G-tech Thailand LTD www.g-techthailand.com

Dear Customer,

We are pleased that you are interested in personal data protection. We would like to give you an easily

understandable overview of the personal data collection, use, and disclosure (“process or processing”)

practices and our privacy compliance measures when providing you with our delivery applications and related

services (we'll call all of these together simply the "platform" below). Our goal is to provide you with an amazing

customer experience while keeping your personal data secure. Trust, transparency and honesty are our leading

principles. Your trust in our product is the reason why we can provide you with an amazing customer

experience.

Who we are

G-TechThailand LTD

Business Solution Providers

Address: Bangkok, Thailand

Postcode City: 10400

Web : https://www/g-techthailand.com

E-mail : info@g-techthailand.com

We are the data controller of the processing activities conducted on our platform. "Data controller" simply

means we have the power and duty to make decisions in regard to the collection, use, or disclosure of the

personal data. While we are required by law to provide you with all of the following information, we do so

primarily out of the belief that a partnership should always be honest.

If you have any questions about personal data protection at about ThaiPlants, you can also contact our data

protection for the above address.

Minors

To use our services and platforms, you must be at least 18 or above years of age. According to the applicable

law, if we need to process your personal data, and you are below 18 years of age or not become sui juris under

Thai law, and such processing is based on consent as a legal basis, you must also ensure that you obtain the

necessary consent from your parent or legal guardian, and provide us with any proof thereof promptly, upon

request.

Privacy is your right and you have the choice

As a customer, you have the choice to decide which information or personal data you would like to share with

us. Please be aware, however, that by signing up to our platform, you are required to accept our terms of use.

Legally speaking, this means you will enter into a contract with us for the provision of delivery platform service.

Of course, we need some information and personal data from you in order to be able to perform our

obligations under this contract. However, this does not always require all the personal data which you can make

available to us.

To exercise your legal rights against us, you can contact info@g-techthailand.com at any time.

You can take the following steps to disclose less information and personal data about yourself:

Advertising: No Advertisement available on our apps.

No data sharing: Your personal Data won’t be share to any third party organization / Agencies. What we collect

it will be on our data warehouses only.

Your legal rights:

Right to access

You have the right to be informed about the personal data that we store about you and how we process this

personal data. This also includes a right to receive a copy of your personal data. In addition, you have the right

to request for us to disclose the source of your personal data, for which you did not provide consent.

Right to rectification

If you notice that stored personal data is incorrect or outdated, you can always ask us to correct or update it.

Right to erasure

You can ask us at any time to delete, destroy, or de-identify the personal data we have stored about you.

Right to restriction of processing

If you do not wish to delete your personal data, but do not want us to process it further, you can ask us to

restrict the processing of your personal data. In this case, we will archive your personal data and only

reintegrate it into our operative systems if you so wish and you will not be able to use our services during this

time. However, if you change your mind to use our services again, we will process your personal data

accordingly.

Right to personal data portability

You can ask us to transmit the personal data stored about you in generally readable or usable - with automatic

tools or equipment - format to you or an authorized representative, or another data controller. In this context,

we will make the personal data available to you in JSON, PDF or similar format.

Right to object to the processing of your personal data

You can object to the further processing of your personal data. This also includes objecting to our processing,

which we process without your consent but based on our legitimate interest. This applies, for example, to direct

marketing. You can object to receiving further newsletters at any time.

Right to withdraw your consent

Where we rely on your consent to process your personal data, you can withdraw your consent at any time. The

withdrawal of consent may be subject to restrictions by law, or the contract which gives benefits to you.

Therefore, your request to withdraw consent may be denied on said grounds.

The withdrawal of your consent may affect certain services which are offered to you, which you may be aware

of when requesting us to withdraw the consent. However, it will not affect any actions and processing of the

personal data, which has been conducted legally before the withdrawal of such consent.

Your request to exercise any of the rights stated above is subject to the conditions and limitations imposed by

applicable personal data protection laws and regulations, whereby your data subject rights request may be

rejected based on a legitimate ground.

What personal data we process

In the following description of our processing activities, we refer in each case to categories of personal data. A

category includes several personal data, which are usually processed together for the purposes. Personal data

is information that can identify you or even make you identifiable. We generally process the following categories

of personal data for the following reasons:

Contact Information:

Name, address, telephone number, email address, your email ID of your Facebook if you shared only.

Reason:

If you contact us, we collect this personal data because we need to know who we are talking to and what we

have been talking about so that we can help you with your reason for contacting us. This also applies if you

leave comments on social media on our fan pages. We do not combine this personal data with your profile

personal data on our platform, but we can still identify you by your social media ID. This category of personal

data will be processed in respect to various activities and purposes, namely providing services, contacting,

performing rights and duties under our contracts, providing special deals, verifying your identity, managing

complaints, and other relevant activities.

Location data:

Address, Postcode, City, Country

Reason:

We need this personal data in order to be able to deliver your orders.

Profile data (master data):

Name, email address, password, telephone number, delivery addresses, interests, demographic data (delivery

address), order data, device information and access data, payment data will not be stored, and other

information and personal data, which we may receive in the ordinary course of our business.

Reason:

This personal data is your master data, which we absolutely need for our services, and it will be processed as a

basis for other activities and purposes. If you decline to provide this personal data, we may not be able to

provide you with our services appropriately. Without your personal data, including name, email address,

telephone number and a password, you cannot create a profile. We need your age to ensure that you are not a

minor.

Device information and access data:

Device ID, device identification, operating system and corresponding version, time of access, configuration

settings, information on Internet connection (IP address)

Reason:

With each access this information is stored by us for technical reasons. We also process parts of this

information to detect suspicious behaviour at an early stage and to avert damage. This personal data will also

be processed for the purpose of providing personalized experiences, and to ensure that you are able to receive

the best services, special deals, and promotions from us.

Order data:

Order history, selected restaurants, invoices, order ID, comments on orders, information on payment method,

delivery address, successful orders and cancelled orders

Reason:

Each time you place an order, this information will be added to your profile. You can view all this information in

your profile at any time. The information should give you an overview of your own interests and previous

orders. We will also use the same information to improve our services, to learn about your needs and interests,

to provide the best personalized services, and to process other activities in the ordinary course of our business.

In addition, we will anonymize this information when you request a deletion or when your profile becomes

inactive in order to continue to use this information in an anonymized form to optimize our services.

Communication data:

Name, email address, telephone number, device ID

Reason:

If you would like to receive a newsletter, an SMS or an in-app push notification from us, we need certain

information to send you the messages. Instead of addressing you with "Hey You", we find it more customer

friendly to address you with your name. This category of personal information is also used by us to contact you,

for example, if a product cannot be delivered and we want to offer you an alternative instead. Similarly, to make

the online ads you may see from us more relevant, we may process this personal data. In regard to our

communications, other categories of your personal data, as described in this Privacy Policy, may also be

processed.

Payment data:

Payment method, we use PayPal / Bank Transfer QR code, We do not store Credit Card Information.

Reason:

We need this information to track your payments and assign them to the orders you have placed. This personal

data will mainly be processed for the purpose of proceeding with your orders, whereby your personal data may

be shared with our partners or service providers in order to complete these transactions. We store only QR

code if seller shared.

Delivery data:

Name, delivery address, phone number, order ID

Reason:

We process the personal data in order to provide you with our services, perform our duties and rights under

contracts between us, and to improve our services, manage complaints, and other relevant activities. In

accordance with the principle of data minimization, we only provide our riders and restaurants with the

information that they need from you to prepare and deliver your order.

For which purposes we process data

We process your personal data to the extent that the processing activities are permitted by law. We pay

particular attention to the fact that all principles for the processing of personal data are taken into account. We

pay great attention to transparency. Therefore, we generally process your data if this is lawful and you can

reasonably expect it to be processed.

Account creation, SSO registration, administration of your profile

In order to be able to offer you our services, the processing of your personal data for the purpose of creating

your account and profile, registering to use our services and platform, verifying your identity, and managing

your account and profile is essential. Much of this personal data that you transmit to us and other parts of the

personal data that we collect automatically when using our platforms. Nevertheless, we endeavor to keep the

amount of personal data as minimal as possible. You can help us by only sharing necessary personal data with

us that we need to fulfill our contractual obligations. The details of the processing activities are described in the

below sections.

Account creation

When creating a customer account you will be asked to enter your master data. This is absolutely necessary, as

we cannot create a customer profile without this personal data. Your email address and telephone number are

particularly important, as we can use this information to identify you in our system the next time you want to

password on multiple websites. Your password should also be at least 12 characters long, at least one

lowercase letter, one uppercase letter, one special character (!?#,%& etc.) and one digit.

Categories of personal data:

• Profile data (master data)

• Device information and access data

• Contact information

• Location data

Legal basis:

• Contract initiation to proceed with your request to enter into a contractual relationship with us

• Legitimate interest

If you do not provide us with your personal data for these purposes, ThaiPlants will not be able to create

your accounts and you will not be able to use our platform.

If you already have an existing customer account, you will need to enter your email address and password to

detect irregularities during registration, such as entering the wrong password several times, we will take

appropriate measures to prevent damage to you and us.

Categories of personal data:

• Profile data (master data)

• Contact information

Legal basis:

• Contractual obligations

• Legitimate interest

If you do not provide us with your personal data for these purposes, ThaiPlants may not be able to verify your

identity and complete the log-in process. Therefore, we would not be able to enter into the contract with you, if

you do not provide us with your personal data

Single-Sign-On with Facebook

If you have a Facebook profile, you can register on our app to create a customer account or to register using the

social plugin "Facebook Connect" of the social network Facebook, which is operated by Meta Platforms, Inc.

(“Meta”), 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"), within the framework of the so-called Single

Sign On technology. You can recognize the social plugins of "Facebook Connect" on our website by the blue

button with the Facebook logo and the inscription "Log in with Facebook" or "Connect with Facebook" or "Log in

with Facebook" or "Sign in with Facebook".

If you call up a page of our website that contains such a plugin, your browser establishes a direct connection to

the Facebook servers. The content of the plugin is transmitted directly from Facebook to your browser and

integrated into the page. Through this integration, Facebook receives the information that your browser has

called up the corresponding page of our website, even if you do not have a Facebook profile or are not logged

on to Facebook. This information (including your IP address) is transmitted directly from your browser to a

Facebook server in the USA and stored there. These personal data processing operations are carried out in

accordance with applicable personal data protection law on the basis of Facebook's legitimate interest in the

display of personalized advertising on the basis of surfing behavior.

By using this "Facebook Connect" button on our website, before connecting, receiving, and sharing any personal

data with Facebook, you will be asked to give permission to connect to Facebook, whereby ThaiPlants will not

connect with Facebook, unless such e-permission is given. We will receive the general and publicly accessible

information which is stored in your profile when using the "Facebook Connect" button on Facebook, depending

on your personal data protection settings on Facebook. This information includes the user ID, name only if

they made to public accounts.

Managing your profile

You can log in to your profile at any time and change your personal data, such as name, email address or

telephone number. You can also view your previous orders.

Categories of personal data:

• Profile data, location data

• Order information

• Device information and access data

• Order information

• Communication data

• Payment data

Legal basis:

• Legitimate interest

If you do not provide us with your personal data, foodpanda may not be able to manage your profile and

proceed with other relevant transaction.

Order processing

Once you have successfully registered and decided to place your order, we will store this information in your

profile and process it in further processes so that you can submit your order to us. When you submit your

order, your personal data is transferred to our backend where it is transferred to other systems for further

processing.

Categories of personal data:

• Contact Information

• Location data

• Device information and access data

• Order data

• Payment data

• Communication data

Legal basis:

• Contractual obligations

If you do not provide us with your personal data, foodpanda may not be able to fulfil our obligations under the

contract, i.e., fulfil your order and perform any other necessary actions to complete the transactions for you.

Buffering

After you have logged in to your profile and made your selection, the products will be saved in your profile. If

you accidentally close your browser or app, you can continue to the last point of your order. The last

information is stored in a cookie.

Categories of personal data:

• Profile data (master data)

• Device information and access data

• Order data

• Payment data

• Location data

• Contact information

Legal basis:

• Legitimate interest

The legitimate interest is to provide you with a better ordering experience where you can conveniently continue

your order with browsers or apps that are accidentally closed.

Delivery

Once you have successfully placed your order, a number of processes are running in the background to ensure

that your order is delivered quickly. The following processing activities describe how and why your personal

data is processed for the respective purposes.

Personal Data Transfer to Riders and Restaurants:

We use different riders for delivery. Therefore, we will need to send or disclose your personal data to the riders,

so that they can deliver your order quickly and properly. Legally binding agreements between the riders and us

require all riders to process data for the sole purpose of delivering your order. The personal data will be sent or

disclosed to such riders via electronic systems.

Categories of personal data:

• Delivery information

• Contact information

• Location data

• Order data

• Payment data

Legal basis:

• Performance of contract

If you do not provide us with your personal data, foodpanda may not be able to fulfil our obligations under the

contract, i.e., fulfil your order and perform any other necessary actions to complete the transactions. Therefore,

we would not be able to comply with our contractual obligations without your personal data.

Calls from riders or restaurants

If a product of your choice is not available for delivery or our riders cannot reach you at the delivery address

which you provided, or there is an error and a failure in respect to your orders or transactions, the riders or

restaurants will be authorized by us to call or contact you, so that the problem can be resolved easily.

Categories of personal data:

• Delivery information

• Order data

• Payment data

• Contact information

• Location data

Legal basis:

• Legitimate interest

Saved payment methods & payments processing

Payment methods only Paypal/ BankQR Code features. We are not saving any personal information related to

Payment information such as Credit Card Number etc. But you need Accept for the Paypal Guidelines for online

checkout process. Bank QR code will be taken with the permission of the seller. ( if they shared only )

Categories of personal data:

• Payment data

Legal basis:

• Consent

Advertising and marketing

Direct marketing

Newsletter

No Newsletters / Advertising.

Net Promoter Score (NPS)

No Promotions or Ads

In-app and push notifications

We are planning to implement push notification in near future in latest updated version.

Categories of personal data:

• Order data

SMS

No SMS services

Online marketing

No Marketing service.

No Cookies

User Experience Surveys:

Not yet Implements, if we implement, we will update the Policy.

Facilitating your rights under the applicable personal data protection law

To facilitate your request to exercise any of your rights to your personal data, subject to limitations and

conditions imposed by applicable personal data protection law.

Categories of personal data:

All categories of your personal data, depending on your request.

Legal basis:

• Legitimate interest

• Legal obligation

Without your personal data, Thaiplants would not be able to comply with our legal obligations in respect to

facilitating or providing you with channels to exercise any of your rights in regard to your personal data.

Third parties

We will not Distribution or Sharing information with any other agencies or organization.

We do not sell or rent your personal data to third parties under any circumstances, and this will never take

place without your consent.

How long we store your data

Thaiplants will retain your personal data for as long as is required in order to fulfil the purposes as specified

above, and for 10 (ten) years after the cessation of our contractual relationship, or our last

contact/communication, unless otherwise required or permitted by applicable law.

Generally where we rely on legal obligation to process your personal data, we will retain your personal data

throughout the prescribed legal retention period, as stipulated under the applicable personal data protection

law.

Right of modification

ThaiPlants may amend, change, or update this privacy policy from time to time, whereby ThaiPlants will notify

you about such changes via your selected communication channel. In the event that the amendment, change,

or update will affect the purposes for which your personal data has originally been collected, ThaiPlants will

notify you about such changes, and obtain your consent (if applicable), prior to such changes becoming

effective.