consumers’ personal information, or on behalf of which such information is collected and that alone, or jointly with others, determines the purposes and means of the processing of consumers’ personal information, that does business in the State of California.
- Consumer, for the purpose of the CCPA (California Consumer Privacy Act), means a natural person who is a California resident. A resident, as defined in the law, includes (1) every individual who is in the USA for other than a temporary or transitory purpose, and (2) every individual who is domiciled in the USA who is outside the USA for a temporary or transitory purpose.
- Sale, for the purpose of the CCPA (California Consumer Privacy Act), means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a Consumer’s Personal information to another business or a third party for monetary or other valuable consideration.
Collecting and Using Your Personal Data
Types of Data Collected
- Email address
- First name and last name
- Phone number
- Address, State, Province, ZIP/Postal code, City
- Usage Data
Cookies can be “Persistent” or “Session” Cookies. Persistent Cookies remain on your personal computer or mobile device when You go offline, while Session Cookies are deleted as soon as You close your web browser. Learn more about cookies: All About Cookies.
Use of your Personal Data
- To provide and maintain our Service, including to monitor the usage of our Service.
- To manage Your Account: to manage Your registration as a user of the Service. The Personal Data You provide can give You access to different functionalities of the Service that are available to You as a registered user.
- For the performance of a contract: the development, compliance and undertaking of the purchase contract for the products, items or services You have purchased or of any other contract with Us through the Service.
- To contact You: To contact You by email, telephone calls, SMS, or other equivalent forms of electronic communication, such as a mobile application’s push notifications regarding updates or informative communications related to the functionalities, products or contracted services, including the security updates, when necessary or reasonable for their implementation.
- To provide You with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless You have opted not to receive such information.
- To manage Your requests: To attend and manage Your requests to Us.
- With Service Providers: We may share Your personal information with Service Providers to monitor and analyze the use of our Service, to show advertisements to You to help support and maintain Our Service, to contact You.
- For Business transfers: We may share or transfer Your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of our business to another company.
- With Affiliates: We may share Your information with Our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include Our parent company and any other subsidiaries, joint venture partners or other companies that We control or that are under common control with Us.
- With Business partners: We may share Your information with Our business partners to offer You certain products, services or promotions.
- With other users: when You share personal information or otherwise interact in the public areas with other users, such information may be viewed by all users and may be publicly distributed outside. If You interact with other users or register through a Third-Party Social Media Service, Your contacts on the Third-Party Social Media Service may see Your name, profile, pictures and description of Your activity. Similarly, other users will be able to view descriptions of Your activity, communicate with You and view Your profile.
Retention of Your Personal Data
Transfer of Your Personal Data
Disclosure of Your Personal Data
The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:
- Comply with a legal obligation
- Protect and defend the rights or property of the Company
- Prevent or investigate possible wrongdoing in connection with the Service
- Protect the personal safety of Users of the Service or the public
- Protect against legal liability
Security of Your Personal Data
Detailed Information on the Processing of Your Personal Data
Analytics
Advertising
You may opt out of the use of the DoubleClick Cookie for interest-based advertising by visiting the Google Ads Settings web page: https://adssettings.google.com/authenticated?hl=en
Email Marketing
MailChimp
CCPA Privacy
Your Rights under the CCPA
- The right to notice. You must be properly notified which categories of Personal Data are being collected and the purposes for which the Personal Data is being used.
- The right to access / the right to request. The CCPA permits You to request and obtain from the Company information regarding the disclosure of Your Personal Data that has been collected in the past 12 months by the Company or its subsidiaries to a third-party for the third party’s direct marketing purposes.
- The right to say no to the sale of Personal Data. You also have the right to ask the Company not to sell Your Personal Data to third parties. You can submit such a request by visiting our “Do Not Sell My Personal Information” section or web page.
- The right to know about Your Personal Data. You have the right to request and obtain from the Company information regarding the disclosure of the following:
- The categories of Personal Data collected
- The sources from which the Personal Data was collected
- The business or commercial purpose for collecting or selling the Personal Data
- Categories of third parties with whom We share Personal Data
- The specific pieces of Personal Data we collected about You
- The right to delete Personal Data. You also have the right to request the deletion of Your Personal Data that have been collected in the past 12 months.
- The right not to be discriminated against. You have the right not to be discriminated against for exercising any of Your Consumer’s rights, including by:
- Denying goods or services to You
- Charging different prices or rates for goods or services, including the use of discounts or other benefits or imposing penalties
- Providing a different level or quality of goods or services to You
- Suggesting that You will receive a different price or rate for goods or services or a different level or quality of goods or services.
Exercising Your CCPA Data Protection Rights
Do Not Sell My Personal Information
Website
- From Our “Cookie Consent” notice banner
- Or from Our “CCPA Opt-out” notice banner
"Do Not Track" Policy as Required by California Online Privacy Protection Act (CalOPPA)
Your California Privacy Rights (California's Shine the Light law)
California Privacy Rights for Minor Users (California Business and Professions Code Section 22581)
Links to Other Websites
Changes to this Privacy Policy
Contact Us
- By email: [email protected]
Privacy Notice for Customers and Third Parties of ARRK CORPORATION (THAILAND) LIMITED
Last updated: May 06, 2025
As ARRK CORPORATION (THAILAND) LIMITED, affiliated companies, group companies, assignees, subrogates, and/or any persons authorized to act on their behalf (“Company” or “We”) would like to announce this privacy notice for customers and third parties (“Notice”) in order to establish and indicate the Company’s personal data management procedure.
This Notice shall apply to the Company’s provision of services, products, and all business operations in whatever manner [including those proposed via website, webpage, applications, and other electronic media]. In addition, this Notice shall apply to all natural persons who are the customers, suppliers, product/service vendors, [website visitors/users], authorized persons, directors, representatives, employees, personnel, and persons assigned by such persons, as well as any other related persons who are the third parties (not internal employees or personnel of the Company) who contact, have any transactions, or perform any actions with the Company for their business operations (“Data Subject” or “you”).
In operating the business, the Company may collect, use, disclose, and/or transfer your Personal Data for purposes in accordance with terms and conditions set forth herein, and this Notice shall be applied and construed together with any other announcements, terms and conditions, and requirements which have been stipulated or shall be stipulated by the Company in the future, as well as any other agreements and documents made between you and the Company. The Company shall adhere to and comply with this Notice strictly and prudently. This Notice may be altered and revised from time to time as necessary or appropriate to ensure that it is relevant to all related laws and the Company’s business operation.
Personal Data
“Personal Data” means any information relating to a natural person, which enables the identification of such person, whether directly or indirectly, but not including the information of the deceased person in particular.
Personal Data which may be collected, used, and/or disclosed by us
The Company may collect, use, and/or disclose your Personal Data pursuant to the following categories:
Personal Data and Contact Information
The Company may collect, use and/or disclose your Personal Data including, among others, first name, last name, title, marital status, gender, date of birth, age, nationality, photo, identification number, copy of identification card, passport, driving license, any other personal documents with photos, copies of house registration, evidence of residence, workplace, telephone number, e-mail address, etc.
Transaction Data
In case that you make any transaction with the Company, we may collect, use and/or disclose your Personal Data, which includes the history of goods/service purchase, payment information (e.g., bank account number, tax identification number, electronic payments details, transaction number, etc.) and other information collected to verify your identity [(e.g., name and password of the website user, questions to safeguard the security of a user account, etc.)].
Computer Data and Technical Data
The Company may collect, use and/or disclose your Personal Data, which also includes your specific number, which may verify your identity directly or indirectly whenever you use the Company’s website, webpage, and applications, e.g., account name, Internet Protocol Address, MAC Address, SSID, any other specific name and number, which may include other technical information such as usage history, web browser setting, search history, cookies, etc.
Demographic Data and Interest
Based on your consent, the Company may collect, use and/or disclose your Personal Data, which also includes data pertaining to preference and interest in goods and services, demographic data, online social media data, language and settings on electronic devices, websites, webpages, applications, satisfaction, and opinions, etc.
Sensitive Personal Data
The Sensitive Personal Data includes the Personal Data pertaining to racial, ethnic, political opinions, cult, religious or philosophical beliefs, sexual orientation, criminal records, health information, disability, labor union information, genetic information, biometrics information, or any other information which may affect the data subject in the same manner. The Company shall collect, use and/or disclose such data as necessary and permitted by law or upon your explicit consent only.
Personal Data of Minors and Incompetent Persons
The Company has no policy or intention to collect, use and/or disclose any information pertaining to minors or incompetent persons. If you are the minor or incompetent person who must enter into an agreement with the Company, contact the Company via any channels, or provide your Personal Data to the Company, the consent from your guardian or any person with power and duties permitted by law is needed.
Personal Data of other persons
In case that you provide other person’s information to the Company, before providing it to the Company, you are obliged to inform such person of the Company’s collection, use and/or disclosure of information under this Notice, which must obtain his/her consent already only, except cases exempted by related laws.
Sources of Personal Data
The Company may obtain the Personal Data mentioned above from the sources as listed below:
- The Company may obtain the Personal Data from you directly during or from your use of the Company’s services to purchase some goods, or contact with the Company via any channels, either verbally or in writing, e-mail, and other electronic media, etc. [In addition to the data you provide to the Company by yourself, we may also obtain your Personal Data by automatically when you visit the Company’ website, webpage, and applications].
- The Company may obtain your Personal Data from: (1) your employer or the company you have worked for; or (2) third parties who obtain your consent to disclose your Personal Data to the Company, e.g., state agencies, Company’s suppliers, service providers, etc. In this regard, the Company shall collect your Personal Data in accordance with your consent or when permitted by any related laws.
Purposes for the collection, use and disclosure of Personal Data
It is necessary for the Company to collect, use and/or disclose your Personal Data for the following purposes. If the Company is unable to collect, use and/or disclose your Personal Data by whatever reason; this may take effect to the sales and purchase, provision of service, communications, and facilitation to you, your employer or the company you have worked for. However, the Company may collect, use and/or disclose your Personal Data for other purposes other than those specified in this Notice whereas the Company shall inform you before the collection, use and/or disclosure of such Personal Data.
- For the Company’s business operation and performance of contractual duties
The Company may collect, use and/or disclose your Personal Data to enable to perform the contractual duties, to sell goods, and to provide services to you and/or the company you have worked for. For example, the Company may collect your Personal Data to process the purchase orders and payments, issuance of purchase orders, invoices, and other documents in order to support you after sales of goods/provision of services such as acceptance of comments, requests, and inquiries, etc. - For the Company’s performance of duties required by law
The Company may collect, use and/or disclose your Personal Data for compliance with all related laws, e.g., tax law, anti-money laundering law, computer-based crime, etc. together with other legitimate orders issued by competent officers. - For necessary cases for legitimate interest
The Company may collect, use and/or disclose your Personal Data for legitimate interest of the Company and other persons as long as there is reasonable cause and permitted by related laws; for example, for prevention of crime, fraud and deception, authentication, security safeguard in the network system, internal audit, etc. - For goods and service development and marketing purposes
The Company may collect, use and/or disclose your Personal Data for purposes of sales of goods, provision of services and marketing, sales promotion, public relations, goods/service development, special offers, etc., which may also include the sales and marketing promotion from any other affiliated companies, group companies and suppliers of the Company, where your consent is needed.The collection, use and/or disclosure of your Personal Data for the aforesaid purposes require your consent and you are entitled to withdraw it. However, please be advised that the withdrawal of your consent may take effect to the provision of services, communications, facilitation, and provision of better services/products to you or the company you have worked for.
- For transfer or disclosure to third parties
The Company may collect, use and/or disclose your Personal Data to the companies in the group companies, affiliated companies, parent company, suppliers and/or any third parties determined by the Company, which also include some providers of the service necessary for the Company’s business operation or the Company deems appropriate for your interest.However, the collection, use and/or disclosure of your Personal Data for the aforesaid purposes must obtain your consent and you are entitled to withdraw it. Please be advised that the withdrawal of your consent may take effect to the provision of services, communications, facilitation, and provision of better services/products to you or the company you have worked for.
- For other purposes
The Company may collect, use and/or disclose your Personal Data: (1) for prevention or suppression of dangers to lives, bodies or health of persons; (2) as necessary for performance of duties in conducting tasks for public interest by the Company or for performance of duties in using the state power assigned to the Company; and/or (3) for any other purposes permitted by any related laws.
Retention, Sharing and Transfer of Personal Data
The Company shall retain your Personal Data under appropriate security measures, by technical and organizational measures, to prevent data leakage or loss or damage. To ensure such data security, the Company shall establish appropriate policy and rules and regulations pertaining to data retention while the related personnel shall be trained to prevent an unauthorized access, use, and/or disclosure of information. Such policy, rules and regulations shall be revised and altered from time to time as appropriate and necessary.
In case of obtaining your consent or being permitted by any related laws, the Company may share and/or transfer your Personal Data to other third parties in Thailand and/or overseas, who have contractual duties to the Company in securing your Personal Data, and in collecting, using and/or disclosing your Personal Data in accordance with your consent, this Notice, or permission by any related laws. The third parties shall include the group companies, affiliated companies, parent company, service providers, hirers (such as service provider in an electronic data collection space, market research service providers, personal data processor, auditor, etc.), companies relating to the Company in the merger and acquisition or acquisition of shares, assets or business, etc.) as well as the directors, employees, sub-contractors, authorized persons, and representatives of such persons.
If necessary, the Company may share, transfer and/or process your Personal Data to overseas. For example, the Company may transfer your Personal Data to any group company or parent company or to a data retention service provider overseas. In case that destination country has inadequate personal data security standards, the Company shall ensure that the data receiver has measures and methods to secure your Personal Data adequately, which may include entering into the confidentiality agreement, binding by organizational rules and regulations, organizational policy regarding personal data security safeguard, and any other documents as required by law.
Personal Data Retention Period
Normally, the Company shall retain your Personal Data only for a necessary period that the Company must: (1) comply with the contractual duties between you and the Company; and (2) attain any other purposes as specified in this Notice or any other period required or permitted by law. However, after the end of the contract, relationship or contact between you and the Company, your Personal Data shall be retained for another 10 years thereafter.
Rights as a Data Subject
As the data subject, you shall have the following rights as stipulated by law:
- You may withdraw your consent given to the Company under this Notice anytime. However, such withdrawal of consent shall take effect to the limited service to be received from the Company.
- You may access your Personal Data, or request for a copy of your Personal Data that the Company have collected and retained.
- You may request the Company to update your Personal Data to be present, accurate or complete.
- You may request the Company to delete your Personal Data in certain cases; for example, when it is unnecessary to collect your Personal Data or unlawful to process your Personal Data, etc.
- You may request the Company to restrict the use of your Personal Data.
- You may request for the transfer of your Personal Data from the Company to any other companies as designated by you.
- You may object to the collection, processing and/or disclosure of your Personal Data for any purposes.
- You may file your petition to the Personal Data Protection Commission when you consider that the Company do not comply with the Personal Data Protection Act, B.E. 2562.
To exercise your rights mentioned above, you may contact the Company either in writing or verbally, pursuant to contact details specified in this Notice. However, please be advised that such exercise of rights must conform to all related laws. The Company shall proceed with your request within an appropriate duration. But, in some cases, the Company may deny proceeding with your request; for example, in case of violating rights of other persons, etc. which the Company shall further inform you the reason of our rejection to your request.
Cookie
Cookie is a small piece of data showing the history of visiting the website and download when you visit it. In general, a website will use cookies to monitor and remember website users’ movements.
The Company may use cookies to collect your behaviors, preference, personal setting, and customization to enhance efficiency of the Company’s website, webpage, and applications to ensure that they are able to fulfill your demands, and to present various advertising media and services, and to improve our security system.
The Company has used several types of cookies, including the following ones, that you may disable or restrict the use of each cookie type in your web browser. However, if you reject these cookies, you may have some limitations in using or experiencing the use of services provided by the Company.
- Strictly necessary cookies to enable the Company’s website to function regularly, and to enable you to visit/use the website.
- Functional cookies to remember your data, e.g., personal setting, language, and other settings when you visit/use the website.
- Advertising cookies to record your behavior and history of using the website in order that the Company can present the goods, services and advertising relevantly to your demand.
- Analytical cookies to compile all information to help indicate and monitor your behavior in using the website for further improving the website functioning.
Policy of Third Parties
In case that you visit any website, webpage or applications of the third parties, you are under the application of the personal data protection policy of the third-party, which is independent from this Notice.
Effective Date and Changes of the Policy
This Notice shall come into effect from the date of June 1,2022 onward.
The Company may alter, change, add or cancel this Policy, either in whole or in a part, by the Company’s sole discretion without any prior notice to you whereas you shall be informed of the Company’s newly updated policy. In case that you continue receiving the Company’s service after such alteration and changes, it shall be deemed that you have been aware of such new notice already.
Contact with the Company
| Name | ARRK Corporation (Thailand) Ltd. |
| Address | Bangkadi Industrial Park,147 Moo5, Tiwanon Road, Tambol Bangkadi, Amphur Muang, Pathumtani 12000 Thailand |
| Name | Personal Data Protection Officer |
| Address | ARRK Corporation (Thailand) Ltd. Bangkadi Industrial Park,147 Moo5, Tiwanon Road, Tambol Bangkadi, Amphur Muang, Pathumtani 12000 Thailand |
| E-mail address | [email protected] |
