Introduction

This Privacy Policy describes how Content Shifu Co., Ltd. (“the Company”, “we”, “us” or “our”) collects, uses, and discloses information about you when you use our website at https://contentshifu.com (the “Website”) and our mobile application (the “App”) (collectively, the “Services”).

By using the Services, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use the Services.

The Company may update this Privacy Policy from time to time to comply with applicable laws and regulations, and to reflect changes in our data processing activities. We will notify you of any material changes by posting the updated Privacy Policy on the Website and within the App. The updated Privacy Policy will be effective upon posting.

Personal Data Collected

In providing the Services, we may collect and process the following types of personal data from you:

1. Direct identification data: name, age, nationality, date of birth, etc.
2. Contact information: address, phone number, email address, etc.
3. Service usage data: account name, password, transaction history, interests, etc.
4. Technical identification data: IP address, usage data, device settings, browser information, etc.

Purpose of Data Processing

We collect and use your personal data for the following purposes:

1. To provide, maintain, and improve the Services, including user authentication, transaction processing, and communication.
2. To personalize your experience and offer services tailored to your interests.
3. To support the Services, such as responding to inquiries, handling feedback, and processing requests.
4. To comply with legal obligations, such as tax reporting and other required activities.
5. To transfer data to our business partners, data processors, or other third parties with contractual agreements.

Data Retention

We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by law. The specific retention periods are as follows:

No.	Type of Personal Data	Retention Period
1.	Personal identification data including age, nationality, date of birth, etc.	10 years from contract termination date
2.	Contact information including address, phone number, e-mail address, etc.	10 years from contract termination date
3.	Payment data including bank account, payment method, etc.	10 years from contract termination date
4.	Transaction data including transaction number, purchase history, etc.	10 years from contract termination date
5.	On-site personal data including account name, password, personal interest regarding services, etc.	5 years from contract termination date
6.	Technical data including IP address number, log-in history, setting, web browser connection, etc.	5 years from contract termination date
7.	Marketing data including service satisfaction and feedback, etc.	5 years from contract termination date

Disclosure of Personal Data

We may disclose your personal data in the following cases:

1. To external service providers who assist us in delivering the Services, such as consultants, service providers, and transportation providers.
2. By storing your personal data in the computer systems used for the Services, including cloud platforms.
3. To our business partners, data processors, or other third parties with contractual agreements, as you consent.
4. As necessary to protect and defend our rights, or to prevent and investigate any wrongful acts related to the use of our Services.
5. As required by law or in response to a court order or request from a government agency.

Cookies

We use various types of cookies to enhance the efficiency of the Services and our service operations, including:

• Functionality Cookies: to remember your preferences and customize the platform for you.
• Advertising Cookies: to personalize content and evaluate the effectiveness of our systems.
• Strictly Necessary Cookies: essential for the comprehensive and secure use of the Services.

You can delete the cookie settings on your browser, but this may affect the efficiency of the Services in some parts.

Data Security

We implement appropriate security measures to protect your personal data from unauthorized access, use, modification, or disclosure. We also have internal guidelines to manage access rights and maintain the confidentiality and security of the data. We will periodically review these measures for appropriateness in accordance with applicable laws.

Rights of Data Subjects

As a data subject, you have the following rights regarding your personal data:

1. Right to access and obtain copies of your personal data, and to request correction of inaccurate data.
2. Right to receive your personal data in a machine-readable format, and to request data portability.
3. Right to object to the processing of your personal data.
4. Right to request deletion or anonymization of your personal data when it is no longer necessary or upon withdrawal of consent.
5. Right to request suspension of data use in certain cases.
6. Right to withdraw consent for data processing.

You can exercise these rights by contacting us using the contact information provided below, free of charge. We will consider and respond to your request within 30 days of receipt.

Contact Information

Controller’s Details: Name: Content Shifu Co., Ltd. Address: 2529/163 Trok Nokkhet, Rama 3 Road, Bangkhlo, Bangkoraem, Bangkok 10120 Contact: 093-193-6654 Email: support[at]contentshifu.com

Data Protection Officer’s Details: Name: Mr. Sitthinunt Pholvisutsak Address: 2529/163 Trok Nokkhet, Rama 3 Road, Bangkhlo, Bangkoraem, Bangkok 10120 Contact: 093-193-6654 Email: support[at]contentshifu.com