1. Roles and scope
- ecenoww acts as controller for platform accounts, subscriptions, security, official communications, and platform operations.
- For customer data a merchant collects to sell and deliver its products, the merchant may be a separate controller and ecenoww processes data on its instructions as needed to provide the service.
- Customers should also read the merchant's privacy notice because the merchant independently determines some uses of customer data.
2. Data collected and sources
- Account and identity data includes email, username, phone, verification status, roles, team permissions, and official communications.
- Store and usage data includes store identity, domain, content, catalog, stock, orders, LINE/Discord settings, activity logs, IP address, device, and technical events.
- Transaction data includes plans, invoices, amounts, credits, payouts, receiver details, slip URLs or QR data, and verification results.
- Data comes from users, merchants, team members, customers, service activity, and connected providers authorized by the user.
3. Purposes and legal bases
- We process data to perform contracts and provide accounts, stores, orders, digital delivery, plans, credits, payment verification, payouts, and official communications.
- We rely on legitimate interests where appropriate for security, fraud prevention, incident investigation, audit logging, service improvement, and protecting users' rights, while considering the impact on individuals.
- We also process data to comply with law, government orders, tax, accounting, and disputes, or with consent where consent is legally required and may be withdrawn.
4. Sharing, processors, and international transfers
- We share only necessary data with relevant merchants and providers for hosting, files, email, notifications, LINE, Discord, payments, slip verification, professional advice, and other contracted operations.
- We do not sell personal data. We may disclose it to regulators, courts, or relevant parties when supported by law or needed to protect rights and safety.
- Some providers may process data outside Thailand; ecenoww applies appropriate measures required for international transfers.
5. Cookies, logs, and communications
- The service uses cookies necessary for login, language, theme, security, and sessions, and uses logs to diagnose failures and prevent attacks.
- We may send OTPs, verification messages, invoices, transaction alerts, security notices, and essential service communications. Optional marketing can be disabled where offered.
6. Retention and deletion
- Data is retained while an account or store remains active and afterwards as needed for transactions, tax, accounting, backups, security, disputes, and applicable limitation periods.
- When no longer needed, data is deleted, destroyed, or de-identified. Closing an account may not immediately remove legally required records or data independently controlled by a merchant.
7. Security and data incidents
- We use access controls, tenant separation, encryption in transit, activity logging, backups, and organizational controls appropriate to the risk, but no online system can guarantee absolute security.
- If a personal-data incident occurs, we will assess and contain it and notify authorities or affected individuals as required by law. Users must promptly report suspicious account or data access.
8. Data subject rights
- Subject to law, individuals may request access, copies, correction, portability, erasure, restriction or objection, withdraw consent, and complain to Thailand's Personal Data Protection Committee.
- We verify identity and may limit or refuse a request where law permits, including to protect others, preserve legal claims, or retain required records, and will provide reasons where possible.
9. Minors, changes, and contact
- Minors should use the service with lawful guardian consent and should not submit unnecessary personal data.
- Material policy changes will be dated and notified through the website, service, or contact channels.
- Privacy questions and rights requests may be submitted through official channels on the ecenoww website with enough information to verify identity and locate the relevant records.