PRIVACY POLICY

Privacy Policy

Your privacy is important to us. This privacy policy describes the online information practices which we KARRAT Luxury Group Co.,Ltd (‘we’, ‘our’) employ in relation to the information which you, our customers (‘you’, ‘your’), provide when using the www.karrat.co.th site (‘Website’).

It is important that you read this privacy policy together with any other notice which we may provide you on specific occasions when we are collecting or processing your personal information, so that you are fully aware of how and why we are using your information, and the legal rights that you have.

The Information we Collect

As part of you using our Website and during the course of us providing products and/or services to you, we may collect, use, store and transfer the following types of information about you:
 
●  Identity information including your first name, last name, marital status, title and gender.
●  Contact information including your address, e-mail address and telephone numbers.
●  Financial information including bank details and credit/ debit card information.
●  Technical information including your IP address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and other technology on the devices you use to access our website.
●  Profile information including your username and password.
●  Communications information including your correspondence with us and any feedback that you provide us with.

How and when do we collect your personal information?

We collect the majority of the personal information that we process about you directly from you when you provide this information to us by:
 
●  registering on the Website for an online account or otherwise contact us to obtain information relating to us or our products and/or services;
●  placing orders on the Website;
●  updating the ‘Your Online Account’, ‘Your Address Book’ or ‘Your Order Details’ section of the Website; and
●  communicating with us by phone, e-mail or otherwise, or when you complete a questionnaire or competition entry form
●  subscribing to our e-newsletter
 
We may also collect technical information when you access and interact with the Website (see the section below on “How do we use cookies?”).
 
We do not collect data from people under the age of 16 and we will delete such data if we are informed we hold it.

Information from other sources

We may also receive personal information about you from various third parties that we engage in order to assist us with providing products and/or services to you, including:
 
●  delivery and address information from our carriers who deliver products to you;
●  marketing information from marketing companies who send customer communications and direct marketing materials on our behalf;
●  data analytics information from companies that provide us with data analytics services; and
●  information on your account, payment and credit history, including information from credit bureaus and sources we use to process payments.
 
If we request that you do so and you fail to provide information to us, we may be prevented from exercising our rights and obligation and, in particular, we may be prevented from providing the products and/or services that you have asked us to provide. For example, if you fail to provide us with your full address details, it may not be possible for us to fulfil your delivery, or if you fail to provide us with your payment details then we will not be able to process payments for our products and cannot therefore supply them to you.

How we use your personal information

We use your personal information for the following purposes:
 
●  to register you as a new customer;
●  to respond to your enquiries and complaints, and to manage our relationship with you;
●  to handle orders, deliver items and process payments;
●  to communicate with you about updates, orders, products, services and promotional offers;
●  to update our records and maintain any online account you may have with us;
●  to administer and protect our business and this site, including to prevent or detect fraud or abuses of our Website;
●  for market research, reporting, analysis and modelling so as to improve the products and services we provide and to optimise our social media operations;
●  to comply with our financial record keeping obligations;
●  to use data analytics to improve our website, products, services and user experiences; and
●  to enable third parties to carry out technical, logistical or other functions on our behalf.
 
By law, when processing your personal information we are required to have a ‘legal basis’ to do so. A legal basis is essentially a legal justification for processing your personal information. The legal basis we use to process your personal information will generally be one or more of the following:
 
●  to enable us to perform the contracts that we have with you to supply you with products and/or services;
●  where it is necessary for our legitimate interests in administering and managing our relationship with you, providing you with products and/or services, and running our business lawfully and effectively; or
●  to enable us to comply with a legal or regulatory obligation.
 
Sometimes we may ask for your consent to use your information for particular purposes (e.g. to send you marketing communications). Where we do so, this consent will be our legal basis for our use of the information. You can withdraw your consent at any time and we will then stop processing your information for that purpose. If you wish to withdraw your consent, then please contact us using the details at the end of this notice.
 
For more information on the specific legal basis we are relying on in relation to any of the individual processing activities we have highlighted above, please contact us using the contact details at the end of this notice.

How do we use your personal information for marketing purposes?

If you are an existing customer or you have consented to receiving marketing communications by [email, web or text] we may send you information on any offers, events or news about our products and/or services that we believe may be of interest to you. Please note, if you do not choose to receive this information, we will be unable to keep you informed of any offers, events or news regarding our products and services.
 
We may also send you information on any offers, events or news about our products and/or services that we believe may be of interest to you by post.
 
If you agree to us doing so, we may also use Google Customer Match. This service matches a list of email addresses we hold to users signed in with Google in order to allow the display of personalised advertising on your internet browser.
 
You can ask us to stop sending you marketing messages (whether by email, web, text or post) or using Google Customer Match at any time by sending a request to karratofficial@gmail.com

Automated decision-making

We want to ensure you enjoy the best experience of all KARRAT’s has to offer, whether it be the shopping experience you have on our website or through our communications with you. We believe sharing timely and relevant information with you, provides a more tailored, and so better, experience. We achieve this by combining all the data we have about you; how you’ve previously used our website, the products you’ve purchased and how you’ve responded to our direct communications. This enables us to showcase to you a more relevant set of products on our website & share news of the most relevant products, offers and events. The data privacy law allows this as part of our legitimate interest in understanding our customers and our promise to provide the highest levels of service.
 
If you wish to change how we use your data, please contact us using the contact details at the end of this notice. Please note that if you choose not to share your personal details with us, or refuse certain contact permissions, we might not be able to provide some of the services you’ve asked for.

When do we share your personal information?

We only share your personal information with our other offices, our agents or third parties where necessary so that they can assist us in providing products and/or services to you.
 
Where we share your personal information with third parties who process your information on our behalf, they will only process your information on our instructions and we will remain responsible for ensuring that it is protected and processed lawfully.
 
Where we share your personal information with third parties who process it for their own purposes (such as government bodies), those third parties will have their own legal obligations to protect your information and you will have legal rights that you can enforce directly against them.
 
In particular, we may share your personal information with third parties for the following purposes:
●  we may need to share your personal information to other companies who we engage to perform functions on our behalf including; fulfilling orders, delivering packages, sending customer communications, analysing data, processing payments and providing customer services. They will have access to personal information needed to perform their functions, but may not use it for other purposes
●  if we sell, transfer or merge parts of our business or our assets, or seek to acquire another business or merge with them, we may share your personal information with the other party to the transaction;
●  where it is necessary to prevent fraud or reduce credit risk, we may share your personal information with other companies and organisations; and
●  where requested or if we consider that it is reasonably required, we may share your personal information with government bodies, regulatory bodies or law enforcement organisations so that they can carry out their legal functions.
 
In some circumstances, you will receive notice before we share your personal information with third parties and you will have the opportunity to choose not to share your information.If you would like further information about the third parties with whom we share your personal information then please contact us on the details at the end of this notice.

International transfers

In some instances, we (or the third parties that we share your personal information with) may transfer, process, hold or allow access to your personal information outside the European Economic Area (“EEA”). Where this occurs, we will put adequate safeguards in place to ensure that your personal information is protected in a manner that is consistent with how it would be protected under EU data protection laws.
 
In most cases, the safeguards that we put in place will be either:
●  a decision by the European Commission that the country to which the data is being transferred provides an adequate level or protection; or
●  we will put in place a contract with the recipient of your personal information which contains the model clauses that have been approved by the European Commission.
 
If you would like further details in relation to the countries to which your personal information is currently transferred, and the safeguards that are in place in relation to the transfer, then please contact us on the details at the end of this notice.

Collection of Information by Third-Party Sites

Our Website may contain links to other websites whose information practices may be different to ours. You should consult the privacy notices of those third party sites as we have no control over information that is submitted to, collected, or processed by them.

How do we use cookies?

A cookie is a text-only string of information that a website transfers to the cookie file of the browser on your computer’s hard disk so that the website can remember who you are. A cookie will typically contain the name of the domain from which the cookie has come, the ‘lifetime’ of the cookie, and a value, usually a randomly generated unique number. When you visit our Website we send you a cookie.
 
Cookies may be used in the following ways:

The cookies we use are set out in the table below.

Purpose

Supplier

Expiration

Cookie

Analytics

 

 

 

This cookie name is associated with Google Universal Analytics – which is a significant update to Google’s more commonly used analytics service. By default it is set to expire after 2 years, although this is customisable by website owners.

Google Analytics

1 day

_gid

This cookie name is associated with Google Universal Analytics – which is a significant update to Google’s more commonly used analytics service. By default it is set to expire after 2 years, although this is customisable by website owners.

Google Analytics

2 years

_ga

Performance

 

 

 

The ‘__cfduid’ cookie is set by the CloudFlare service to identify trusted web traffic. It does not correspond to any user id in the web application, nor does the cookie store any personally identifiable information. More information here.

CloudFlare

5 years

__cfduid

The Facebook pixel collects cookie data for targeting and measurement for Facebook and Instagram marketing activity.

Facebook

3 months

_fbp

Google Marketing Platform cookies are used for conversion tracking, audience profiling and retargeting. More information can be found here. https://policies.google.com/technologies/types?hl=en-US

Google Marketing Platform

Session

XSRF-TOKEN

Session

S

7 Days

.DDMMUI-PROFILE

13 Days

DSID

End Of Month

1P_JAR

6 Months

SEARCH_SAMESITE

7 Months

NID

1 Year

ANID

1 year

IDE

1 year

SIDCC

1 year

__Secure-3PSIDCC

2 Years

SID

2 Years

__Secure-3PSID

2 Years

HSID

2 Years

SSID

2 Years

APISID

2 Years

SAPISID

2 Years

__Secure-3PAPISID

3 years

permutive-id

38 Years

CONSENT

Criteo cookies are used to for conversion tracking, audience profiling and retargeting. More information can be found here.https://ailab.criteo.com/cookie-declaration/

Criteo

Session

_hjTLDTest

Session

amplitude_idun definedcriteo.com

7 Days

intercom-session-bx9cew01

1 Year

_hjid

1 Year

uid

1 Year

.criteo.com

1 Year

ajs_anonymous_id

1 Year

ajs_user_id

20 Years

amplitude_id_b37 a423901694056906 133c8c13c895d criteo.com

AWIN 1st or 2nd party cookies are set when you click on an affiliate link. AWIN store IDs for the referring website, advertisement on which was clicked, group of advertisement as to which the advertisement belongs, time it was clicked on, ID for the type of advertisement, ID for the product and any reference the referring site adds to the click.

Affiliate Window

30 days

1st: _aw_m_5682

2nd: Aw5682

From a partner’s site, when a user clicks on an ad/banner, the user is then directed to the Impact tracking server which drops this cookie behind the scene. This cookie stores a unique UUID key so that next time when the user hits the tracking servers, it gives the identity info of the same user.

Impact Radius

2 years

BRSWR

Impact radius tracking is set on advertisers page and drops cookies when the user clicks on banner/ad. These are first party cookie’s which are set on advertisers domain. This part of UTT javascript functions and works based on unique identifier UUID keys.

Value : new Date().getTime().toString() + ‘-‘ + Math.random().toString(36).substring(2, 15)

Impact Radius

2 years

IR_PI

The Last click cookie which is used to eliminate the duplicate clicks during checkout/conversion.

Impact Radius

180 days

IRLD

Impact Radius tracking application primarily lives on AWS cloud. The tracking servers in our private datacenters and interact with clients and relay data to the tracking servers in our private data centers for further processing. This AWSELB is the load balancer cookie for AWS

Impact Radius

Expires when the session ends

AWSELB

This is base domain cookie, set on host site. This is under the part of UTT tracking of web events.

Impact Radius

Expires when the session ends

IR_GBD

This is a current session cookie, The activity is updated everytime the page loads. This is as part of UTT API implementation for tracking web events.

Value : last_activity_timestamp|source id|session_id

Impact Radius

Expires when the session ends

IR_(Campaign_ID)

This is a session cookie generated by the load balancer, we have tracking servers in Amazon EC2. The cookie may vary depending on the type of data center (Impact’s Data centers) F5

Impact Radius

Expires when the session ends

EPERSIST

This cookie is used to control action tracker test flow. Testing the integration works

Impact Radius

Expires either at end of session OR once the test is complete

IRBCN

A session cookie (apptus.sessionKey) is used to track a visitor’s browsing experience throughout their journey in terms of search, navigation (product lists) and recommendation products

Apptus

Expires when the session ends

apptus.sessionKey

Used to distinguish visitors, track a visitor across sessions, and also to potentially provide a personalised browsing experience  in terms of search, navigation (product lists) and recommendation products

Apptus

1 Year

apptus.customerKey

You can accept or decline ‘cookies’ by modifying the setting in your browser. Please note that if you disable ‘cookies’ you may not be able to use all the features of our Website.