Privacy Notice Documents
Click the documents below to read the full version in PDF (opens in a new tab)
Personal Data Policy
Personal data protection policy of Re-x Products Co., Ltd. under the Personal Data Protection Act B.E. 2562 (PDPA)
Privacy Notice for Customers
Notice regarding the collection, use, or disclosure of personal data of customers
Privacy Notice for Business Partners
Notice regarding the collection, use, or disclosure of personal data of business partners
Privacy Notice for Visitors & Building Access
Notice regarding the collection, use, or disclosure of personal data of visitors and persons entering company premises
Re-x Products Co., Ltd.
Effective Date: 1 January 2025 | Last Updated: 1 January 2025
1. Introduction
Re-x Products Co., Ltd. ("Company" or "we") values the protection of your personal data and is committed to complying with the Personal Data Protection Act B.E. 2562 ("PDPA") and other applicable laws and regulations.
This Privacy Policy explains how the Company collects, uses, discloses, and protects your personal data when you visit the website rexproducts.co.th ("Website"), contact us through any channel, use our services, or interact with the Company in any way.
2. Definitions
- "Personal Data" means information about an individual that can identify such person, directly or indirectly.
- "Sensitive Personal Data" means data relating to race, ethnic origin, political opinions, religious or philosophical beliefs, sexual behavior, criminal records, health data, trade union membership, genetic data, or biometric data.
- "Data Subject" means the individual to whom the personal data relates.
- "Data Controller" means Re-x Products Co., Ltd.
3. Personal Data We Collect
3.1 Data You Provide Directly
- Identity Data: Name, position, company name
- Contact Data: Address, postal code, telephone, mobile, email, LINE ID
- Inquiry Data: Subject, message content, question details
- Complaint Data: Product name, Lot No., issue details, supporting images
- Business Data: Company information, product requirements, project details
3.2 Data Collected Automatically
- Device Data: Device type, OS, browser type, screen resolution
- Usage Data: Pages visited, visit duration, links clicked
- Network Data: IP address, approximate geographic location
- Cookie Data: As specified in our Cookie Policy
4. Purposes of Collection and Use
4.1 Contractual Basis
- To provide cosmetic manufacturing, packaging, and other services as requested
- To process orders, payments, and product delivery
- To communicate regarding services or products of interest
- To receive and resolve product complaints
4.2 Consent
- To send news, promotions, and special offers about products and services
- To analyze website usage behavior through cookies
- To present content and advertising matching your interests
4.3 Legitimate Interest
- To improve and develop the Company's website and services
- To maintain website and IT system security
- To prevent fraud and inappropriate use
4.4 Legal Obligation
- To comply with laws, regulations, orders, or requests from authorized agencies
- For FDA registration and certifications as required by law
5. Disclosure of Personal Data
The Company may disclose your personal data to the following:
- Affiliated Companies: Providing packaging, printing, marketing, and other services
- Business Partners: Logistics providers, payment processors, IT systems, Google Analytics
- Government Agencies: FDA, Revenue Department, other regulatory bodies
- Professional Advisors: Legal counsel, auditors as necessary
6. International Data Transfer
When the Company needs to transfer your personal data internationally, we will ensure the destination country, international organization, or data recipient maintains adequate personal data protection standards.
7. Data Retention Period
| Data Type | Retention Period |
|---|---|
| Customer and partner data | Duration of business relationship + 10 years |
| Inquiry/contact data | 3 years |
| Complaint data | 5 years after completion |
| Website usage data | 2 years |
| Accounting and tax data | As required by law (minimum 5 years) |
8. Security Measures
- Technical Measures: Encryption, Firewall, intrusion detection systems, access controls
- Administrative Measures: Data access policies, employee training, internal audits
- Physical Measures: Building access control, CCTV, physical security
9. Data Subject Rights
- Right of Access: Access and obtain a copy of your personal data
- Right of Rectification: Request correction of inaccurate data
- Right of Erasure: Request deletion or destruction of unnecessary data
- Right of Restriction: Request suspension of data use in certain cases
- Right to Object: Object to collection, use, or disclosure of data
- Right to Data Portability: Receive data in a machine-readable format
- Right to Withdraw Consent: Withdraw consent at any time
- Right to Lodge a Complaint: File a complaint with the Personal Data Protection Committee
10. Collection of Minors' Data
The Company does not intend to collect personal data from individuals under 20 years of age without parental consent.
11. Policy Changes
The Company may revise this Privacy Policy from time to time. Changes will be notified through the website.
12. Contact Us
Data Controller: Re-x Products Co., Ltd.
- Address: 2 Soi Nonthaburi 20 Yaek 1, Bang Kra Sor, Mueang, Nonthaburi 11000
- Tel: +66-2527-0868
- Email: info@rexproducts.co.th
- Business Hours: Mon – Fri 09:00 – 17:00
This Privacy Policy is effective from 1 January 2025
© 2026 Re-x Products Co., Ltd. All rights reserved.
