Privacy Policy - 1xmc.com

Last updated: May 11, 2025

We, Sapri Co., Ltd., operators of the 1xmc.com website (hereinafter "the Site"), are committed to protecting your personal data in accordance with the European Union’s General Data Protection Regulation (GDPR), the Thai Personal Data Protection Act (PDPA), the California Consumer Privacy Act (CCPA), and any other applicable legislation. This Privacy Policy explains how we collect, use, share, and protect your personal data when you use the Site.

1. Data Controller

The data controller is:

• Name: Sapri Co., Ltd.
• Address: 93/82 Moo 10 - Chat Kaeo 5, Nong Prue, Bang Lamung, Chonburi 20150, Thailand
• Registration Number: 0205562012799

For any questions regarding data protection, please contact us via the contact form.

2. Data Collected

We collect the following types of data:

2.1. Data Provided by the User

• Registration Data: Username, email address, [other information, e.g., age, location, if applicable].
• Published Content: Messages, questions, answers, photos, videos, or other content you share on the Site.

2.2. Data Collected Automatically

• Browsing Data: IP address, browser type, pages visited, time and date of visits.
• Cookies and Similar Technologies: Data collected via essential, analytical, or advertising cookies (see Cookies section).

2.3. Data from Third Parties

We do not collect personal data from third parties, except if you log in via a third-party service (e.g., social media authentication), in which case we only receive the information you authorize (e.g., email, name).

3. Purposes of Processing

We use your data to:

• Manage your user account and your posts on the Site.
• Ensure the operation and security of the Site.
• Respond to your support requests or complaints.
• Analyze Site usage to improve its functionality (with your consent for analytical cookies).
• Provide personalized advertisements (with your consent, if applicable).
• Comply with our legal obligations (e.g., responding to authorities’ requests).

4. Legal Basis for Processing

We process your data based on the following legal grounds:

• Consent: For non-essential cookies and personalized advertisements.
• Contract Performance: To provide the Site’s services, such as managing your account.
• Legal Obligation: To comply with applicable laws (e.g., GDPR, PDPA, CCPA).
• Legitimate Interest: To ensure the Site’s security and improve its performance, unless your rights override these interests.

5. Data Sharing

Your data may be shared with:

• Hosting Provider: OVH SAS, located at 2 rue Kellermann, 59100 Roubaix, France, to store the Site’s data.
• Service Providers: Providers of analytical or advertising tools, only with your consent for non-essential services.
• Competent Authorities: In case of legal obligation or official request.

For EU users, any data transfer outside the EEA complies with the GDPR (e.g., standard contractual clauses). For Thai users, transfers comply with the PDPA.

6. Cookies and Similar Technologies

The Site uses cookies for:

• Essential Cookies: Necessary to maintain sessions and ensure security (no consent required).
• Analytical Cookies: To measure Site usage for improvement (consent required in the EU and Thailand).
• Advertising Cookies: To provide personalized advertisements (consent required, if applicable).

• EU: Non-essential cookies require your prior consent via the cookie banner.
• United States: You may opt out of data sales (e.g., advertising cookies) via the “Do Not Sell My Personal Information” option.
• Thailand: Non-essential cookies require consent in accordance with the PDPA.

Manage your preferences in the Cookie Settings.

7. Data Retention Period

We retain your personal data only for as long as necessary:

• Account Data: Kept as long as your account is active, unless you request deletion. In case of prolonged inactivity (over 12 months), we may delete your account after notification.
• Published Content: Kept as long as your account is active or the content remains relevant to the Site, unless you request deletion.
• Browsing Data: Kept for up to 12 months, except for essential cookies (deleted at the end of the session).
• Legal Obligations: Some data may be retained longer to meet legal requirements (e.g., tax records).

8. User Rights

You have the following rights regarding your personal data:

• Access: Obtain a copy of your data.
• Rectification: Correct inaccurate data.
• Deletion: Request the deletion of your data, unless a legal obligation requires us to retain it.
• Portability: Receive your data in a structured format (GDPR/PDPA).
• Objection: Object to certain processing (e.g., advertisements).
• Restriction: Limit the processingMalformed: Limit the processing of your data in certain cases.
• Opt-out of Data Sale (CCPA): Refuse the sale of your personal data.

To exercise these rights, contact us via the contact form. We will respond within the legal deadlines:

• 30 days for GDPR/PDPA requests (extendable to 60 days if complex).
• 45 days for CCPA requests (extendable to 90 days if necessary).

If you believe your rights are not being respected, you may lodge a complaint with the competent data protection authority (e.g., CNIL in France, PDPC in Thailand, or the California Attorney General).

9. Data Security

We implement technical and organizational measures to protect your data, such as:

• Data encryption in transit (e.g., HTTPS).
• Restricted data access to authorized personnel only.
• Regular backups and security audits.

However, no system is completely secure. In case of a data breach, we will notify you in accordance with applicable laws.

10. Changes to the Privacy Policy

We may update this Privacy Policy at any time. Changes will be posted on the Site, and significant changes will be notified to you by email. Your continued use of the Site after these changes constitutes acceptance of the new policy.

11. Contact

For any questions, contact us via the contact form.