1. General Information

RJ38 Shop (https://www.rj38shop.com/) is an e-commerce platform providing OTOP (One Tambon One Product) products from various provinces in Thailand, under the supervision of Rajabhat Universities in each area.

This website serves as an intermediary connecting buyers and sellers of OTOP products through an online system.

2. Personal Data We Collect

2.1 Data You Provide Directly:

• Full name
• Shipping address
• Phone number
• Email
• Bank account information (for sellers)
• Shop and product information (for sellers)

2.2 Data Collected Automatically:

• Website usage data
• Purchase history
• Device and browser information
• Facebook login information

3. Use of Personal Data

We use your personal data to:

• Provide OTOP product buying and selling services
• Process orders and deliver products
• Communicate with you about products and services
• Improve and develop our services
• Prevent fraud and ensure security
• Comply with relevant laws and regulations
• Analyze usage behavior to offer suitable products

4. Sharing of Personal Data

We do not sell your personal data to third parties, but we may share data in the following cases:

• With sellers to process orders and deliver products
• With shipping companies for product delivery
• With government agencies as required by law
• With Rajabhat Universities overseeing the area when necessary
• With Facebook when using Facebook login

5. Facebook Login

When you choose to log in via Facebook, we receive basic information from Facebook, including:

• Name and profile picture
• Email linked to Facebook
• Facebook user ID

This information is used to create a user account in the RJ38 Shop system and no other personal data from your Facebook account is shared.

6. Data Security

We use appropriate security measures to protect your personal data:

• Data encryption
• Access control
• Regular security audits
• Secure data backups

7. Your Rights

You have the right to:

• Request access to your personal data
• Request correction of inaccurate data
• Request deletion of personal data
• Request to stop data usage for marketing
• Withdraw consent
• Data portability to another service

8. Data Retention

We retain your personal data for the necessary period:

• User account data: Until you delete your account
• Order data: 7 years (as required by tax law)
• Contact data: 3 years after account inactivity
• Login logs: 1 year

9. Account Deletion Policy

Automatic Deletion: User accounts that have not logged in for 30 consecutive days will be temporarily suspended and permanently deleted after 90 days.

Account Deletion Process:

1. The system will send an email notification 7 days before account deletion.
2. If there is no response, the system will delete personal data.
3. Order data will be retained as required by law.
4. Deletion is irreversible.

Manual Deletion: You can request account deletion at any time by contacting customer service.

10. Use of Cookies

We use cookies to:

• Remember your preferences
• Enhance user experience
• Analyze website usage
• Show relevant advertisements

You can manage cookies through your browser settings.

11. Policy Changes

We may update this privacy policy from time to time. Significant changes will be notified 30 days in advance via email or website announcement.

12. Additional Information for Facebook Developer

For Meta Developers: Facebook login only uses basic information (name, email, profile picture) and does not collect additional data from the Facebook Graph API.

Data Deletion: Users can delete data linked to Facebook at any time, and the data will be deleted within 30 days as per the above policy.