Privacy Policy
Brewing Happiness Co., Ltd.
Brewing Happiness Co., Ltd. (“the Company”), as the manager of the CASA LAPIN Membership system (“CASA LAPIN”), which provides services through the Line Official Account (“Service Channels”), has established this Privacy Policy to protect the personal data of membership applicants (“Personal Data”) who become members through such Service Channels.
This Policy covers the collection, use, disclosure, processing, and protection of members’ personal data (“Members” or “You”) in accordance with the Personal Data Protection Act B.E. 2562 (2019) and other applicable laws. By registering as a member or creating a user account with CASA LAPIN, you are deemed to have acknowledged and agreed to this Policy.
In the event of any changes to this Policy, the Company will clearly announce such changes to you through the Service Channels or other appropriate means, and the revised Policy shall take effect on the date of announcement.
Scope of Application of the Privacy Policy
This Policy applies only to the CASA LAPIN Membership system (“CASA LAPIN”) operated directly by the Company. It does not apply to the processing of personal data by third parties that may be connected with CASA LAPIN, including but not limited to:
- the processing of personal data for earning and redeeming points carried out by J Elite Co., Ltd. (“J Point”),
- the processing of personal data by affiliates or business partners of the Company where members may purchase products or use services to earn points or use membership benefits,
- or other external service providers involved in CASA LAPIN’s services.
As the Company has no control over such third-party processing of personal data, Members are advised to study the privacy policies announced directly by such third parties. The Company does not provide any agreement or guarantee regarding third-party processing of personal data.
Collection of Personal Data
The Company will collect data lawfully, transparently, and fairly, and only as necessary for the following purposes:
- Service Information: Full name, gender, date of birth, national ID number, phone number, and email.
- Additional Information (for certain registrations or services): gender, age, interests, credit card number, billing address.
- Technical Information: IP address, browser type, domain name, visited web pages, access times.
- Data from Other Legal Sources, including:
- Directly from your registration with CASA LAPIN, transactions, and communications with the Company.
- Automatically collected through the Company’s systems or transaction data analytics.
- From your previously registered information with the Company’s affiliates that you wish to transfer to CASA LAPIN.
- From affiliates or business partners where you purchase goods or services to earn or redeem points, including J Point.
Legal Bases for Processing Personal Data
The Company will process personal data under the following legal bases:
- Consent of the data subject
- Contractual necessity
- Legal obligations
- Legitimate interests
- Protection of life, body, or health
Purposes of Using Personal Data
The Company will use personal data for the following purposes:
- Service Provision & Transactions – identity verification, product/service delivery, payment processing, and membership account management.
- Communication & Promotions – informing about news, promotions, benefits, terms of service, and conducting surveys to improve services.
- Service Development & Improvement – data analysis, market research, and system enhancements to improve user experience.
- Legal Compliance & Risk Management – complying with legal obligations, preventing fraud, and maintaining system security.
- Additional Consent-Based Purposes – using personal data for other purposes for which prior consent has been obtained.
Processing of Personal Data
- During Account Registration
When registering for a user account, the Company will collect and use your data to provide services and transactions. If you already have an account with the Company’s affiliates, your phone number may be used to link and transfer data to CASA LAPIN. - Automatic Processing During Service Use
The Company may automatically collect technical and behavioral data to improve services and provide personalized benefits and communications. - Processing for Membership Benefits
The Company may collect transaction details (e.g., purchases, spending, coupon usage, and redemption history) for purposes such as:
- verifying eligibility and identity for membership benefits,
- calculating and managing reward points,
- complying with accounting and tax regulations,
- preventing fraud and protecting legal rights,
- analyzing member behavior and preferences to tailor communications and marketing,
- producing promotional materials or organizing events.
With consent, the Company may also send promotional information unrelated to membership benefits or share interests with affiliates for marketing purposes.
Disclosure of Personal Data
The Company will not disclose personal data except when necessary to fulfill its obligations. Disclosure may occur to:
- Affiliates/Business Partners – for point accumulation and redemption via J Point.
- External Service Providers – including platforms such as JID or JWallet, auditors, and consultants under confidentiality agreements.
- Government Authorities – as required by law, regulations, orders, or court rulings.
- With Member’s Consent – to persons designated by the member.
Cross-Border Data Transfer
Personal data transfers abroad will be conducted in compliance with applicable laws and only to destinations with adequate data protection standards.
Data Retention Period
The Company will retain personal data for as long as necessary to fulfill the stated purposes:
- For membership data: as long as the account is active, or for one (1) year after account cancellation.
- For legal obligations: as required by applicable law.
- For consent-based processing: until consent is withdrawn.
After the retention period, data will be deleted, destroyed, or anonymized.
Data Security Measures
The Company implements necessary measures to protect personal data against unauthorized use, loss, alteration, or disclosure. Measures include SSL encryption, employee training, and access control. Security measures are regularly reviewed to comply with legal requirements and industry standards.
Use of Cookies
The Company’s service channels use cookies to improve user experience. Users may disable cookies via browser settings.
Your Rights as a Data Subject
The Company respects your legal rights concerning personal data, including:
- Right to access and obtain a copy of your data.
- Right to correct or update personal data.
- Right to obtain data in a portable format and request data transfer.
- Right to object to data processing.
- Right to request deletion or anonymization of personal data when no longer necessary.
- Right to request restriction of data processing.
- Right to withdraw consent for data processing.
Contact Information
If you have any questions, suggestions, or complaints about this Privacy Policy or its implementation, please contact:
Brewing Happiness Co., Ltd.
Email: info@casalapin.com