Mentis Talent Technologies PTE LTD Kingdom of Thailand ("Thailand") Personal Data Protection Policy

MENTIS TALENT TECHNOLOGIES PTE LTD (“Company”, “we”, “us” or “our”)

is committed to the protection of the personal data provided to us.

We have prepared this policy (“Policy”) on how the Company collects, uses, discloses, and protects your personal data for residents of Thailand. Please take time to read this document.

For UK/EU residents, please read and agree before proceeding further: Mentis UK/EU Privacy Policy

For Singapore residents, please read and agree before proceeding further: Mentis Talent Technologies Pte. Ltd Personal Data Protection Policy

Please note that this Policy may be amended or updated from time to time without notice to reflect the changes in the applicable personal data protection laws.

1. Your Consent

By interacting with us through this website and submitting information to us, in the process of purchasing any product/s or services offered by us, you agree and consent to the Company, including its related companies, as well as their respective representatives and/or agents to collect, use, or disclose your personal data for the purposes and in the manner set forth herein.

2. Personal data defined

In this Policy, “personal data” means data, whether true or not, about an individual who can be identified

(a). from that data; or

(b). from that data and other information to which the organization has or is likely to have access to and includes but is not limited to :

I. Identity data such as your name, gender, date of birth, ID card number, passport number, social security card number, driver’s license, vehicle registration and title deed.

II. Contact information such as a delivery address, telephone numbers, and email address.

III. Account data such as bank account and payment information (e.g., name of cardholder, card number, billing address, expiry date) and the like.

IV. Network data such as your Internet Protocol Address, cookies, web browser type, and version, operating system, the domain name of your Internet Provider, location, and device identifier and/or any information generated from any computer system/s.

V. Health–related and biometric data, and all personal information necessary for the provision of our services to you and necessary for your experience in our stores; and/or

VI. Any other information relating to any individual/s which you have provided to us in any form/s which you may have submitted to us, or obtained through any form of interaction with you whether through any electronic system or with you in person.

3. Collection of your personal data

Generally, the Company collects your personal data when:

(a). You visit our website or participate in our promotions, contests, campaigns, customer surveys or any other marketing initiatives.

(b). You accept our cookies on your device/s.

(c). You place an order with us through our website/s.

(d). You interact with us on our social media platform/s.

(e). You interact with our staff or other representatives, through face–to-face meetings, telephone calls, letters, emails or fill in our webforms.

(f). You subscribe to our publication/s or marketing collaterals.

(g). You enquire about our products or services in any form.

(h). Your authorised representative submits your personal data to us for any purpose authorised by you; and/or

(i). You voluntarily submit your personal data to us for any other reason.

4. Use and disclosure of your personal data

The personal data which we have collected from you may be used by us and/or shared with or transferred to a third party such as our related companies and our authorised service providers for which purpose may include but is not limited to the following:

(a). To facilitate your use of our website including the identification of visitors.

(b). To process your orders which you have placed with us through our website.

(c). To respond to your queries, complaint/s, feedback, claim/s or any update/s.

(d). To deliver the product/s you have purchased through our website;

(e). To administer our promotion/s, contest/s, campaign/s, customer survey/s or any other initiative/s.

(f). To ascertain or to investigate any fraud, carry out an audit or any other investigation/s as required under the law.

(g). To comply with the legal requirements under any relevant law; and/or

(h). To fulfil any other business requirement/s include research and development to improve the service/s or product/s of our Company.

5. Exclusion of liability for third party links

To the fullest extent permitted under the law, the Company cannot be responsible for any consequence/s arising from your use of any third–party‘s link on our website, and any such liability is expressly disclaimed and excluded.

6. Provision of third party peronal data

If you provide us with any personal data relating to a third–party including but not limited to information of your spouse, children, parents, employees, you represent to us that you have obtained the consent of the third–party in the provision of that personal data.

7. Method/s to unsubscrive from Mentis

You may unsubscribe from receiving any marketing information from us at any time by using the unsubscribed method/s as described in any marketing material/s provided.

8. Transfer of your personal data

The Company will not transfer any of your personal data outside of Thailand unless the transfer conforms with the requirements under the law.

In the event that it is necessary to send or transfer the customer’s personal data outside of Thailand, the Company will comply with personal data protection laws and take appropriate measures to ensure that the customer’s personal data is protected and that the customer can exercise the rights relating to the customer’s personal data in accordance with the law. Including the company will require the person who receives the customer’s personal data to have appropriate measures to protect the customer’s information and only process such personal data as necessary and take steps to prevent unauthorized use or disclosure of personal information by others.

9. Security of your personal data

We will protect your personal data by making reasonable security arrangements to prevent unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risk/s. Despite such reasonable efforts, please note that it is the nature of the Internet, that any transmission and any method of electronic storage is inherently insecure, and the Company cannot warrant the security of the information which you have provided to us. We assume no liability for disclosure of your personal data due to errors in transmission, unauthorised third–party access, or other cause/s beyond our control.

10. Data breach reporting procedure

A data breach refers to any suspected or confirmed incident exposing the personal data in our possession or under our control to the risks of unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks.

As a Singapore incorporated company, the Company is obligated to report any

data breach to the Regulator, The Personal Data Protection Commission of Singapore (“PDPC”) under the applicable laws and regulations concerning data breach reporting, apart from complying with any similar reporting and relevant regulations of Thailand.

11. Accessing & correcting your personal data

You should ensure that all personal data submitted to us is true, accurate and complete. Failure on your part to do so may result in our inability to provide you with the goods and services you have requested.

You may request information about how your personal data is managed and may correct and/or update any personal data submitted to us you deem as erroneous.

We reserve the right to charge a reasonable administrative fee for retrieving your record/s and we will inform you of the fee before processing your request.

We will respond to your request within 30 days from the date of your request.

12. Withdrawal of your consent

The customer has the right to withdraw your consent to the collection, use or disclosure of your personal data by submitting your request in writing to our Data Protection Officer at any time. The withdrawal of this consent will not affect the collection, use or disclosure of personal data for which the customer has given consent.

The customer may withdraw their consent to the collection, use or disclosure of all or part of their personal information. As stated in this policy by informing the company . If the customer withdraws his/her consent to the company collecting, using or disclosing the customer’s personal information due to reasons or purposes other than marketing operations. The company may not be able to perform any procedures or services and/or manage the products or merchandise or the customer’s relationship and/or account with the Company. This may cause the customer to lose the benefit of using the company’s services to the same extent as if the customer gave consent to the collection, use or disclosure of personal data to the company.

If the customer is a minor under the Thai Civil and Commercial Code. Before giving consent, please inform the company of the details of the person using parental authority. so that the Company can proceed to obtain consent from the user of parental authority as well

13. Retention of your personal data

The company will retain your personal data for as long as it is necessary for any legal business purpose.

The Personal Data of minors.

We understand the importance of protecting children’s privacy, especially in an online environment. Our platforms are not intentionally designed for or directed at children less than 10 years of age. We do not knowingly collect personal information from children under the age of 10 without the consent of the child ‘s parent or guardian. We encourage parents and guardians to provide adequate protection measures to prevent minors from providing information unwillingly on the internet. If we are aware of any personal information relating to children that we have collected. We will take step securely remove it from our systems.

14. Governing Law

This Policy and your use of the Company‘s services and website shall be governed in all respects by the laws of Thailand, and you agree to submit to the exclusive jurisdiction of the courts of Thailand in the event of any dispute.

15. Data protection officer

Please contact or write to our Data Protection Officer if you have any request or question at:

Email: dpo@mentisglobal.com

We will acknowledge receipt of your query or request within 3 working days and we endeavour to respond to your query or request within 30 days from the date of submission. As a matter of policy, we do not attend or respond to an anonymous query or request.

June 2022