SF Corporation Public Company Limited (the “Company”) will do our best to ensure the safety and security of your personal information. We prioritize and value your rights as a data owner. Your personal information will be collected, stored, and used with your consent. We will only collect necessary personal information to provide a service for your benefit and convenience. As a public company, we ensure that we will follow all the related rules, guidelines, and regulations for the best measures to safeguard all personal information.
To follow the guidance to collect, store and use your personal data rightfully and safely, we will notify all related stakeholders of our process of personal information and our data protection policy to the owners, along with their rights and how they can exercise them accordingly.

SF Corporation Public Company Limited (the “Company”) intends to inform this Online Sale Privacy Notice to the client that purchase products (including without limitation movie ticket and other merchandises) from the Company via the online channel (the “Client”). Once the Client agreed to purchase the Company’s products and submit the personal data of the relevant Client to the Company via those online channels for the purpose of such purchasing, the Company shall deem that the Client accepts and acknowledge this Privacy Notice. In case the Client do not agree to this Privacy Notice, the Company would like to reserve the right to refuse to process the Client’s purchase request since the processing of the personal data of the relevant Client as defined under this Privacy Notice is critical and necessary for the performance of the Company’s obligations to the Client. The Company may adjust and amend this Privacy Notice from time to time to be in consistent with the relevant laws and regulations and to reflect the actual services performed by the Company to the Client. The Company will notify the Client of any change or amendment made through various communication channel of the Company.

Personal Data being Processed
The Client’s personal data that the Company would need to process in the performance of the sale transaction for the benefit of the Client include the following data:
1. General information relating to the relevant Client and the information needed for the delivery including full name, telephone number, address or other contact information;
2. Client’s purchase transaction details, including transaction logs, details of the relevant Client’s purchase order and payment information made by the Client to the Company (i.e. bank account or credit card information used for the payment of purchased products);
3. Client’s technical identifier information, including IP Address, browser setting and configuration information and cookies that have been used to track the Client’s behavior on our online platform; and
4. Any other personal data that the Client may submit to the Company with consent granted.

Objectives for the Personal Data processing
The Company will only process the Client’s personal data for the following purposes:
1. To confirm the purchase order, payment evidence and to contact for the delivery of products to the relevant Client;
2. To build and improve the business relationship that the Company may have with the Client, including to facilitate the next purchase by the Client and to request for the Client’s feedback and satisfaction; provided that the Company will only process the personal data to the extent that will not cause excessive impact on the Client’s right as the data subject;
3. To manage the communication and contact made by the Client to the Company (for instance, in the queries and responses as well as the feedback or complaint management process);
4. To perform any legal obligations that the Company may have, in particular for the tax and accounting legal obligations; and
5. With prior consent given by the Client, to contact the Client to present any advertisement or marketing materials that the Client may be of any interest upon the receipt of the consent from the Client.

The Company would need to process and retain the Client’s personal data for the defined purposes throughout the period of time that the Company would need to process the purchase transaction for the relevant Client or the timeline that the relevant laws define; provided that in case any personal data is being processed based on consent, the Company would retain such information until the Client withdraws their consent.

Disclosure of the Personal Data
Generally, the Client’s personal data shall be kept confidential by the Company; provided that in these circumstances the Company may need to disclose and share the Client’s personal data with these following persons: (i) the third party service providers whom the Company has engaged to perform any specific service or obligations to the relevant Clients; and (ii) the governmental authorities that the Company may be subject to the legal obligations to disclose the Client’s personal data to. The Company commits to only disclose and share the Client’s personal data on the necessary and need-to-know basis. Company’s Representations to keep the Information Security of the Personal Data The Company represents to implement the appropriate information security of the Client’s personal data to prevent unauthorized access, use, amendment or disclosure of those personal data and the Company commits to review the information security measures from time to time in order to ensure the compliance with the best industry practice and relevant laws.

SF Corporation Public Company Limited (the “Company”) would like to inform you as the SF+ member that have registered with the Company (the “Member”). Upon your enrollment as the SF+ member (with the adds-on package (if any)) that the Member may have purchased, the Company shall deem that the Member have already accepted the terms and conditions defined under this Privacy Notice. In case the Member do not agree with the terms of this Privacy Notice, the Company reserve the right to reject your membership enrollment or reject to provide certain privilege or benefits of the relevant Member defined pursuant to the Member terms and conditions that the Company may define since the process of these personal data as defined hereunder are critical and necessary for the provision of the Member’s benefit and privileges to the Member.
This Privacy Notice shall only be applicable to the process of personal data of SF+ Member by the Company only without being applicable to other services; the sale of products or merchandises; or any other services to be performed by the Company to the Member. In addition, this Privacy Notice shall not be applicable for the process of the Member’s personal data by other third party that the Company do not have any control over. For those process for other purpose or by other person, the Member would be recommended and required to study the separate privacy notice prepared and announced for those purposes or by those third party data controller.
The Company may adjust or make amendment to this Privacy Notice any time in order to assure the compliance with the best industry and practice as well as to reflect the adjusted benefits and privileges of the Member that the Company may make; provided that the Company will notify the Member of those amended privacy notice through various communication channels that the Company may have with the relevant Member.

Personal Data being Processed
The Member’s personal data that the Company would need to process in the assessment of the Member qualification and the provision of the Member’s benefits and privileges to the relevant Member include the following data:
1. Direct personal data of the Member, including without limitation name on the identification card (i.e. full name, address) and other information that the Member is providing on the membership application form; provided that it should be noted that these personal data are important and necessary to assess the Member’s qualification as defined in the Company’s terms and conditions;
2. Contact information, including telephone number and email;
3. Membership fee evidence and the transaction information of all the purchase order made by the Member (i.e. payment evidence, for instance, bank account or credit card information); provided that it is understood that those transaction information will be used in the point calculation and the provision of special discount to the relevant Member pursuant to the terms and conditions defined by the Company from time to time; and
4. Other personal data that the Member may submit to the Company’s processing.

Objectives for the Personal Data processing
The Company will only process the Member’s personal data for the following purposes:
1. To assess and verify the Member’s qualification as submitted during the enrollment process pursuant to the terms and conditions defined by the Company from time to time;
2. To verify the Member’s qualification for the exercise of any Member’s benefit and privileges that include (1) point collection from the ticket and merchandise purchase or point redemption; (2) discounted benefits or the participation in the special event hosted by the Company; and (3) notification and newsletter dissemination relating to the privileges and events hosted specifically for the Member that the Company will communicate to the Member through the selected and preferred channel and the Company commits to only process the Member’s personal data strictly to provide relevant benefits and privileges to the Member pursuant to the terms and conditions defined;
3. To build and improve the business relationship that the Company may have with the Client, including to facilitate the next purchase by the Client and to request for the Member’s feedback and satisfaction; provided that the Company will only process the personal data to the extent that will not cause excessive impact on the Member’s right as the data subject;
4. To manage the communication and contact made by the Client to the Company (for instance, in the queries and responses as well as the feedback or complaint management process);
5. To perform any legal obligations that the Company may have, in particular for the tax and accounting legal obligations; and
6. With the relevant Member’s specific consent given, to perform any other process.

The Company would need to process and retain the Member’s personal data for the defined purposes throughout the membership terms of each Member and in order to facilitate the Member in case of any early termination of the membership, the Company reserve the right to store the Member’s personal data for another 1 calendar year after the termination in case the Member and in case that the Company would be obliged to process any personal data pursuant to any relevant laws, the Company would need to store the Member’s personal data for the period of time as prescribed under those laws.

Disclosure of the Personal Data
Generally, the Member’s personal data shall be kept confidential by the Company; provided that in these circumstances the Company may need to disclose and share the Member’s personal data with these following persons: (i) the third party service providers whom the Company has engaged to perform any specific service or obligations to the relevant Member; and (ii) the governmental authorities that the Company may be subject to the legal obligations to disclose the Member’s personal data to. The Company commits to only disclose and share the Member’s personal data on the necessary and need-to-know basis.

Company’s Representations to keep the Information Security of the Personal Data
The Company represents to implement the appropriate information security of the Client’s personal data to prevent unauthorized access, use, amendment or disclosure of those personal data and the Company commits to review the information security measures from time to time in order to ensure the compliance with the best industry practice and relevant laws.

SF Corporate Public Company Limited (the “Company”) as the host of event that you are joining (the “Event”) would like to inform you that for the purpose of the registration and confirmation of your rights to participate in the Event, the Company would need to collect, compile and use your personal data as follows: full name, contact information (i.e. telephone number and email). In this regard, the Company commits to protect the information security of the personal data that you have provided to us during the Event registration and we will not disclose your personal data to any person, except to the third party service providers whom the Company has engaged to perform certain services relating to the Event for your benefit. In addition, the Company undertakes to delete or de-identify your personal data by the end of each calendar year following the completion of the Event after the completion of the corporate assessment, audit and reporting requirements.

SF Corporation Public Company Limited (the “Company”) would like to inform the participant to this campaign that the Company is hosting (the “Campaign”) that the Company would need to collect, compile and use the personal data of the participant including the full name and contact information as well as any other personal data that you may be required to provide as defined in the Campaign conditions (i.e. your selfie or portrait photos). Your personal data would need to be processed in order to contact or coordinate with you during the Campaign period and to assess your qualifications to confirm if you win the Campaign. In case you win the Campaign, the Company would need to collect your identification card information for the issuance of the tax invoice and for the tax and accounting purpose of the Company. Also, the Company would reserve the right to use the photo of you as the Campaign participant or winner in the marketing and advertisement materials to be displayed in various communication of the Company or other affiliated media channels for the period of time that the Company may deem appropriate for their business operation. The Company hereby commits to protect the information security of the personal data that you have provided to us and we will not disclose your personal data to any person, except to the third party service providers whom the Company has engaged to perform certain services relating to the Campaign for your benefit.

SF Corporation Public Company Limited (the “Company”) would like to inform you as the user of the Company’s website (the “Website”) that the Company would need to use cookies in the functionality of the Website in order to guarantee the smooth service to be provided on the Website and in order to ensure your convenience of accessing and using the Website. Various types of Cookies, text files being stored in the User’s browser, that the Company is using to store information relating to the User’s behavior and the internet usage of the User. For the performance of the Platform, the Company is using 2 types of Cookies as follows:
1. Strictly Necessary Cookies, cookies that are critical for the operation of the Platform and the secure service provisions to the User;
2. Other Cookies: including (i) Functionality Cookies, cookies wit the function of recording the Platform preference and setting that the User made (i.e. user account information, language, font and display functions) that would assist the Company in customizing the Platform display that match for each individual User as previously set; (ii) Performance Cookies, cookies with the function of assessing the performance of the Platform in each component; provided that it should be noted that these cookies may be operated by the third party service provider; and (iii) Advertising Cookies, cookies with the function of recording the User’s behavior on the Platform for the purpose of recommending the products and services that may be of the User’s interests; provided that it should be noted that these cookies may be operated by the third party service provider.
For the Strictly Necessary Cookies, the Company would need to inform you that the Company would need to use this type Cookies in order to provide the services and functionality of the Website in full efficiency. Without this type cookies, the Company would not be able to provide service to you; and then for other types of Cookies. Upon the obtainment of your consent, the Company would need those cookies for the specific purposes or functionality of each type of cookies. Despite the usefulness of the cookies on the Platform operation and the service provision to the User, the User can consider clearing the stored cookies on their own browser at their discretion. It should be remarked that the deletion of the stored cookies, however, may affect the Platform efficiency to some extent.

The Company respect the Client’s statutory rights as the data subject under the relevant laws over the relevant Client’s personal data, including in particular the following rights: (1) the right to request for access or copy of their personal data as well as the right to revise or rectify the personal data; (2) the right to request for data portability; (3) the right to object to any process of their personal data; (4) the right to request for deletion or de-identification of the Client’s personal data once there is no further necessity; (5) the right to request for the suspension of the Client’s personal data processing; or (6) the right to withdraw consent. In case the Client would like to exercise any of these rights, please feel free to contact the Company as the defined contact channel and the Company will consider and get back to the relevant Client’s request within 30 days after the receipt of the Client’s due request.

Contact Channel
SF SMART CALL 1349