Domino's Pizza Thailand

Privacy Notice and Data Protection Statement

Dear Users of Dominos Pizza`s Website

Domino Asia Pacific Company Limited, including its subsidiaries and affiliates (hereinafter collectively referred to as the “Company”), places significant importance on and is committed to safeguarding the personal data and privacy of all users. In our endeavor to provide you with quality services and an excellent user experience on our Website and other online platforms owned or operated by the Company including but not limited to applications for tablets and smartphones (hereinafter collectively referred to as the “Website”), as well as through offline channels such as the Company’s restaurants and call centers (collectively referred to as the “Services”), we extend this Privacy Notice and Data Protection Statement to customers, business partners, representatives, contractors, and service providers of the Company. The Company aims to inform you about your lawful rights to privacy and data protection. The purpose of this statement is to comply with guidelines regarding privacy matters. The term “Personal Data” refers to any information relating to an individual that can directly or indirectly identify that individual. The Company may collect, utilize, and/or disclose personal data related to your Website visits and usage (hereinafter collectively referred to as “Personal Data”).

1. Data Controller

This Privacy Notice and Data Protection Statement is issued on behalf of Domino Asia Pacific Company Limited and its affiliated companies, which are registered and operate under Thai law. The registered address is No. 42, Hatsadisevi Alley, Huai Khwang Sub-district, Huai Khwang District, Bangkok, 10310, Thailand.

This Website may contain links to external websites, plugins, and applications of third parties. Clicking on these links or enabling such connections may allow external parties to collect or share data about you. The Company does not control these external third-party websites and shall not be liable for their privacy statements. Upon leaving our Website, we recommend that you read the privacy statements of every Website you visit.

2. Data Collection Procedure

The Company may use personal data for the following purposes or other purposes that were notified at the time of the data collection procedure or for which you have given consent after the Company has collected data from you. The company will process the personal data received from you as follows:

Data directly provided by data subjects through various activities, such as responding to questionnaires, subscribing to newsletters, participating in marketing activities, interacting with the Website after visiting it, and/or supplying information to the company in any activity, including creating accounts through the company`s Website, using services in the company`s restaurants, applications, or other company channels, entering and exiting company premises, participating in training, procurement activities, responding to email correspondence, or providing information for job applications or other communication channels between the Company and you.
Data from related individuals, such as relatives or family members.
Data from automated systems, such as images from closed-circuit cameras or data from applications.
Data from other sources, including public information, data from partner organizations, governmental agencies, or affiliated entities of the Company, as well as any other personal data provided by service users.

3. Purpose of Collecting Your Personal Data

The Company will process personal data as specified in this Privacy Notice and Data Protection Statement and will comply with the data protection laws enforced in Thailand at all times. This will apply in the following circumstances:

To execute agreements or fulfill duties based on contracts between the Company and data subjects or external individuals, for your benefit.
To utilize data for customer identity verification.
To provide information, product recommendations, services, marketing communications, sales promotion initiatives, or benefits through communication channels received from you.
To facilitate product delivery and service provision, catering to various requirements or complaints, and to use in business operations, evaluation, and enhancement for product and service quality improvement.
To perform accounting and financial activities, such as auditing accounts, notifying and collecting debts, issuing tax invoices, and maintaining various transactional records as mandated by law.
For lawful purposes that benefit the Company, such as recording customer complaints through the Call Center system, capturing images via CCTV cameras, recording entries and exits within the Company`s service premises.
To respond to your requests, such as post-sale services and addressing complaints.
To provide convenience and offer various benefits and privileges to you.
To comply with the laws, regulations, directives, provisions, and legal obligations of the Company, for the purpose of reporting or disclosing information to governmental agencies as required by law, according to legal processes and other regulations. This also encompasses the establishment of rights to legal claims, adherence to or utilization of legal rights, or engaging in legal disputes.
For the purpose of assignment of rights, duties, and any benefits according to agreements between you and the Company, such as business mergers and acquisitions or contractual transfers, which are lawfully conducted.
For marketing, sales promotion, and customer relationship purposes, such as sending information about promotions, products, and services, promotional campaigns, and partnership initiatives, including surveying customer satisfaction, market research, and statistical analysis, to serve as information for improving products and services or creating new products and services.

Other purposes with your explicit consent

In cases where the Company deems it necessary to process sensitive personal data, the Company will require explicit and clear consent from you, unless such consent is not mandated by applicable law. For instance, if the processing of personal data is necessary for the performance of a contract or compliance with the Company`s legal obligations, not providing the necessary personal data may result in the Company being unable to provide services to you.

4. Data Collected by the Company Concerning You

In the process of collecting and retaining personal data, the Company will employ methods that are legally compliant and limited to the extent necessary in accordance with the operational purposes of the Company. These encompass:

Personal information such as name, surname, age, date of birth, and gender.
Contact information including address, telephone number, email, and specific address location data.
Financial data such as credit card details, commercial information, and details of your past transactions.
Online social media contact information – your online social media accounts.
Communication contact data – voice recordings when you communicate with the Company.
Data related to loyalty points, membership, product interests, marketing activity preferences, demographic information, comments, feedback, questions, suggestions, and any other topics of interest to you.
Data derived from the collection efforts of the Company or automated systems through various Company devices, such as IP addresses, cookies, service usage behavior, service usage history, audio, photographs, videos, Social Media account names, chat logs, geolocation, and more.

The Company does not collect sensitive personal data about you, which includes details related to race or ethnicity, religion or beliefs, sexual life, sexual orientation, political opinions, trade union membership, and genetic or biometric data. The Company does not gather any information concerning criminal convictions and offenses.

Minors, Incompetent Persons and Quasi-Incompetent Persons

The Company`s Website is intended for individuals aged 20 years and above. If you are a person below the age of 20 ("Minor") or lack the legal capacity to provide consent, you must confirm that you have obtained explicit consent from an authorized representative on a case-by-case basis. For example, this may involve situations where a legal representative acting in the best interests of the Minor has given consent, or instances where a legal guardian acting on behalf of an incompetent person, or a legal curator acting on behalf of a quasi-incompetent person has been authorized to provide consent on behalf of the data subject.

The Company will process and collect personal data after obtaining consent from the data subject, except in the following cases:

Contractual, for the performance of a contract: Data collection, usage, or disclosure may be necessary for the provision of services or the fulfillment of contractual obligations between the data subject and the Company.
Vital Interests, to prevent or suspend threats to life, body, or health.
Legal Obligation, the data processing is necessary for the performance of duties as mandated by law and within the scope defined by applicable regulations. In such cases, the Company must clearly specify the exact provision of the law or the directive of the relevant governmental authority with jurisdiction that requires such duties to be carried out.
Legitimate Interests, for lawful Company benefits: When necessary for the legitimate interests of the Company`s operations, considering the importance of data subject rights. This may include preventing fraud, maintaining network security, protecting freedoms and data subject benefits.
Archives, Research and Statistic, for educational, research, or statistical purposes: This applies when compiling historical documents, notes, or other records for public benefit, education, research, or statistics, with suitable protective measures to safeguard data subject rights and freedoms.
Public Interest, for state duties: When necessary to perform tasks for the public interest or duties assigned by state authorities to the Company.

5. Personal Data Transmission and Disclosure

The Company will not transmit or disclose your personal data to external organizations, unless explicit consent is obtained from you or in cases as follows:

External Service Providers and Business Partners, in order to achieve the objectives specified in this Privacy Notice and Data Protection Statement, the Company may need to disclose or share data only as necessary with affiliates, business partners, service providers, transportation providers, document storage and destruction providers, marketing activity consultant, advertising media, development and maintenance providers for security and information technology systems, auditors, lawyers, legal or tax consultants, banks, and payment service providers such as credit or debit card companies, or other external entities. In all cases, the Company will establish data processing agreements as required by law.
The Group of Companies, including the Company, may disclose or share personal data with an affiliate or within the umbrella of the Company and its subsidiaries. Such data processing will be conducted solely for the purposes outlined in this Privacy Policy.
Government Agencies, laws, or legal procedures may compel the disclosure of information or sharing with government officials, state officers, or authorized entities for compliance with legal orders or requests.
Organization Restructuring, the Company may disclose your personal data in the event of a sale, transfer of rights, or transfer of Company operations, or when services are transferred to another service provider. The Company will seek your consent if required by applicable laws.

The Company will employ suitable technical measures and management practices to prevent and uphold the security of your personal data. This includes encryption for transmitting data over the internet network and controlling access to your personal data only to relevant parties. This applies to both data stored in document and electronic formats.

6. Transfer or Disclosure of Data to Foreign Countries

In certain cases, the Company may transfer your data to foreign countries. For instance, this might occur when the Company engages with service recipients or external entities located abroad. In such situations, the Company will transfer data to foreign countries only if the conditions set forth by the destination country`s data protection authority ensure adequate data protection. Furthermore, both the Company and the foreign entities will implement suitable data protection measures that comply with the data subject`s rights. These measures include effective legal remedies based on criteria and methods prescribed by the data protection authority, such as standard contractual clauses, processing methodologies, and certified standards.

7. Protection of Personal Data

The Company will retain your personal data for as long as it is necessary for the purposes of data collection, as detailed in the Privacy Notice and Data Protection Statement, or relevant laws. Upon the expiration of the period and the cessation of the necessity for your personal data as specified for the aforementioned purposes, the Company will proceed to erase, destroy, or anonymize your personal data, rendering it no longer identifiable, in accordance with the formats and standards for data erasure and destruction. However, in cases of disputes, the exercise of rights, or litigation related to your personal data, the Company reserves the right to continue to retain such data until the issuance of a final decision or judgment regarding the matter.

8. Your Rights under the Personal Data Protection Act B.E. 2562 (2019)

You have the right to exercise various rights as prescribed by law and as specified in this declaration, as follows:

Right to Withdraw Consent: You have the right to withdraw your consent at any time, except when there are legal limitations or contractual obligations benefiting you. However, such withdrawal of consent shall not affect the processing of personal data that you had previously consented to by the Company, as permitted by law.
Right to Access and Request Copies of Personal Data: Except in cases where the Company is entitled to reject your request under the law or court order, or when your request could potentially harm the rights and freedoms of others, you have the right to request access to and copies of your personal data.
Right to Request Correction of Personal Data: You have the right to request the correction of your personal data to be accurate, up-to-date, complete, and not misleading. The Company may carry out such corrections even without your request.
Right to request the erasure or destruction of personal data to a state where it can no longer identify an individual, in the following circumstances:
- (1)When personal data is no longer necessary for the purposes for which it was collected, used, disclosed, or stored.
- (2)When you withdraw consent for the collection, use, disclosure, or storage of personal data, and the Company is no longer legally authorized to collect, use, disclose, or store the personal data.
- (3)When you object to the collection, use, disclosure, or storage of personal data, and the Company is not legally entitled to refuse, unless there are compelling grounds for the Company to do so in accordance with the law.
Right to Request or Receive Transfer of Personal Data: In cases where the Company has made personal data readable or usable by automated means and capable of automatic transmission, except where technically infeasible or when performing duties for public interests, legal obligations, or rights and freedoms of others, you have the right to request or receive the transfer of your personal data.
Right to Object: You have the right to object to the collection, use, disclosure, or storage of personal data at any time, in the following circumstances:
- (1)When personal data is processed based on legitimate interests pursued by the Company, unless the Company demonstrates compelling legal grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims, or in the public interest.
- (2)For direct marketing purposes.
- (3)For scientific, historical, or statistical research purposes, unless the Company needs the data to fulfill its public interests.
Right to Suspend Use of Personal Data: In the following circumstances:
- (1)When the Company is verifying your request for correction of accurate, up-to-date, complete, and not misleading personal data.
- (2)When personal data must be erased or destroyed.
- (3)When the specified personal data is no longer necessary due to your request for data retention for the purpose of establishing, exercising, or defending legal claims, or in the public interest, legal obligations, or rights and freedoms of others.
- (4)When the Company is in the process of proving the right to refuse a request for objection to the collection, use, disclosure, or storage of personal data.

9. Inquiry or Exercising Rights

Should you have any inquiries, suggestions, or concerns regarding the collection, use, and disclosure of personal data by the Company or about this Privacy Notice and Data Protection Statement, or should you wish to exercise your rights under the personal data protection laws, you may contact:

Data Controller

Domino Asia Pacific Co., Ltd

Data Protection Committee (DPC)

No. 42 Hatsadisevi Alley

Huai Khwang Sub-district, Huai Khwang District, Bangkok 10310

Telephone : 02-027-7865

Email : dpo@ethical-gourmet.com

For the purpose of exercising the rights of the data subject, please provide the following information:

Full name, national identification number/passport number.
Inquiries about personal data or rights you wish to exercise according to the law.
Contact telephone number, address, and an email address for response.

10. Types of Cookies Used by the Company on this Website:

Strictly Necessary Cookies: These are essential for the Website`s operation. They include cookies that enable you to securely access and use the Company`s Website`s information and features.
Site Functionality Cookies: These cookies help you navigate the Website and utilize various Company features, such as registration and login. This type of cookie remembers you when you revisit the Website, allowing the Company to tailor content to your preferences, adjust the site to meet your needs, and remember settings you`ve chosen, such as language, region, or text size.
Site Analytical/Performance Cookies:These cookies help the Company recognize and count Website visitors and understand visitor behavior to enhance the Website`s quality and relevance. They also collect statistical data regarding the way visitors access and interact with the site, assisting in improving Website performance, allowing users to easily find what they`re searching for, understanding user interests, and measuring the effectiveness of the Company`s advertising.
Marketing Cookies: These may be set through the Company`s Website by advertising partners. They can be shared and utilized by those companies to create a profile of your interests and display relevant advertisements to you on other Websites. This is based specifically on your browser and internet device. If you don`t allow these cookies, you`ll experience less targeted advertising.

11. Liability

If you provide the Company with personal data of third parties, you certify that you have obtained permission to share their information with the Company for the purposes outlined in this Privacy Notice and Data Protection Statement. You will be held responsible for any false or inaccurate information provided and for any direct or indirect damage incurred by the Company or any third parties as a result.

12. Modifications to this Privacy Notice and Data Protection Statement

The Company reserves the right to modify and amend this Privacy Notice and Data Protection Statement. Please visit our Website periodically to review our cookie policy and any additional information. The Company will ensure that the information published on our Website is updated. Where appropriate, the Company may notify you of any changes via the email address you have provided.