CHRISTIAN DIOR PRIVACY POLICY

1. WHO WE ARE

1. This is the Privacy Policy (“Privacy Policy” or “Policy”) of LVMH Perfumes and Cosmetics (Thailand) Ltd. (the “Company”, “Parfums Christian Dior” or “Dior”). We are a limited liability company registered in Thailand with our registered office at 689 Bhiraj Tower, Room 3704-3708, Sukhumvit Road, Khlong Ton Nuea, Vadhana, Bangkok 10110. Without limiting any other provisions in this Policy, references to “we”, “us”, “our”, or words deriving therefrom refer to the Company and each of the Company’s related corporations, affiliates and associated companies.

2. We own and operate the website at https://www.dior.com/en_th/beauty (the “Site”) and we operate various physical stores, boutiques and point-of-sale locations in Thailand.

3. Should you have any questions regarding how we handle or process your personal data, please contact us via Our Contact Information set out in Section 14 of this Policy.

2. PURPOSE OF THIS POLICY

1. We value your right in respect to your personal data, and we are committed to the responsible collection, use, disclosure and/or transfer (“process” or “processing”) of your personal data. We have adopted this Privacy Policy to explain the processing of your personal data under Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”). 

2. It is necessary for you to read the information set out in this Privacy Policy in relation to the processing of your personal data, in order to understand how we process your personal data and to know the rights that you have in respect of your personal data.

3. For the Thai translation, please click here[JS1] . In the event of any inconsistencies between the Thai translation and the English version, the English version shall prevail.

4. The contents of this Privacy Policy may change over time, so please check back frequently. Any changes to this Policy will be posted on and can be viewed at the Site. Your continued use of our services and utilization of the Site shall be deemed, to the extent permitted by applicable laws, as your acknowledgement and acceptance of any such changes. In the event any change made to this Privacy Policy affects the purposes for which your personal data had been originally collected, we will notify you about such changes through appropriate means and, if required by law, obtain your consent prior to such change becoming effective.

3. APPLICATION OF THIS POLICY

1.  This Privacy Policy applies to you if you are: - 

Category of Data Subject	Definition
Associated Person	Any persons relevant to the Customers, such as representatives, gift receivers, persons who may involve in the campaigns, events or workshops together with Customers.
Customers	Member Customer and Non-Member Customer, collectively.
Member Customer	A customer (a natural person) who has registered via our Site, and/or LINE Official Account, and/or our counter stores, and/or our boutique store, or via other means, for personal use.
	A contact person or authorized representative of the customer entity has registered via our Site, and/or LINE Official Account, and/or our counter stores, and/or our boutique store, or via other means.
Non-Member Customer	A natural person who has not registered as a member with the Company.

2. This Site and/or our LINE Official Account (and any of its services, functions and contents) are not intended for use by any person below the age of 10. We do not, and do not intend to, transact through the Site and/or our LINE Official Account with anyone we know to be under the age of 10. By using the Site and/or our LINE Official Account (and any of its services, functions and contents), you declare and affirm that you are at least 10 years of age and above and agree to the terms set out in this Policy.

 

4. HOW DO WE COLLECT PERSONAL DATA

1. Personal data refers to any information pertaining to an individual that enables the identification of that individual, whether directly or indirectly. The personal data we collect depends upon the touchpoint of our interactions, your dealings with us, the particular transaction, as well as our overall relationship with you. Our collection of personal data is limited to that which is relevant and appropriate.

2. In general, we will collect personal data directly from you. However, in the event it is necessary for us to collect your personal data from other sources, we will ensure that your personal data will be collected and protected in accordance with the requirements under the PDPA.

3. Your personal data may also be collected by our trusted agents or third party providers acting as subcontractors according to our instructions and on our behalf only. Any such personal data that may be collected by such agents or third party providers on our behalf is collected for the purposes set out in this Policy, and subject to the same standards of protection and confidentiality as if collected directly by us.

4. The personal data which is essential or necessary to Dior for the purpose for which it is collected may be marked with an asterisk (*) on each such personal data collection form (be it on our Site, our LINE Official Account, or in electronic or physical form). If you do not fill in these compulsory fields, we will probably not be able to respond to your request and/or provide you with the requested services. The other information requested may be optional and allows us to know you better and improve our communications and services to you. Although not mandatory, we recommend that you fill them in to allow you to benefit from the best possible experience during our interactions with you.

5. In the event you provide us with personal data of any individual other than yourself (including an Associated Person), you warrant to us that you have obtained the prior consent from such individual to permit you to:

1. permit you to disclose the individuals’ personal data to us; and
2. permit us to process the individual’s personal data,

in each case, in accordance with the terms of this Policy. In addition and if required, you agree to assist us in obtaining valid and enforceable consent from such persons in accordance with any applicable requirements prescribed in the PDPA.

5. WHAT PERSONAL DATA WE COLLECT AND PROCESS

1. In general, we will collect and process the following categories of your personal data: 

Category of personal data	Types of personal data collected and processed
Technical information, device information, usage data and access data	Information on Internet connection (IP address), your login data, browser type and version, make and model (mobile phones only), operating system, hardware version, platform, device settings and other technology identification on the devices used. As you interact with our Site and/or our LINE Official Account, we may automatically technical data using cookies, server logs, web beacons and other similar technologies. Please refer to Section 19 below for further information on cookie management.
Identification and contact information	Full name, prefix, mobile phone numbers, telephone number, address, email address, date of birth, age, gender, identification card number and data contained in the identification card, passport number and data contained in the passport, flight and travelling information, tax identification number, nationality, LINE ID, signature, username and password of client’s online account, purchase history, photographs, video records.
Finance and payment information	Your bank account number, bank account information, credit card/debit card information and such other documentation or details required for proof of payment of a transaction. For your purchases, your bank details are encrypted through our (or our third party service provider’s) servers. Payments are made via a secure payment platform which is PCI-DSS certified and supplemented by control measures, to ensure the security of purchases made and to fight against fraud.
Communication information	Your requests or information which you have communicated through our customer services department, our boutique consultants, our public relations team, or your communications with us via social media, email, electronic and non-electronic means, or in any of your interactions with us.
Work information	Your company telephone number, company name and address, position, occupation
Personal data of Associated Person	Full name, address, contact number, photographs, video records
Sensitive personal data	We may process your health-related data e.g., symptoms, disease, allergies, photos of allergy reactions, medical certificate, medical treatment, etc.  Your sensitive personal data may appear on the copy of your identification card, i.e., your religious belief and/or blood type data. However, we do not have an intention to process such sensitive personal data; therefore, we will require you to blind, cross out or omit the information about religious belief and/or blood type before providing a copy of your identification card to us.   In the case where such sensitive personal data still appears on a copy of identification card, we may, at any time, blind or cross out such sensitive personal data in order to comply with the PDPA (which requires us to collect personal data to the extent that is necessary and relevant for our business operations).

 

2. In the event we collect any types of personal data not prescribed in this Policy, we will inform you about such collection or processing and, if required, we may request your consent to collect and process said personal data, in accordance with the requirements prescribed by the PDPA.

3. We invite you to keep us regularly informed in writing of any change in your personal data by contacting us via Our Contact Information set out in Section 14 of this Policy.

6. PURPOSE FOR PROCESSING YOUR PERSONAL DATA

1. Generally, we will only use the personal data that we collect about you for purposes connected with our business operations, including to communicate with you and provide you with our various services. Depending on the context in which we collect your personal data, we will process your personal data for one or more of the following purposes (collectively, “Purposes” and each, a “Purpose”): 

Purposes	Type of Personal data	Legal Basis
To enter into an agreement or establish a legal relationship with you or the legal entity of which you were authorized to represent, and to execute and perform the obligations under such agreement or legal relationship.   Your personal data is necessary for the following purposes:  To create and register customer accounts. To proceed with purchase payment. To deliver the purchase order to you or the Associated Person.  To send greeting card to gift receiver.	Identification and contact information  Finance and payment information  Work information  Personal data of Associated Persons  Remark: If you do not provide any personal data that is necessary for creation and registration of customer’s account in our systems, payment completion, and order delivery, we may not be able to enter into an agreement with you, nor to execute or perform our obligations as specified under the said agreement or legal relationship (either in whole or in part), nor to proceed with your order and the payment.	Legitimate interest (for corporate Customers, for the processing of the Associated Person’s personal data to deliver the purchase order and greeting card)  Contractual obligation (for individual Customers)
To furnish you with our beauty services, new products, sampling, gift or rewards redemption.   Your personal data is necessary:  For receiving new products, sampling, and gifts or rewards redemption from us.  For reservation and receiving of our beauty services (such as make up and beauty treatment).	Identification and contact information  Communication information Personal data of Associated Persons  Sensitive personal data, i.e., your religious belief and/or blood type that appeared in the identification card (if required)    Remark: If you do not provide any personal data that is necessary for receiving new products and sampling to you, gift/rewards redemption, and reservation and receiving of our beauty services, we may not be able to serve you or to perform our obligations under the agreement between you and us, either in whole or in part.	Legitimate interest (For the processing of the Associated Person’s personal data for gifts or rewards redemption from us)  Consent (For Non-Member Customer to contact by the Company for receiving new products, sampling)  Contractual obligation (For Member Customer for receiving new products, sampling, and gifts or rewards redemption, reservation and receiving of our beauty services, and for Non-Member Customer for reservation and receiving of our beauty services)  Explicit consent (for the processing of sensitive personal data for gifts or rewards redemption)
To participate in the campaigns, attend events or workshops, arranged by the Company.   Your personal data is necessary:  To invite Customers to participate in the campaign or attend events or workshops.  To enable Customers and persons who may involve in the campaigns, events or workshops together with Customers to register or participate in the campaigns or attend events or workshops.  To contact and communicate with the Customers regarding the campaigns, events or workshops for example, to send a confirmation on the registration, etc.  While you are participating in the campaign, or attending the events or workshops, your images and/or videos may be recorded and used for our internal purpose – for example, for our record or evidence that the activities were held, etc.  While you are participating in the campaign, or attending the events or workshops, your images and/or videos may be recorded and used for our marketing, promotion and/or advertisement purposes, and may also be published or posted on social media platforms.	Identification and contact information  Communication information Personal data of Associated Persons    Remark: If you do not provide any personal data that is necessary to invite you to participate in the campaign, or attend events or workshops, or to enable you to register or participate in the campaigns, or attend events or workshops, or to contact and communicate with you regarding the campaigns, events or workshops, we may not be able to allow you to participate in the campaign or attend the events or workshops, or may not be able to perform our obligations under the agreement between you and us, either in whole or in part.	Legitimate interest (for the processing of Customers and Associated Person’s personal data for Activity No. 1-3 and for Activity No. 4-5 in certain cases)  Contractual obligation (for the processing of Member Customer’s personal data for Activity No. 1-3 for the particular campaigns, attend events or workshops for the Member Customer according to the terms and conditions or agreements (as the case may be)  Consent (for the processing of Customers and Associated Person’s personal data for Activity No. 4-5 in certain cases)
To handle your request and/or complaints via online and offline channels.   Your Personal data is necessary:  To handle Customers’ issues and complaints in respect to product allergies  To handle customer requests for a product change/return/refund (non-allergy)  To handle other Customers’ requests such as refund in case of false payment, update of customer’s information, chat with customers, or respond to customers’ inquiries	Identification and contact information  Finance and payment information  Communication information Work information  Sensitive personal data, i.e., health-related data (e.g., symptoms, disease, allergies, photos of allergy reactions, medical certificate, medical treatment) for handling complaints in respect to product allergies and your religious belief and/or blood type that appeared in the identification card (if required) for updating of customer’s information    Remark: If you do not provide any personal data that is necessary for us to handle your request and/or complaints in respect to product allergies, we may not be able to solve your concerns and requests and we may be unable to comply with the laws which may result us in violation of the law applicable to us. Moreover, if you do not provide any personal data that is necessary for handle customer requests for a product change/return/refund, refund in case of false payment, we may not be able to serve you or to perform our obligations under the agreement between you and us, either in whole or in part.	Legitimate interest (for handling other requests such as to update of customer’s information, chat with customers, or respond to customers’ inquiries)  Legal obligation (for handling product allergy requests including the processing of sensitive personal data i.e. symptoms, disease and allergies, etc. according to the law related to adverse event from using cosmetics)  Contractual obligation (for false payment and product change/return/refund)  Explicit consent (for the processing sensitive personal data i.e., photos of allergy reactions, medical certificate, medical treatment)
To record your purchase history and our daily sales.	Identification and contact information	Legitimate interest
To conduct data analysis, and for sending marketing material/information for example, promotional message, marketing campaign.	Technical information, device information, usage data and access data  Identification and contact information Communication information	Legitimate interest (For customer who has never been asked to provide consent to conduct data analysis and for sending marketing material/information for example, promotional message, marketing campaign whereby the Company will provide an opt-out channel for such customer)  Consent (To conduct data analysis, and for sending marketing material/information for example, promotional message, marketing campaign)
For overall enhancement of customer service and Dior product offerings through Customer Identity and Access Management, or equivalent Management System, Platform, Tools and Database Operated, Managed or Accessible by the Company or the LVMH Group (as defined below) (“CIAM”) In connection with CIAM, we may use and process your personal data for the following purposes (non-exhaustive): Security and prevention of misuse of services. Detecting or preventing illegal activities (e.g. fraud, money laundering) or threats to physical safety and security, IT and network security. Preventing of misuse of services. Carrying out other necessary corporate due diligence. Improving, enhancing or developing new goods or services.  Improving, enhancing or developing new methods or processes for business operations in relation to the organisations’ goods and services. Learning or understanding behaviour and preferences of individuals (including groups of individuals segmented by profile). Identifying goods or services that may be suitable for individuals (including groups of individuals segmented by profile) or personalising or customising any such goods or services for individuals. Improving, enhancing or developing new goods or services.  We will endeavour to take steps to analyse and satisfy ourselves that our use of personal data for the business improvement purpose is one that a reasonable person would consider appropriate in the circumstances.	Technical information, device information, usage data and access data  Identification and contact information Communication information	Legitimate interest (For security and prevention purposes, and for customer who has never been asked to provide consent to conduct data analysis and for sending marketing material/information for example, promotional message, marketing campaign whereby the Company will provide an opt-out channel for such customer)  Consent (To conduct data analysis, and for sending marketing material/information for example, promotional message, marketing campaign)
To comply with applicable laws.   We may be required to process your personal data for complying with laws, regulations, orders, notifications, or other rules issued by authorities, such as: Proceed or submit any required information and documents or arrange to comply with our tax obligations and to submit the required documents to the Revenue Department including but not limited to processing with VAT refund and issuing of invoice. Comply with other laws, e.g., law related to adverse event from using cosmetics under the supervision of the Ministry of Public Health (for example, the Cosmetics Act B.E.2558), the PDPA by fulfilling your requests to exercise rights in respect to your personal data.	Technical information, device information, usage data and access data  Identification and contact information  Personal data of Associated Persons  Finance and payment information  Work information  Sensitive personal data, i.e., health-related data (e.g., symptoms, disease, allergies, photos of allergy reactions, medical certificate, medical treatment in respect to product allergies)  Any information as required by law    The type of the personal data being processed for this purpose would depend on a case-by-case basis, as required by applicable laws.    Remark: If you do not provide any personal data that is necessary for compliance with the law, which is applicable to us, we and/or you may be unable to comply with the laws, and that may affect the necessary processing of your personal data as well as may result in the violation of applicable law.	Legal obligation (For activity No.1 and 2 and for the processing of sensitive personal data to comply with the law related to adverse event from using cosmetics such as symptoms, disease, allergies)  Explicit consent (for the processing of sensitive personal data to comply with the law related to adverse event from using cosmetics such as photos of allergy reactions, medical certificate, medical treatment)
To establish, exercise, comply or defend legal claims.   Your personal data may be processed as part of the establishment, exercising, compliance or defence of legal claims.	Technical information, device information, usage data and access data  Identification and contact information  Personal data of Associated Persons  Finance and payment information  Work information  Communication information Personal data of Associated Persons  Sensitive personal data (if any)  Legal claim related information    The type of the personal data being processed for this purpose would depend on a case-by-case basis.	Legitimate interest  Establishment of legal claims (for sensitive Personal data)
Cookies    Your personal data may be processed in order to enhance your experience of visiting and using our Site, to make the visit of our Site more attractive, and to enable the use of certain functions, we use so-called “Cookies” on various pages.	Technical information, device information, usage data and access data	Legitimate interest (for required cookies)  Consent (for functional cookies and personalization and advertising cookies)    Remark: You can adjust your cookies setting at any time on our Site. For more information on cookie management, please refer to Section 19 below.

 

2. In the event we process your personal data for any other Purpose not prescribed in this Policy, we will inform you about such processing and, if required, we may request and obtain your consent to process said personal data, in accordance with the requirements under the PDPA. 

 

7. DISCLOSURE OF PERSONAL DATA

 

1. In processing personal data for the above Purposes, it may be necessary for us to disclose your personal data to third parties, as follows:

1. any of our related and associated companies, affiliates and subsidiaries, including any other Dior entity and any entities within the LVMH (LVMH Moët Hennessy – Louis Vuitton SE) group (including LVMH Recherche and Agache SE) (“LVMH Group”).

One of the purposes of disclosure to and processing of your personal data by other entities in the LVMH Group is to offer you with a further tailored experience as a Dior customer, which includes enhancing your profile to facilitate targeted marketing efforts and ensuring that promotional materials and communications are most relevant to your interests. The legal basis for this processing is consent. Your personal data that may be processed for such purpose includes your full name, contact details, your preferences, habits and purchases you have made with us. If you consent to this processing, Dior will share and match your preferences, habits and purchases you have made with us during the last 3 years with other LVMH Group Maisons to which you have given similar consent. This sharing and matching will be carried out in a pseudonymous manner and is part of our profiling process. Further to this processing, Dior will obtain enriched information based on your preferences, habits and purchases from the other LVMH Group Maisons (to which you have given similar consent). Your personal data is not shared with any third parties. In all instances, Dior will remain the data controller of your personal data, which means that we remain responsible for the personal data that you provide to us;

2. our third-party vendors, agents, contractors, suppliers or service providers (which  may include other entities of the LVMH Group), who provide services to us, such as system and database outsourced companies, payment gateway agency, delivery service provider, marketing and data analysis agencies, etc. to create and register customer accounts, to proceed with purchase payment, to deliver the purchase order to you or the Associated Person, to send greeting card to gift receiver, to enable Customers and persons who may involve in the campaigns, events or workshops together with Customers to register or participate in the campaigns, or attend events or workshops, to handle Customers’ issues and complaints in respect to product allergies and a product change/return/refund (non-allergy) and to conduct data analysis, and to conduct data analysis, and for sending marketing material/information for example, promotional message, marketing campaign;

3. department stores in which you buy or receive our products and services;

4. our professional advisers, including external legal counsels in the case of legal proceedings and legal execution to establish, exercise, comply or defend legal claims; 

5. any competent regulatory, prosecuting, tax or governmental agencies, courts or other tribunals in any jurisdiction, including, without limitation, the Revenue Department, and Food and Drug Administration, Ministry of Public Health to proceed or submit any required information and documents, or arrange to comply with our tax obligations and to submit the required documents to the Revenue Department and to comply with applicable law such as the PDPA; 

6. any other persons or entities to whom we are required to make disclosure by applicable law, or whom we are permitted by you or your organization to disclose your personal data; and/or 

7. third party acquirers of any of our assets or business in the event of a merger or acquisition involving our business.

2. We require our suppliers, contractors and trusted third parties to keep personal data confidential and secure and not to use or disclose it for any purpose other than to perform the services for us or on our behalf, and to comply with this Privacy Policy and the requirements of the PDPA. Please note that these third parties may act as data controllers; in such cases, they have their own privacy policies.

8. TRANSFERRING DATA ABROAD

1. Because we operate in many countries across the world, some of your personal data may be transferred, disclosed or accessible outside of Thailand, including France, Australia, Singapore, and other countries in Asia and Europe.

2. You should know that the privacy, data protection and security requirements differ from place to place and may not offer the same level of protection as those in your home country. Nevertheless, we have taken steps to ensure an adequate level of protection of your data irrespective of where it is located, including ensuring that any transfer of personal data outside of Thailand will be in compliance with the requirements under the PDPA.

9. RETENTION OF PERSONAL DATA

1. We retain your Personal data for as long as is required in order to fulfil the Purpose pursued, to meet your needs, or to comply with our legal or business obligations. In general, we will retain your personal data throughout the period of any applicable contractual relationship and retain not exceeding ten (10) years after the cessation of our contractual relationship, or our last contact/communication. 

2. We will retain the personal data of the Associated Person for a duration that does not exceed the period during which we retain the personal data of the Customer to whom the Associated Person is related with. 

3. Notwithstanding the above, we may retain your personal data longer than the above period, only as otherwise permitted or specified by the applicable law. 

10. PROTECTING CHILDREN’S PRIVACY

We have adopted practices that are designed to ensure that we do not collect or maintain any information from children under the age of 10. If we learn that we mistakenly collected any information from anyone under the age of 10, we will purge it immediately, unless consent of his/her parent or legal guardian has been obtained.

11. ACCURACY OF PERSONAL DATA

1. We generally rely on personal data provided by you (or your authorised representative). In order to ensure that your personal data is current, complete and accurate, please inform us of any changes to your personal data or if there are any errors in the personal data we hold about you by contacting us via Our Contact Information set out in Section 14 of this Policy.

2. We will not be responsible for relying on inaccurate or incomplete personal data arising from your not updating us of any changes in your personal data that you had initially provided us with. We also do not have any obligation to independently verify the accuracy or completeness of the personal data given by or on your behalf.

12. WITHDRAWING YOUR CONSENT

1. You have the right at any time to withdraw your consent for the collection, use, disclosure and/or processing of your personal data. To do so, please contact us via Our Contact Information provided in Section 14 of this Policy. However, please take note that depending on the nature or scope of your request, your withdrawal of consent could result in certain legal consequences arising, including us being unable to perform the transactions requested by you or the termination of your relationship with us, as the case may be. To this end, we may require proof of your identity and full details of your request before we process it.

2. Notwithstanding the generality of the above, if you no longer wish to receive details of our offers, news and events, you can unsubscribe at any time by using the hyperlink provided for this purpose in each email we send to you. You are also able to request non-personalized communications about our products and services.

3. Please also note that withdrawing consent does not affect our right to continue to collect, use, disclose or otherwise process your personal data where such collection, use, disclose or processing without consent is required or authorised under applicable laws.

13. YOUR RIGHTS REGARDING YOUR PERSONAL DATA

1. Subject to the relevant conditions and limitations imposed by the PDPA, we provide you with several ways to manage your rights with respect to your personal data, such as:

1. Making a request to access or obtain a copy of the personal data which is in our possession, and to request for disclosure of the source(s) of your personal data which had been obtained without your consent;

2. Making a request to correct or update any of your personal data which we hold about you;

3. Withdrawing your consent to the processing of your personal data, or to request for a change to the scope of your consent;

4. In certain circumstances, making a request to delete or destroy personal data which we hold about you, or de-identify you from your personal data;

5. In certain circumstances, making a request to object to or suspend the processing of your personal data; and

6. In certain circumstances, making a request for the personal data we hold about you to be transmitted to another data controller in a format which is readable or commonly used by way of automatic tools or equipment.

2. If you wish to exercise your choices with regards to your personal data in the manner(s) described above, please send your request by contacting us via Our Contact Information set out in Section 14 of this Policy. We may be required to take reasonable steps to verify your identity to ensure that we are not providing personal data to an unauthorised person.

3. We reserve the right to refuse your request, where appropriate or as permitted under applicable laws. If you are dissatisfied with our response to your request, you may wish to complain to the Personal Data Protection Committee (PDPC), as detailed in Section 15 below. 

 

14. OUR CONTACT INFORMATION

1. If you have any inquiries in relation to how we handle or process your personal data, or you would like to exercise any of your rights regarding your personal data, you may contact us in any one of the following ways:

1. By email – to our Data Protection Officer, Tilleke & Gibbins Digital Solutions Co., Ltd. at digital@tilleke.com; or

2. By writing to us – at Supalai Grand Tower, 20th - 26th Floor, 1011 Rama 3 Road, Chongnonsi Sub-district, Yannawa District, Bangkok 10120, Thailand.

2. All requests and enquiries will first be evaluated by us. After we have completed our evaluation and have satisfied that the requests and enquiries are not, or are not likely to be, spam messages, phishing attempts or other potential fraudulent or illegal activities, we will respond to the initial contact person.

15. COMPLAINTS

1. We try to meet the highest standards in order to protect your privacy. However, if you have any concerns or wish to submit a complaint about the way in which we are handling your personal information, please contact us via Our Contact Information set out in Section 14 of this Policy.

2. Upon receiving a complaint, we will investigate the matter within a reasonable time and determine the steps that we will take to resolve your complaint. We will contact you if we require any further information from you and will notify you in writing of the outcome of the investigation.

3. If you are not satisfied with our response, please contact us to discuss your concerns. You also have the right to file a complaint with the Office of the Personal Data Protection Committee (PDPC), in accordance with the procedures set out in the PDPA. The contact details of the PDPC can be found on their website: https://www.pdpc.or.th/.

16. GOVERNING LAW

This Policy is prepared pursuant to the PDPA and shall be governed by the laws of Thailand.

17. EFFECT OF THIS PRIVACY POLICY

1. This Policy applies in conjunction with any other notices, contractual clauses and consent clauses that apply in relation to the collection, use, disclosure and/or processing of your personal information by us. If there is a formal written and executed contract between the Company and you (“Formal Agreement”) and to the extent of any inconsistencies between that Formal Agreement and the terms of this Policy, the terms of the Formal Agreement will prevail to the extent permitted by the PDPA or other applicable laws and regulations.

2. We reserve the right to revise this Policy from time to time without prior notice.

18. THIRD PARTY WEBSITES

This Policy only applies to the Site and the information that we may collect from you. This Site may contain links to third-party websites that we do not own or control, and which are governed by their own confidentiality and personal information protection policies. When visiting these third party websites or disclosing your personal information to third parties, you should review their confidentiality and personal information protection policies, or ask relevant questions before you disclose your personal information. We shall not be responsible or liable for the collection, use, disclose and/or processing of your personal information by any such third parties.

                        

19. INFORMATION ON COOKIE MANAGEMENT

1. This section sets out our policy for managing cookies on the Site in order to provide you with information on the origin and use of browsing data collected when you visit our Site, and the tools provided to allow you to express your choices about cookies.

2.  Cookies are small text files which are stored on your computer’s hard drive or user device by your web browser. Some cookies are essential for using the Site, while others optimise and personalise the contents displayed. The cookies that may be stored on your device when you visit the Site are issued by Dior and/or third parties. Only the entity issuing the cookies will be able to read or modify the information they contain.

3. Subject to your choices, different types of cookies may be installed on your device for the purposes detailed below. For the sake of transparency, we inform you of the purposes of the third-party cookies that we are aware of, and the ways in which you can make choices about these cookies. All cookies may be cross-referenced with your customer data in order to personalize your experience, limit commercial interaction, ensure the proper functioning of your loyalty benefits, improve our services and guarantee your satisfaction.

1. “Essential” cookies, which are cookies essential for browsing the Site and allow you to use the Site’s main features. For example, these cookies are intended particularly for saving your choices or desire not to make a choice about tracker cookies, service authentication, saving the contents of a shopping cart, and customizing the interface. Removing these cookies may make it hard for you to browse the Site or may make it impossible to place an order. These cookies may be issued by Dior or by its service providers.

These cookies enable or facilitate digital communications and/or may be strictly necessary for the provision of an online communication service at your express request. As a result, they do not require your prior consent. Saving or reading such cookies is necessary for provision of the service and will be based on Dior’s legitimate interest in implementing such processing for the proper use of its Site.

2. “Personalisation” cookies, which allow us to personalize and improve your user experience, for example, by making your searches easier and optimizing your shopping experience. They also allow us to adapt the look of the Website to your device display during your visits. These cookies may be issued by Dior or by its service providers. The issue and use of cookies by third parties on our Site may also be subject to the privacy protection policies of these third parties.

Such cookies are saved or read, subject to your prior consent. If you refuse these cookies, you will not be able to benefit from the functionalities described in this paragraph.

3. “Analytical” cookies, which make it possible to gauge the audience for Site content and to establish visitor statistics and volumes in order to evaluate and improve our service ergonomics. These cookies include those used to create similar profiles that will be prospected according to your information. These cookies may be issued by Dior or by its service providers. The issue and use of cookies by third parties on our Site may also be subject to the privacy protection policies of these third parties.

The information communicated to technical service providers is transmitted in the form of aggregate statistics and traffic volumes, and excludes any personal information. These statistics are reconciled with the traffic statistics of other websites, as well as with your customer data.

Such cookies are saved or read, subject to your prior consent. Refusing these cookies will not affect your Site browsing, but you will not be able to benefit from the quality of service we wish to offer our Site visitors.

4. Advertising cookies, which are not essential for browsing but allow you to see more relevant advertisements personalized to your interests on the Site. Such targeting cookies allow, for example, the display of personalised advertising, capping of display (not presenting the same advertising in a repetitive manner), combatting click fraud, billing the display service, and measurement of targets to better understanding audience interest. Advertising content personalization can also be achieved by using our partner’s technology, to associate your device’s Site browsing information with the data you provided us when you registered.

Such cookies are saved or read, subject to your prior consent. Refusing these cookies will not affect your Site browsing, but we will not be able to offer you advertising that takes your interests and browsing history into account.

5. Cookies issued by third party companies. The issue and use of cookies by third parties on our Site are subject to the privacy policies concerning these third parties. This includes, for example, the use of third party applications that allow you to share Site content with others, inform others that you have visited our Site or notify them of your opinion concerning our Site, in particular the use of “Share” and “Like” buttons featured on social networks such as Facebook, Twitter, Instagram, Pinterest etc. These cookies are not essential for browsing on the Site.

We have no control over how third parties collect information about your Site browsing and associated with the personal information they may hold. We invite you to read the privacy policies of these third parties to learn more.

4. If your device is used by more than one person and operates more than one browser, we cannot be certain that the services and advertisements sent to your device are appropriate for your personal use of your device, rather than of another user of your device. If you choose to share your device and browser cookie settings with others, you are responsible for doing so at your own discretion.

5. Any cookies saved on your device are automatically deleted at the end of their defined lifespan. You may also modify or delete cookies at any time after their use via your web browser. More information may be available from your web browser provider.

6. Please note that any choices in your browser settings concerning the acceptance or refusal of cookies will likely modify your browsing experience and your access to the Site and certain services which require the use of such cookies.

 

Effective Date: November 2024

Version last updated: July 2026