Privacy Policy

Funny Farm Co., Ltd. ("the Company") places great importance on protecting your personal data and strictly complies with the Personal Data Protection Act B.E. 2562 (2019). This Privacy Policy is prepared to clarify details regarding the collection, use, and/or disclosure of personal data ("Personal Data Processing") of any natural or legal entity that accesses, registers, or uses the electronic platform services provided by the Company through the website, application, and related electronic systems (collectively referred to as "the Platform"), regardless of whether such use is as an actor, casting team, employer, or any other type of user.

The term "User" refers to any natural or legal person who accesses, subscribes to, or uses the Platform's services, directly or indirectly, as defined in the Company's Terms of Service. By accessing, subscribing to, or using the Platform's services, the User is deemed to have read, understood, and acknowledged this Privacy Policy and agrees to allow the Company to process the User's personal data as specified in this Privacy Policy, within the scope and conditions prescribed by law.

• 1. Scope of the announcement
• This Privacy Policy ("Notice") applies to the collection, use, and/or disclosure of personal information of all types of users who access, subscribe to, or use the electronic platform services provided by Funny Farm Co., Ltd., whether through the website, application, or any other related electronic system.
• This announcement covers all types of personal data of service users, including but not limited to actors, casting teams, employers, or any other type of user that the Company may define or endorse in the future, regardless of whether such users are located domestically or internationally.
• This notice does not apply to the collection, use, or disclosure of personal data by third-party websites, applications, or services linked to the platform, which are beyond the company's control. The company is not responsible for the practices or content of such third-party privacy policies. Users should review the privacy policies of such third parties directly.
• In the event that there are any other company regulations, agreements, or documents relating to the protection of personal data, they shall be interpreted and enforced in conjunction with this Notice. In the event of any conflict, this Privacy Policy shall prevail, unless expressly provided otherwise by law.

• 2. Sources of information
• The company may collect personal information of its users from the following sources:
• 2.1 Membership registration, enrollment, and platform usage, such as creating a user account, logging in, and using various functions on the platform via the website, application, or electronic system provided by the company.
• 2.2 Logging in or verifying your identity through third-party services (Third-Party Login) such as Facebook, Google, LINE, Apple, or other service providers supported by the platform, subject to the terms and privacy policies of those service providers.
• 2.3 Voluntary provision of information by service users, such as filling out forms, contacting for inquiries, submitting complaints, contacting customer service, or communicating through various channels provided by the company.
• 2.4 Obtaining information from third parties with the consent of the service user, or from whom the company has a legal basis for processing under the Personal Data Protection Act, such as payment service providers, business partners, or the company's technology service providers.
• 2.5 Automatic data collection through various technologies related to platform usage, such as cookies, log files, device identifiers, or application programming interfaces (APIs).
• 2.6 Collection of data related to subscriptions and payment, such as subscription history, payment history, or information necessary for managing the platform's membership system. The company does not act as an intermediary for receiving or transferring payments between users.
• 2.7 Collection of data related to the exercise of rights or compliance with the platform's terms and conditions, such as usage history, transactions, account suspension, service termination, or related legal actions.

• 3. Types of data collected
• 3.1 Identification and general information
• For example, full name, username, profile picture, photograph, phone number, email address, contact address, account information, and any other information provided by the user during registration, profile creation, or when using the platform's services.
• 3.2 Profile and portfolio information.
• For example, personal profiles, acting experience, portfolio, photos, videos, supporting media, information on skills, abilities, interests, or any other information that the actor chooses to showcase through the platform.
• 3.3 Platform Usage Data
• For example, login history, account settings, feature usage, searching, browsing profiles, creating or publishing job postings (casting calls/briefs), creating shortlists, and any other usage behavior related to the platform's services.
• 3.4 Communication Information
• Such as messages, contact via chat or communication tools provided by the platform, notifications, complaints, customer service contact, or communication through any other channel provided by the company.
• 3.5 Membership Application and Payment Information
• For example, package type, subscription duration, payment history, or transaction information related to the use of the platform's services. However, the company will not store credit card or payment information that is unnecessarily sensitive. Payments will be processed through external payment service providers authorized by law.
• 3.6 Technical data and equipment
• For example, IP address, device information, device identifier, operating system, browser type, log data, and any other technical information generated from accessing or using the platform.
• 3.7 Information necessary for compliance with laws and regulations
• For example, information used for identity verification as needed, information for fraud prevention, misuse or illegal activities, suspension or termination of user accounts, compliance with orders from government agencies, or enforcement of the company's rights and obligations under the terms of service.
• In cases where any data falls under the category of sensitive personal data according to the Personal Data Protection Act B.E. 2562 (2019), the company will collect, use, or disclose such data only when there is a legal basis or when the data subject has given explicit consent.

• 4. Data collected automatically
• In accessing and using the platform, the company may automatically collect users' personal information through various technologies for the purposes of providing services, analyzing, improving performance, security, and user experience of the platform. The information that may be collected includes:
• 4.1 Technical data and equipment
• For example, internet address (IP address), device identifier, device type and model, operating system, browser type, language, time zone settings, network information, internet service provider, log files, date and time of access, and any other technical information generated from accessing the platform.
• 4.2 Platform Usage Information
• For example, browsing history and page views on the platform, usage of various functions or features, searches, clicks, interactions with content, profiles or job postings, usage duration, and overall usage patterns. The company may use such data in a manner that does not reasonably identify users for the purpose of analyzing, improving, and developing the platform's performance.
• 4.3 Cookies and similar technologies
• The company may use cookies, pixel tags, log files, or other similar tracking technologies to remember user settings, analyze platform usage, improve system performance, and provide relevant content or functions. The use of cookies will be in accordance with the company's cookie policy, which is a separate document.
• 4.4 Linking data from multiple devices
• In cases where users access the platform from multiple devices, the company may link such usage data to analyze usage and prevent misuse. This action will not create any legal effect or significantly impact the rights of the users.
• The company will collect, use, and process data automatically collected only as necessary, within the framework of lawful purposes, and will not use such data for automated decision-making that materially affects the rights or freedoms of users, unless explicit consent has been obtained.

• 5. Purpose of using personal data
• The company will collect, use, and/or disclose users' personal information only as necessary and appropriate for the purposes of providing the platform services, conducting transactions, and complying with applicable laws, for the following purposes:
• 5.1 To provide services and manage the platform, including subscriptions, creating and managing user accounts, identity verification, accessing and using various platform features.
• 5.2 To display and manage the profiles, personal information, work, photos, videos, or other content of actors according to the privacy settings set by the users, and to facilitate the search, selection, and communication between users through the platform.
• 5.3 For communication with service users, such as notifications, providing information about service usage, answering inquiries, handling complaints, or providing technical assistance.
• 5.4 For the purpose of analyzing, researching, developing, improving, and enhancing the company's platform, features, and services, including analyzing user behavior in a manner that reasonably allows for the identification of users.
• 5.5 For the management of the membership system, service packages, and membership payments, including the preparation, verification, and recording of data related to the use of the platform's services.
• 5.6 For the security of the platform, to prevent, monitor, and suspend inappropriate use, fraud, violations of the Terms of Service, or actions that may be contrary to law or the rights of others.
• 5.7 To comply with laws, regulations, orders of government agencies or court orders, including the exercise or defense of the company's rights as permitted by law.
• 5.8 For any other purposes related to or consistent with the above-mentioned purposes, with the consent of the service user, or where the law permits such actions without requiring further consent.

• 6. Use of non-personal data
• The Company may collect, use, analyze, or process non-personal data or data that has been reasonably anonymized (e.g., statistical data, aggregated data, or data that cannot be traced back to any individual) for the purpose of analyzing, developing, improving, and enhancing the Company's platform, systems, features, or services.
• The use of information as described in the first paragraph shall be carried out in a manner that does not significantly affect the rights and freedoms of service users and shall not be considered as processing of personal data under the Personal Data Protection Act B.E. 2562 (2019).

• 7. Disclosure of personal information
• The company will not disclose users' personal information to any individual or entity that is not a user of the platform and is not subject to the company's terms of service ("third parties"). This excludes other types of users who have registered and accepted the platform's terms of service.
• The company may disclose personal information of users only if it obtains consent from the users or when it is necessary to provide services according to the terms of service. Displaying or disclosing personal information of actors to casting teams, producers, directors, or employers who have subscribed and accepted the terms of service does not constitute disclosure of information to third parties.
• 7.1 In cases where explicit consent is obtained from the service user, whether it is general consent or specific consent, it shall be in accordance with the criteria and conditions stipulated by the Personal Data Protection Act.
• 7.2 Where necessary for providing platform services, system management, fulfilling the Terms of Service, or facilitating user services, this may include disclosing information to external service providers contracted by the company to act on its behalf, such as IT service providers, hosting providers, payment system providers, or other support service providers. Such individuals must comply with appropriate data protection measures and the law, including displaying performer profiles, personal information, or work to other types of users within the platform, in accordance with the primary purpose of providing platform services and as agreed upon by the users in the Terms of Service.
• 7.3 Where it is necessary to comply with laws, regulations, orders of government agencies, or court orders, including where it is necessary to exercise, protect, or pursue legal action by the company.
• 7.4 In the event of organizational restructuring, mergers, business transfers, or changes in the company's legal status, which may involve the transfer of personal data to another legal entity, the company will ensure that the recipient of such data strictly complies with the Personal Data Protection Act and this Privacy Policy.
• The company will not disclose users' personal information for any purpose other than that which is inconsistent with the purposes stated, unless additional consent is obtained from the user or it is permitted by law.

• 8. Personal tracking technology (Cookies)
• 8.1 Use of cookies and similar technologies
• The company uses cookies, pixels, log files, software development kits (SDKs), and other similar tracking technologies for the purposes of providing platform services, authentication, setting recognition, usage analysis, system performance improvement, security, and prevention of misuse.
• 8.2 Types of Cookies
• The cookies and tracking technologies used by the company may include, but are not limited to:
• (a) Cookies that are necessary for the operation of the platform.
• (b) Cookies for analytics and performance improvement.
• (c) Security and anti-fraud cookies
• (d) Cookies for presenting content and experiences that are appropriate for users.
• 8.3 Use of third-party cookies
• The Company may use or allow external service providers, such as data analytics providers, advertising providers, or technology providers, to use cookies or tracking technologies on the Company's platform for the purpose of providing services, analyzing usage, developing the platform, or displaying appropriate content and advertisements.
• The company will select external service providers with appropriate data protection measures and require such providers to comply with applicable data protection laws. The use of cookies and processing of personal data by such external service providers may be subject to their individual privacy and cookie policies. Users should review the privacy and cookie policies of these external service providers for further information.
• The company will provide information about the types of cookies, their purposes, and user options for managing cookies in the Cookie Policy or the cookie management tool on the platform, so that users can review and give their consent as required by law.
• 8.4 Cookie Management
• Users can configure their device or browser to refuse, delete, or restrict the use of certain or all types of cookies. Disabling certain types of cookies may result in some platform or functions not functioning fully.
• 8.5 Cross-device data linking
• In cases where users access the platform through multiple devices, the company may link usage data for the purpose of maintaining service continuity, preventing fraud, and improving user experience, without disclosing unnecessary personal information.
• 8.6 Cookie Policy
• Further details regarding the types of cookies, their storage duration, and how to manage them may be set out in the company's cookie policy, which is considered part of this privacy policy.

• 9. Data retention and the rights of data subjects
• 9.1 Methods of storing personal data
• The company will store your personal data in document and/or electronic form, using servers or cloud systems located within or outside the country, under appropriate security measures and in compliance with applicable data protection laws.
• The user acknowledges and agrees that the Company may transfer or store personal data overseas through cloud service providers or business partners, and that the Company will provide data protection measures that meet or exceed the standards required by Thai personal data protection laws.
• 9.2 Duration of personal data retention
• The company will retain your personal data for only as long as necessary for the purpose of providing services or while you maintain a relationship with the company, such as as a user of the platform or using the company's services. Once such purposes are exhausted, the company will delete, destroy, or anonymize your personal data within a reasonable timeframe as necessary for the processing purposes or as required by applicable law, whichever occurs later.
• The company may retain personal data for a longer period than stated above if required by law, or if such data is still necessary for accounting audits, tax purposes, claims, defense, or legal proceedings.
• 9.3 Rights of Data Subjects
• Under the Personal Data Protection Act, you, as the data subject, have the following rights:
• 9.3.1 Right to Withdraw Consent: You have the right to withdraw your consent to the collection, use, or disclosure of your personal data at any time.
• 9.3.2 Right of Access: You have the right to request access to and receive a copy of your personal data from the company, including the source of that data.
• 9.3.3 Right to Data Portability. You have the right to request that your personal data be in a format that allows for automatic transfer and/or transfer to another data controller where technically possible.
• 9.3.4 Right to Object: You have the right to object to the processing of your data if that processing is in the legitimate benefit of the company or another person.
• 9.3.5 Right to Erasure/Destruction You have the right to request the deletion, destruction, or anonymization of your personal data if it is no longer necessary or if it is being processed unlawfully.
• 9.3.6 Right to Restriction of Data Processing. You can request the company to temporarily suspend the use of your data while your request for data correction or deletion is being reviewed, or in cases where data should be deleted but you wish to have it suspended instead.
• 9.3.7 Right to Rectification: You have the right to request that your personal data be corrected to be accurate, up-to-date, and not misleading.
• 9.3.8 Right to Lodge a Complaint: If you believe that the company collects, uses, or discloses your personal data in violation of the law, you have the right to file a complaint with the Personal Data Protection Commission (PDPC) or the relevant legal authority.
• 9.4 How to exercise the rights of the data subject
• You can exercise these rights by contacting the Data Protection Officer (DPO) using the contact information provided in the last section of this policy. The company may request additional documents or proof of identity before processing your request.

• 10. Security of personal data and contact
• 10.1 Measures for maintaining the security of personal data
• The company prioritizes the security of your personal data and will implement appropriate measures based on the principles of confidentiality, integrity, and availability to prevent data loss, unauthorized access, use, alteration, modification, or disclosure.
• The company employs security measures at all levels: administrative safeguards, technical and system safeguards, physical safeguards, and includes access control systems and personnel training on data privacy in accordance with applicable laws.
• 10.2 Reporting a Personal Data Breach
• In the event of a personal data breach, the company will notify the Personal Data Protection Commission (PDPC) within 72 hours of becoming aware of the incident, or as far as is possible. If the breach poses a high risk to your rights and freedoms, the company will promptly notify you of the issue and provide remedies through the channels you have provided, such as the company website, SMS, email, or telephone.
• 10.3 Updating the Privacy Policy
• The user acknowledges and agrees that the Company has the right to amend, revise, change, or supplement this Privacy Policy at any time. The Company will notify the user through appropriate channels as it deems necessary. The user's continued access to or use of the Company's services after the date of publication of the amended Privacy Policy shall be deemed as notification of and acceptance of the amended Privacy Policy.
• 10.4 Contact Channels
• If you have any questions about our privacy policy or wish to exercise your rights as outlined in the previous section, you can contact the company at:
• Website: TODO
• Email: TODO
• Telephone: TODO
• Data Protection Officer (DPO): TODO