Running Object
Privacy Policy
At Running Object, your privacy matters. This Policy explains how we collect, use, disclose, and protect your personal data in accordance with Thailand’s Personal Data Protection Act B.E. 2562 (2019) ("PDPA").
1. Data Controller
Teens Eyes Style Co., Ltd. (Tax ID 0-1255-57018-20-3), 150/87 Setthasiri Village, Prachachuen Road, Bang Khen, Mueang Nonthaburi, Nonthaburi 11000, Thailand (Head Office), owner of the Running Object brand ("we", "us"), is the data controller under Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA") for personal data collected through the Running Object website and services. For any privacy matter, contact runningobjectofficial@gmail.com or call +66-81-921-8895
2. Information We Collect
Personal Information
Name, email address, phone number, and shipping address provided when creating an account, placing an order, or contacting us.
Payment Information
We do not store credit or debit card details directly. All transactions are processed through Omise, a PCI-DSS certified secure payment provider.
Usage Data
IP address, browser type, pages visited, and session duration — collected for security and to improve your experience.
Cookies
See Section 5 below. You can manage your consent at any time via the "Cookie Settings" control.
3. Purposes & Legal Bases
Contract Performance
Processing orders, delivery, order updates, account management, and after-sales support — necessary to fulfil our sales contract with you.
Consent
Marketing communications and analytics/marketing cookies — only with your explicit consent, which you may withdraw at any time without affecting core services.
Legitimate Interest
Securing our systems, preventing fraud, and improving our services.
Legal Obligation
Retaining accounting and tax records, and complying with lawful orders of competent authorities.
4. Information Sharing
Logistics Partners
We share your name, address, and phone number with courier services solely to deliver your order.
Payment Processors
Omise processes your transaction data in accordance with their own privacy policy and is certified to PCI-DSS international standards.
Service Providers
Infrastructure providers (such as hosting and database services) bound by data processing obligations.
We Do Not Sell Data
Running Object has never and will never sell, rent, or trade your personal data to any third party.
5. Cookies & Consent Management
Strictly Necessary
Cart, login, security, and language preferences — required for the site to function; no consent needed.
Analytics
Help us understand how the site is used, in aggregate — set only with your consent.
Marketing
Used to show relevant products and offers — set only with your consent.
Managing Preferences
Change your choices at any time via the "Cookie Settings" control at the bottom of this page, or through your browser settings.
6. Your Rights Under the PDPA
Access
Request access to and a copy of the personal data we hold about you.
Rectification
Have inaccurate data corrected — you can update most details directly in your account profile.
Erasure & Restriction
Request deletion, destruction, or temporary suspension of processing, except where retention is required by law.
Objection & Withdrawal of Consent
Object to processing and withdraw any consent previously given, at any time — for example, unsubscribe from marketing via the link in every email.
Data Portability
Receive your data in a commonly used machine-readable format, or have it transmitted to another controller.
Lodge a Complaint
If you believe we process your data unlawfully, you may lodge a complaint with Thailand’s Personal Data Protection Committee (PDPC).
7. Data Security
We apply appropriate technical and organisational measures to protect your personal data, including SSL/TLS encryption, strict access controls, and regular system reviews. No system is entirely immune to risk. We recommend using a strong, unique password and not sharing your login credentials.
8. Data Retention
We retain personal data only as long as necessary for the purposes stated above. Account data is retained until you request deletion. Order records and accounting documents are retained for the periods required by Thai accounting and tax law, after which data is deleted or anonymised.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect legal or service changes. Significant changes will be communicated via email or a prominent notice on our website, with a new effective date.
10. Contact & Exercising Your Rights
To exercise any PDPA right or ask about this Policy, contact us at runningobjectofficial@gmail.com. We will respond to verified requests within the statutory period (generally no more than 30 days).
