Personal Data Protection Policy (Privacy Policy) Pao Pao Book Co., Ltd. ("the Company") recognizes the importance of protecting your personal data in order for you to receive our products and services. Therefore, we have established a personal data protection policy and various criteria for the Company's operations ("the Policy") to respect privacy rights and protect the security of your personal data while you use the Enjoynovels service (website www.Enjoynovels.com and the Enjoynovels application). The Company will take appropriate measures to manage, control, and protect your data to ensure that the personal data you have provided will be used in accordance with your needs and in accordance with the law. The Company thanks you for your trust and we will take care of your personal data carefully and reasonably to provide the best customer experience and service specifically for you. This privacy policy ("Privacy Policy") covers retail stores, websites, mobile applications, customer service centers (call center), social media channels, online communication channels, as well as other places where your personal data has been collected. However, please read this Privacy Policy in conjunction with the terms and conditions for the specific services you use. The Company reserves the right to amend this Privacy Policy from time to time. Therefore, please check regularly when this Privacy Policy was last amended. Any changes will be effective immediately when we publish the amended Privacy Policy on our website or application. We will notify you if there are any significant amendments or updates. In the event of an amendment that deprives you of your rights regarding sensitive data under this Privacy Policy, the Company will proceed to obtain your consent first, unless otherwise required by law.
1. What is the purpose of the Company creating this Policy? This Policy is created to inform you, as a user and the data subject, of the objectives and details of the collection, use, and/or disclosure of your personal data, including your legal rights.
2. Definitions in this Policy "Data Processing" means actions performed on personal data by automated or other methods, such as collecting, recording, organizing, structuring, storing, altering or modifying, retrieving, consulting, using, disclosing by forwarding, disseminating, or otherwise making available, aligning or combining, restricting, erasing, or destroying. "Personal Data" means information about an individual that enables the identification of that individual, whether directly or indirectly. "Pseudonymous Data" means data resulting from the processing of personal data in a manner that renders the personal data incapable of identifying the data subject without the use of additional information, provided that such additional information is kept separately and subject to technical and administrative measures to ensure that the personal data cannot be attributed to a natural person.
3. What Personal Data does the Company collect, use, and/or disclose? The Company will collect, use, and/or disclose your personal data as follows: 3.1 Identifiable data, including first and last name, date of birth, national identification number, and copy of identification card (in case you register as a writer to receive income, or in case you indicate that you are over 18 years of age). 3.2 Contact channel data, including telephone number, email, and address (in case you register as a writer to receive income). 3.3 Financial data, including bank account information and copy of bank account book (in case you register as a writer to receive income). 3.4 Device or tool data, including Device ID and IP Address. 3.5 Log data used to track and monitor various usage activities of a person and/or data that can be linked to the data in items 3.1-3.4, such as username, location data, payment history, and usage history.
4. From which channels does the Company receive your personal data? The Company receives personal data directly from you from your accessing services, contacting, visiting, and searching through various channels of the Company, including the website, application, email, Company's office, Company's staff, or other communication channels between you and the Company, including collecting through your browser's cookies.
5. For what purposes does the Company collect, use, and/or disclose your personal data? For your benefit in using the Company's products and/or services, the Company will collect your personal data for the period necessary to achieve the Company's objectives. The objectives of collecting personal data are as follows: 5.1 For the performance of a contract to which you are a party with the Company, such as: 5.1.1 Used to verify your identity in making a contract with the Company. 5.1.2 Used for communication between you and the Company. 5.1.3 Used for payment of compensation. 5.1.4 Used for delivering products and/or receipts. 5.2 For the performance of duties according to the provisions of relevant laws or according to the orders of any government agency with authority as stipulated by the laws of each country. 5.3 For the legitimate interests of the Company or other persons for any operations that are necessary as far as you can reasonably expect, such as: 5.3.1 To verify your identity. 5.3.2 To prevent, verify various transactions that may lead to computer crimes and fraud, or to find offenders related to the Company's services. 5.3.3 To analyze, review, develop, and improve the Company's services. 5.3.4 To use in cases of anonymization or rendering characteristics unable to identify you. 5.3.5 To create and develop future services. 5.3.6 To receive suggestions, complaints, or answer your inquiries efficiently. 5.3.7 To take immediate action in protecting public safety or the safety of the Company's users. 5.4 For the benefits you will receive from accessing the Company's services, the Company will collect, use, and/or disclose your personal data to the extent that you have given consent to the Company, such as: 5.4.1 For you to receive better, more convenient services that are more in line with your needs. 5.4.2 For you not to miss the opportunity to receive news, new services of the Company, offers regarding the purchase of any services, special privileges, reward points, promotions, including the right to participate in special activities organized by the Company. 5.4.3 For you not to miss the opportunity to receive offers regarding products, services, or any special privileges from the Company's affiliated companies and business partners. 5.4.4 In giving consent under this Clause 5.4, if you are a minor, a quasi-incompetent person, or an incompetent person, you must obtain consent from your parents, guardian, curator, or custodian (as the case may be) first, unless the law of that country allows it to be done without obtaining consent. 5.4.5 For internal data processing, compiling statistics, analyzing, and researching the use of the Company's services. Incidentally, if you do not wish for the Company to further collect, use, and/or disclose such personal data, you can contact the Company's customer support department at email [email protected] (for the Enjoynovels website and application).
6. To whom may the Company disclose your personal data? The Company will not disclose your personal data to third parties without your consent, unless the Company has a duty or is permitted to comply with the law. The Company may disclose your personal data for various purposes, such as for the analysis and development of the Company's services, for compiling statistical data or researching the use of the Company's services, for identity verification, for fraud prevention, for legal compliance, for sales promotion and public relations of the Company, for allowing third parties to support the Company, etc. The Company may disclose to third parties or various agencies, such as affiliated companies, personal data processors, external service providers, business partners, auditors, external auditors, competent legal authorities, assignees in various mergers and acquisitions of the Company, any juristic persons or individuals who have a relationship or contract with the Company, including executives, employees, staff, contractors, agents, advisors of the Company and of the persons or agencies that are the recipients of such data. In the event that the Company discloses your personal data to third parties due to entering into joint marketing agreements and/or joint promotional advertising with third parties for the purpose of attracting users to use various services, the Company reserves the right to confirm, certify, or provide personal data to such third parties that the user uses any services or opens a user account with the Company, or to provide information to other service providers in certain cases to assist the Company in providing the best service. And the Company will take steps to verify to ensure that other service providers have standards for maintaining the security of your privacy data.
7. Does the Company send or transfer your personal data abroad? The Company may have a necessity to send or transfer your personal data to affiliated companies located abroad or to destination data recipients abroad as part of the Company's normal business operations, such as sending or transferring personal data to be stored on a server or cloud abroad. The Company will send or transfer your personal data to destination data recipients abroad that have adequate personal data protection standards to ensure that your personal data will be collected securely. In the event that the destination data recipient abroad has inadequate standards, the Company will oversee the sending or transferring of personal data and will implement personal data protection measures deemed necessary and appropriate in accordance with confidentiality standards, such as having a confidentiality agreement with such destination data recipient abroad. Or in the event that the data recipient is an affiliated company located abroad, the Company may choose a method of implementing a personal data protection policy that has been reviewed and certified by relevant competent legal authorities and may proceed to have the sending or transferring of personal data to the affiliated company located abroad comply with such personal data protection policy instead of proceeding as prescribed by law.
8. How long does the Company retain your personal data? The Company will retain your personal data for the period necessary while you are a user or have a relationship with the Company, or for the period necessary to achieve the relevant objectives in this Policy. The Company may need to continue to retain your personal data thereafter if prescribed or permitted by law. In this regard, upon the expiration of the retention period and there is no necessity, the Company will proceed to delete or destroy your personal data, or render it pseudonymous personal data, at the end of such period.
9. How does the Company protect your personal data? The Company will strictly maintain standards for the secure storage of your personal data for the purpose of preventing damage, or unauthorized access to the user's personal data. The Company will implement technical, administrative, or other measures and will update the Policy as necessary and appropriate. However, in the event of data loss, disaster, attack, virus, interference, system hacking, or other security intrusions from third parties which are beyond the Company's control, the Company reserves the right to deny liability related thereto.
10. What are your rights as a data subject? As a user of the Company, you have the right to take various actions related to your personal data and the policies currently set by the Company or that may arise in the future. 10.1 Right to access and request a copy of personal data (1) You have the right to request access to your personal data which is under the Company's responsibility. (2) You have the right to request the Company to make a copy of such data for you. (3) You have the right to request the Company to disclose how the Company acquired your personal data. 10.2 Right to data portability (1) You have the right to receive your personal data in the event that the Company has made such personal data into a format which is readable or commonly used by ways of automatic tools or equipment, and can be used or disclosed by automated means. (2) You have the right to request the Company to send or transfer the personal data in such format to other personal data controllers by automated means. (3) You have the right to directly receive the personal data that the Company sends or transfers in such format to other personal data controllers, unless it cannot be done due to technical reasons. In this regard, the above personal data must be data that you have given consent to collect, use, and/or disclose, or it is personal data that the Company needs to collect, use, and/or disclose in order for you to be able to use the Company's services according to your desire as a party with the Company, or to use in proceeding with your request before using the Company's services, or it is other personal data as determined by competent legal authorities. 10.3 Right to object to personal data processing (1) You have the right to object to the collection, use, and/or disclosure of your personal data at any time. (2) If the collection, use, and/or disclosure of your personal data is done for necessary operations under the legitimate interests of the Company or of other individuals or juristic persons, not exceeding the scope that you can reasonably expect, or to perform a task for the public interest, if you submit an objection request, the Company will continue to collect, use, and/or disclose your personal data only if the Company can demonstrate legal grounds that are more compelling than your fundamental rights, or it is for the establishment of legal claims, legal compliance, or defense in legal proceedings, as the case may be. (3) You have the right to object to the collection, use, and/or disclosure of your personal data in cases where it is done for marketing purposes. (4) You have the right to object to the collection, use, and/or disclosure of your personal data in cases where it is done for the purpose of scientific, historical, or statistical research studies, unless the Company has a necessity to collect, use, and/or disclose your personal data for the public interest of the Company. 10.4 Right to request deletion or destruction of personal data You have the right to request the Company to proceed to delete, destroy, or render your personal data into pseudonymous personal data when you consider that there is no necessity to retain it according to the relevant objectives in this Policy, or the collection, use, and/or disclosure is unlawful, or when you have exercised the right to object according to item 10.3 (1), item 10.3 (2), and item 10.3 (3), or exercised the right to withdraw consent according to item 10.8. 10.5 Right to request restriction of use of personal data (1) You have the right to request a temporary restriction of the use of personal data in the event that the Company is in the process of verifying a request to exercise the right to rectify personal data or your objection. (2) You have the right to request a temporary restriction of the use of personal data in any other cases where the Company has no necessity and must delete or destroy your personal data according to relevant laws. 10.6 Right to rectify data You have the right to request the rectification of your personal data to be accurate, up-to-date, complete, and not misleading. 10.7 Right to lodge a complaint You have the right to lodge a complaint to relevant competent legal authorities if you believe that the collection, use, and/or disclosure of your personal data is an action in a manner that violates or fails to comply with relevant laws. 10.8 Right to withdraw consent In the event that you have given consent to the Company to collect, use, and/or disclose your personal data, you have the right to request to withdraw your consent at any time during the period your personal data is with the Company, unless there is a restriction of that right by law or there is a contract that benefits you. Once you have submitted a request to exercise the right to withdraw consent to the Company, the Company will process your request to exercise the right to withdraw consent within a period of 30 (thirty) days, except in the case where the data in the request to exercise rights is data that must be retained by law or by order of a government agency. The Company has a duty to retain such data for not less than 90 (ninety) days from the date such data entered the computer system. The Company wishes to inform you that your withdrawal of consent may affect your use of the Company's services. For example, you will not receive beneficial news, will not receive offers, privileges, promotions, reward points, or will not receive better services that align with your needs, etc. Therefore, for your benefit, you should study and inquire about the impacts before withdrawing consent. The Company wishes to inform you that the Company will process your requests to exercise various rights in items 10.1 to 10.7 without delay, within a period of 30 (thirty) days from the date the Company receives the request to exercise rights from you. However, the exercise of your rights mentioned above may be restricted under relevant laws, and there may be certain cases with necessary reasons causing the Company to exercise the right to refuse or be unable to proceed with your request to exercise the rights above, such as having to comply with the law or court orders, for public interest, or exercising rights which may violate the rights or freedoms of others, etc. The Company will inform you of the reasons for refusing your request.
11. What are Cookies and how does the Company use cookies? Cookies are small pieces of data that will be stored on your computer or mobile phone when you visit a website. The website can read these small pieces of data and use them again when you visit that website later. You can study more details about cookies at https://www.allaboutcookies.org/ The Company will collect your data while you use the Company's website services through cookies or similar technologies. The collection of such data is to help the Company know your service usage information, enabling the Company to use it to develop better efficiency in accessing the Company's services, and to know your interests so that the Company will improve the method of presenting services to you better and more suited to your interests. Types of cookies the Company uses for the Company's website 11.1 Required Cookies - Used to enable core functionalities of the website. These types of cookies help ensure your website experience is continuous, such as remembering your login, remembering the information you provided on the website. 11.2 Functionality Cookies - These types of cookies are used to recognize you when you return to use the website again. This will help the Company customize content for you, adjust the Company's website to meet your usage needs, and remember your settings, such as language or font size you choose to use on the website. 11.3 Advertising Cookies - These types of cookies are used to remember what you have visited to present relevant products, services, or advertising media to match your interests. These types of cookies will be recorded on your device to collect usage data and links you have visited and followed. In addition, third-party cookies may use data that forwards news in online media and content stored from providing services to understand the users' intent with the objective of customizing the website and advertisements to suit your interests. 11.4 Analytical/Performance Cookies - These types of cookies allow the Company to measure various performances, such as processing the number of pages you use, counting the number of website visitors, and knowing the behavior of visiting the website, in order to improve the functionality of the website to have better quality and be more appropriate. You can configure your Browser to not accept the Company's cookies, with steps as prescribed by Web Browser manufacturers such as Chrome, Internet Explorer, Microsoft Edge, Firefox, Safari, or other Web Browsers.
12. Personal data protection policies of other websites This Policy covers only the provision of services on the Company's website. The Company's services may contain links to connect to other websites that are not under the control of the Company ("Third-Party Websites"). The Policy described herein cannot be applied to Third-Party Websites. Links from the Company's service website do not indicate that the Company endorses or has verified Third-Party Websites. The Company recommends that you contact Third-Party Websites directly to study the personal data protection policy information of each website.
13. How can you contact the Company? If you have suggestions or wish to inquire about details of the collection, use, and/or disclosure of your personal data, including requesting to exercise rights under this Policy, you can contact the Company's customer support department at email [email protected] (for the Enjoynovels website and application) or at the address 169/97 Moo3, Khu Khot, Lam Luk Ka, Pathum Thani, 12130, Thailand.
14. Changes to the Policy The Company may amend and supplement the Policy from time to time to be suitable and consistent with the Company's service provision objectives or in accordance with relevant laws. The Company will announce the current version of the Policy changes on the Company's website, which will be effective when the Company publishes it on the Enjoynovels website and the Enjoynovels application. Please read this Policy periodically for your benefit in using the Company's services. However, if such amendments significantly impact you as the data subject, the Company will notify you in advance as appropriate before such changes take effect. Last updated on September 2, 2026
