ROUND8 Privacy Policy

1. About This Policy

1.1 Company Information

This privacy policy applies to ALLROUNDERS Inc. ("Company", "we", "us", or "our"), a company registered at 201, Jungjeong-ro 86, Seogwipo-si, Jeju-do, South Korea, 63595, operating the ROUND8 platform.

1.2 Scope

This policy describes how we collect, use, store, and protect your personal information when you use our services, including our mobile application and website.

1.3 Policy Updates

We may update this privacy policy from time to time. When we make significant changes, we will notify you through the platform or by email. Your continued use of our services constitutes acceptance of the updated policy.

1.4 Applicability

This policy applies to all users of the ROUND8 platform, including buyers, sellers, and delivery personnel (riders).

2. Personal Data We Collect

2.1 Definition

Personal data means any information that can identify you as an individual, whether directly or indirectly.

2.2 Types of Data Collected

2.2.1 Identity and Profile Data

• Full name
• Email address
• Phone number
• Date of birth
• Profile photograph
• Gender
• Government-issued identification numbers (when required)

2.2.2 Account and Transaction Data

• Account credentials and login information
• Payment information (bank account details, PromptPay information)
• Transaction history
• Order details and preferences
• Delivery addresses
• Reviews and ratings

2.2.3 Usage Data

• Platform usage patterns and behavior
• Search queries and preferences
• Time spent on different sections
• Feature usage statistics
• Communication records within the platform

2.2.4 Marketing and Communications Data

• Communication preferences
• Marketing consent status
• Newsletter subscriptions
• Promotional campaign participation

2.2.5 Location Data

• GPS coordinates (when location services are enabled)
• Delivery addresses
• Regional preferences
• Location-based service usage

2.2.6 Automatic Data Collection

• Device information (device type, operating system, unique device identifiers)
• Browser information and settings
• IP address and network information
• Cookies and similar tracking technologies
• Log files and usage analytics

3. How We Collect Your Data

3.1 Collection Scenarios

We collect personal data in the following situations:

• When you register for an account
• When you use our services and features
• When you make transactions or communicate through the platform
• When you contact customer support
• When you participate in surveys, promotions, or marketing campaigns
• When you interact with our website or mobile application

3.2 Third-Party Sources

We may also collect data from third-party sources, including:

• Social media platforms (when you choose to link accounts)
• Payment service providers
• Identity verification services
• Marketing and analytics partners
• Public databases and directories

3.3 Consent

By using our services, you consent to the collection and processing of your personal data as described in this policy. For certain types of data processing, we may seek additional explicit consent.

3.4 Data Accuracy

You are responsible for ensuring that the information you provide is accurate, complete, and up-to-date. Please notify us immediately of any changes to your personal information.

3.5 Third-Party Personal Data

If you provide us with personal data about third parties (such as delivery recipients), you must ensure you have their consent to share this information with us.

3.6 Social Media Integration

When you connect your social media accounts, we may access and collect information from these platforms according to their privacy policies and your privacy settings.

4. Computer Data Collection

4.1 Technologies Used

We use various technologies to collect and store information when you visit our platform, including:

• Cookies (essential, functional, performance, and marketing cookies)
• Web beacons and pixel tags
• Local storage and session storage
• Mobile device identifiers
• Analytics and tracking tools

4.2 Server Data

Our servers automatically collect and store certain information, including:

• Request logs and access patterns
• Error logs and diagnostic information
• Performance metrics
• Security-related events

4.3 Purpose

This data helps us:

• Provide and improve our services
• Analyze platform usage and performance
• Detect and prevent fraud and security threats
• Customize user experience
• Deliver relevant advertisements

4.4 Cookie Management

You can control cookie settings through your browser, but disabling certain cookies may affect platform functionality. Essential cookies required for basic platform operation cannot be disabled.

5. Use and Disclosure of Personal Data

5.1 Purpose of Use

We use your personal data for the following purposes:

• Providing and maintaining our services
• Processing transactions and payments
• User authentication and account management
• Customer support and communication
• Platform security and fraud prevention
• Legal compliance and dispute resolution
• Analytics and service improvement

5.2 Registered User Additional Uses

For registered users, we may additionally use data for:

• Personalized recommendations
• Marketing communications (with consent)
• Community features and social interactions
• Loyalty programs and rewards
• Advanced platform features and customization

5.3 Data Sharing Recipients

We may share your personal data with:

• Other platform users (for transaction purposes)
• Service providers and business partners
• Payment processors
• Delivery and logistics partners
• Technology service providers
• Legal and regulatory authorities (when required)

5.4 Third-Party Sharing Details

We ensure that third parties who receive your data:

• Are bound by confidentiality agreements
• Implement appropriate security measures
• Use data only for specified purposes
• Comply with applicable privacy laws

5.5 International Data Transfer

Your data may be processed in countries outside your jurisdiction. We ensure adequate protection through:

• Adequacy decisions by relevant authorities
• Standard contractual clauses
• Certification schemes
• Other appropriate safeguards

5.6 Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate information
• Delete your data (subject to legal requirements)
• Object to certain processing activities
• Withdraw consent (where applicable)
• Data portability (where technically feasible)

6. Withdrawal of Consent

6.1 Withdrawal Process

You may withdraw your consent for data processing at any time by:

• Contacting us through the provided contact information
• Using account settings and privacy controls
• Following unsubscribe instructions in communications
• Submitting a formal withdrawal request

6.2 Consequences

Withdrawing consent may result in:

• Limited platform functionality
• Inability to provide certain services
• Account suspension or termination
• Loss of personalized features

We will inform you of these consequences before processing your withdrawal request.

7. Marketing Information

7.1 Unsubscribe

You can opt out of marketing communications by:

• Clicking the unsubscribe link in emails
• Adjusting notification settings in your account
• Contacting customer support
• Updating your communication preferences

Please note that you may still receive transactional and service-related communications even after opting out of marketing messages.

8. Updating Personal Data

8.1 Accuracy Requirement

We strive to maintain accurate and up-to-date personal information. You are responsible for ensuring the accuracy of your data.

8.2 Update Responsibility

You should promptly notify us of any changes to your personal information, including:

• Contact information changes
• Address updates
• Payment information modifications
• Account preferences

8.3 Update Process

You can update your information through:

• Your account settings and profile page
• Contacting customer support
• Submitting update requests
• Using self-service options where available

8.4 Third-Party Updates

If you receive information updates from third-party sources (such as social media platforms), we may automatically update your profile information accordingly.

9. Accessing and Correcting Personal Data

9.1 Access Requests

You have the right to request access to your personal data. We will provide you with:

• Confirmation of data processing
• Categories of data being processed
• Purposes of processing
• Recipients of your data
• Data retention periods
• Your rights regarding the data

9.2 Administrative Fees

Access requests are generally provided free of charge. However, we may charge a reasonable administrative fee for:

• Excessive or repetitive requests
• Requests requiring significant resources
• Additional copies of data

We will inform you of any applicable fees before processing your request.

10. Security of Personal Data

10.1 Security Measures

We implement appropriate technical and organizational security measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Access controls and authentication systems
• Regular security assessments and audits
• Employee training on data protection
• Incident response and breach notification procedures
• Physical security of data centers and offices
• Regular software updates and security patches

10.2 Security Limitations

While we implement robust security measures, no system is completely secure. You acknowledge that:

• Internet transmission carries inherent risks
• Perfect security cannot be guaranteed
• You should take precautions to protect your account
• You should report suspected security breaches immediately

11. Data Retention

11.1 Retention Period

We retain your personal data only for as long as necessary to:

• Provide our services
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements
• Meet regulatory requirements

Different types of data may have different retention periods based on their purpose and legal requirements.

11.2 Disposal

When personal data is no longer needed, we will:

• Securely delete or anonymize the data
• Ensure complete destruction of physical records
• Remove data from backup systems where feasible
• Verify deletion through appropriate controls

12. Minors

12.1 Age Requirements Thai Law

Our services are intended for users who are at least 20 years old under Thai law. Users under 20 may only use our services with parental or guardian involvement and consent.

12.2 Parental Responsibility

Parents and guardians are responsible for:

• Supervising minors' use of our services
• Providing consent for data processing
• Monitoring account activity
• Ensuring compliance with our terms

12.3 Data Protection

We take additional precautions when processing data from minors, including:

• Enhanced consent mechanisms
• Limited data collection
• Increased security measures
• Regular review of processing activities

13. Third-Party Sites

13.1 External Links

Our platform may contain links to third-party websites, applications, or services. These external sites have their own privacy policies and practices.

13.2 Third-Party Responsibility

We are not responsible for:

• Privacy practices of third-party sites
• Content or security of external platforms
• Data processing by third parties
• Compliance with privacy laws by external services

We encourage you to review the privacy policies of any third-party sites you visit.

14. Contact Information

14.1 Privacy Questions

If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us.

14.2 Contact Details

We will respond to your privacy-related inquiries within a reasonable timeframe, typically within 30 days of receipt.