Privacy Policy
Shippop Company Limited (“Shippop” or “we”) takes the protection of your privacy and the personal data of those under your care or custody very seriously. We have therefore developed this Privacy Policy to explain our practices regarding the collection, use, and disclosure of your personal data, including your rights as a data subject under applicable data protection laws. This Privacy Policy only covers information we receive from you through your use of our services or platforms controlled by us, regardless of the country or region in which we operate.
This Privacy Policy is part of the Terms of Service. Please review this Privacy Policy carefully before using the Service to understand our policies and practices regarding your personal data and how we treat it. Each time you use the Service or access our Platform, you are deemed to have read and agreed to this Privacy Policy.
1. Collection of personal data
1.1 Persons whose personal data we collect
Under this Privacy Policy, we collect and process the personal data of the following individuals:
1) Our users or customers, which include people who use our services or purchase products from us, people who express interest in our services or products, people who register as members, people who participate in activities organized by us, people who visit, contact or use our existing or potential future channels, including but not limited to using our services through the website www.shippop.com, applications, and any other similar persons.
2) Directors, employees, contact persons, authorized representatives or persons authorized to act on behalf of the legal entity of the customer or service user in the case that the service user or customer is a legal entity, and including persons whose personal information appears in various documents related to the relationship between you and us. In this case, we recommend that you make such related persons aware of this Privacy Policy.
3) Individuals who are not our direct service users or customers, but we have a need to collect and process their personal data because they are involved in transactions between you and us, such as package recipients, package delivery people, etc.
1.2 Types of personal data we collect
We are required to collect the following personal data from you:
1) Information that can identify an individual, such as full name, photograph, gender, ID card, age, passport.
2) Information about the store, such as store name, store logo
3) Contact information such as telephone number, email address, address, place of residence, place of work.
4) Parcel and parcel insurance information such as shipping record creation information, parcel number, parcel label, delivery note/parcel, parcel amount.
5) Payment information such as bank account information, bank account page, credit card number, cash on delivery amount, receipt.
6) Information about access to or use of Chippop services and platforms, such as IP addresses, cookies.
7) Information that you inform, fill out, send or upload to us, such as your user name (User Name), password (Passcode), email address (Email Address), destination data file.
8) Other social media account information in the event that you create a user account through such social media accounts, such as Facebook.
9) Information associated with our platform, such as browser type, domain name, web page records of the website that the user visits, access times and referring website addresses, geographic information.
10) Your suggestions or comments
11) Any other information of the owner of personal data in the same manner as announced by the Personal Data Protection Committee.
We have collected the above personal information from various channels as follows:
1) Filling out information, submitting documents, registering or applying for membership through our channels both online and offline.
2) Your use and visits through our system, website or application, including the use of cookies or other tracking programs to collect personal information.
3) Purchasing products and/or using our services both online and offline.
4) Any transactions, contracts, agreements or documents of the same nature between you and us.
5) Conversations and recordings of conversations in various formats between you and us to inquire about information, services or assistance with use.
6) Claiming parcels or insuring parcels
7) Information received from third parties, such as service providers to us, our business partners, public sources that have information about your business.
8) Connections with Facebook, where we may ask you to enter your Facebook password, we will not collect or store that password.
9) Customer opinion survey
10) Participation in our competitions or promotions.
11) Advertising and promoting our products or services through online and offline channels.
12) Any other channels of ours that currently exist or may exist in the future.
In the event that you provide us with personal data of individuals related to you, such as directors, employees, or contacts, you represent that you have informed such individuals of this Privacy Policy and that you have the right to provide such personal data, including authorizing us to use such personal data in accordance with this Privacy Policy.
For information collected from you through third parties, websites or other channels not provided by us, we recommend that you review the Privacy Policy of such parties, websites or channels to understand how they collect, use or disclose your personal information. We cannot guarantee the statements or guarantee any actions as announced by such parties, websites or channels, and we are not responsible if such third parties, websites or channels do not comply with their announced privacy policies.
In the event that you do not wish or are unable to provide certain types of information to us, we may not be able to enter into a contract with you or perform our duties towards you, or you may not be able to use all or part of the Shippop Services or Platform, as the case may be, or you may not be able to fully benefit from us.
2. Use of personal information
We will collect, retain, update, share, process and use the above information only as necessary under our Terms of Service, this Privacy Policy, the law and your consent for the following purposes:
1) To be used for verification and authentication, including user account registration.
2) To use in processing your requests before entering into a contract or performing contractual duties towards you or our services, such as providing a collection of shipping service providers and delivering parcels by our partner shipping service providers, making payment for services, providing parcel insurance and claim services, checking parcel status.
3) For the performance of duties in carrying out our public interest missions or in exercising state powers granted to us.
4) For our or another person's legitimate interests, unless such interests are overridden by your fundamental rights in personal data, such as investigating and preventing illegal activities, managing our business, protecting and maintaining the security of our services or systems.
5) To establish legal claims, to comply with or exercise legal claims, or to raise legal defenses, such as compliance with measures to prevent and suppress narcotics according to the Narcotics Prevention and Suppression Act B.E. 2519.
6) For contact, inquiries, customer care, or assistance with use.
7) To facilitate you and to comply with your requests, such as searching for parcel delivery service points, logging into the system or using the service without having to fill in repeated information, and preparing various reports.
8) For the purpose of presenting information, public relations, sales promotion or marketing activities such as sending news, publicizing our services or products, promotions and special privileges.
9) For research, analysis, surveys, classification and forecasting of statistical, marketing and behavioral data related to the business or related activities (Marketing and Data Analysis), which allows us to know you better and respond to your needs correctly.
10) To increase efficiency in managing, controlling quality and developing our business, products, services and systems and to further develop our products.
11) For restructuring, merger, sale, transfer of business or other assets, investment in our business and other similar actions, where disclosure and transfer of your personal data is part of such transaction.
12) To carry out other purposes permitted by law, such as the purpose of preventing or suppressing dangers to the life, body or health of individuals, etc.
13) For the purpose of providing you with the Company's products, services and objectives or benefits that are appropriate to you, we will conduct research, compile statistics, analyze or develop such products, services and benefits.
14) For marketing purposes, we may disclose your personal information and any information to the Company's affiliated companies and trusted business partners, including the Company's affiliated companies and insurance business group, namely TQM Alpha Public Company Limited, for the purpose of offering or providing products and services, and providing services and benefits to you. By doing so, the Company's affiliated companies and trusted business partners will conduct research, compile statistical analysis, or develop products, services, and benefits that are appropriate for you.
In some cases, we may need to ask you to provide a photo or copy of your ID card to verify your identity. This may result in us receiving sensitive personal data that is not necessary for us to fulfill our purposes, such as religious information on your ID card. We would like to inform you that you have the right to blackout such data before disclosing it, and we do not intend to retain or process such sensitive personal data.
If we need to obtain your consent to process your personal data, we will obtain your consent before or at the time of processing such personal data under the conditions required by law. If we collect, retain, update, share, process and use your personal data outside of the above purposes, we will update this Privacy Policy and, where necessary, we will obtain your additional consent.
In this case, if the owner of personal data is not yet of legal age and has no ability to enter into legal transactions, the parents or guardians of such person must provide consent to the use of such personal data.
3. Disclosure of personal information
We may disclose your personal data to others with your consent or where permitted by law, as follows:
3.1 Internal management of the organization
We may disclose your personal data as necessary to carry out the purposes set out above to persons within the Company, including executives, directors, employees, workers and/or personnel.
3.2 Service Provider
As necessary to operate various aspects of our business, such as telecommunications, data storage, technology services, payments and settlement systems, logistics, parcel delivery, procurement, finance and accounting, marketing, insurance, product or service development, auditors, or any other services that are beneficial to you.
3.3 Business partners and allies
We may disclose certain information to our business partners and associates, such as our logistics or insurance service providers, for the purpose of liaising with you, providing you with services and offering you benefits. We will disclose your personal information to them on a need-to-know basis.
3.4 Business transfer
We may disclose information, including your Personal Data, in connection with a corporate restructuring, merger or sale, or other transfer of assets, provided that the transferring party treats your information in a manner consistent with this Policy and applicable data protection laws.
3.5 Actions in accordance with laws or orders of government agencies
We may disclose your information to comply with the law, to enforce legal obligations, to comply with a court order, subpoena, government agency order, or other legal process.
3.6 Outsiders
We may disclose personal information to third parties at your request or as permitted by law.
In the event that we disclose your personal information to another party or entrust another party to provide services related to our business, such as parcel delivery services, we will require that such party to keep the personal information confidential and will put in place appropriate measures to protect the personal information disclosed and to comply with personal data protection laws.
4. Transfer of personal data abroad
We may disclose or transfer your personal data to individuals, organizations, cloud computing systems or servers located in countries or abroad with which we have contracted. We will take measures to ensure that any transfer of your personal data to the destination country meets an adequate standard of data protection, or as otherwise required by law.
5. Methods for storing personal data
We will retain your personal data in both paper and electronic form by storing your personal data on our company servers in Thailand and/or on our company servers abroad, organizations, cloud computing systems or servers located in countries or abroad with which we have entered into contracts. We will take measures to ensure that the transfer of your personal data to the destination country has an adequate standard of personal data protection or in other cases as required by law.
6. Period of storage of personal data
We will retain your personal data for as long as necessary for the duration of your service or relationship with us and for 10 years after you cease to use our services or relationship with us, or for as long as necessary to fulfil the purposes related to this policy. Retention may be required after that period or longer if we are still lawfully able to process the data. We will delete, destroy, or anonymize your personal data in accordance with our data destruction procedures or legally required standards when it is no longer necessary or when that period has expired.
7. Accuracy of your personal data
To ensure that our services or compliance with the terms of any contract or agreement is up-to-date and effective, you will ensure that your personal data in our possession is current, complete, and accurate. You will notify us when your personal data changes or you can update or correct your personal data yourself through our website or application.
8. Your rights regarding personal data
You have the right to do the following:
8.1 Right to withdraw consent If you have given your consent, we will collect, use or disclose your personal data, whether the consent you gave was before the effective date of the Personal Data Protection Act or after that date. You have the right to withdraw your consent at any time via the privacy management menu or by notifying us.
8.2 Right to be informed You have the right to be informed about the details of the collection, use and disclosure of personal data, including the purposes for processing the collected personal data, the period for which it is kept and the channels for contacting the personal data controller.
8.3 Right to access You have the right to access your personal data held by us and to request that we provide you with a copy of that data, including to request that we disclose how we obtained your personal data.
8.4 Right to data portability. You have the right to request that we have prepared your personal data in a format that is readable or usable by automated tools or devices and that we can use or disclose the personal data by automated means, as well as the right to request that we transmit or transfer the personal data in such a format to another personal data controller where this is feasible by automated means, and to request that we transmit or transfer the personal data in such a format directly to another personal data controller, unless this is not possible due to technical reasons.
8.5 Right to object You have the right to object at any time to the collection, use or disclosure of your personal data if the collection, use or disclosure of your personal data is necessary for the performance of our legitimate interests or those of another person or entity, to the extent that you could reasonably expect it to be, or to carry out a task carried out in the public interest.
8.6 Right to erasure/destruction You have the right to request the erasure or destruction of your personal data or to anonymize your personal data if you believe that your personal data has been collected, used or disclosed unlawfully or that we no longer need to retain it for the purposes related to this Policy, or when you have exercised your right to withdraw consent or exercise your right to object as stated above.
8.7 Right to restriction of processing You have the right to request that the use of your personal data be temporarily suspended in cases where we are investigating your request to exercise your right to correct your personal data or to object, or in any other case where we no longer need to and must delete or destroy your personal data in accordance with relevant laws, but you request that we suspend its use instead.
8.8 Right to rectification You have the right to request that your personal data be corrected to ensure that it is accurate, current, complete and not misleading.
8.9 Right to lodge a complaint You have the right to lodge a complaint with the relevant legal authority if you believe that we have collected, used or disclosed your personal data in a manner that violates or does not comply with relevant laws.
You may exercise your rights as a data subject above by contacting Shippop as detailed at the end of this policy. If we deny your request, we will inform you of the reasons for the refusal within 30 days via various channels, such as text message (SMS), email, telephone, letter, etc.
9. Control of your personal data
In order to preserve your privacy and subject to your consent, you have the right to choose whether to allow or share your personal information or may choose to refuse to receive any information, promotions or marketing materials from Shippop's services or products. Simply fill out your intentions to inform Shippop.
10. Security of personal data
To maintain the confidentiality and security of your personal information, we have established internal regulations to determine the rights to access or use your personal information, and to maintain the confidentiality and security of certain sensitive information, such as credit card numbers and bank account details. We also provide secure communication channels for such information by encrypting it, such as by using the Secure Socket Layer (SSL) protocol. In addition, to prevent loss, access, use, alteration, modification, or disclosure, we have established measures to maintain the security of personal information that are not less than those required by law.
11. Use of cookies
Cookies are small text files placed on your computer when you browse the Internet or visit a website. We may use cookies or similar technologies to enable continued access, maintain security, improve the efficiency of our Chippop service, evaluate your use of our service, and perform statistical analysis. You can set your browser to block cookies or other tools. However, disabling or limiting the use of cookies may prevent you from fully using our Chippop platform or services.
11.1 Types of cookies
1) Strictly Necessary Cookies
These cookies are essential to provide you with the services on the platform and enable you to use its essential features. These cookies help with user authentication and help prevent account fraud. Without these cookies, we would not be able to provide you with the services. We therefore need these cookies to provide you with the services.
2) Functional Cookies
These cookies allow us to remember choices you make when using the Platform, such as remembering your last created transport details. These cookies are persistent and provide a more convenient experience for you and facilitate the filling out of information the next time you use the Platform. If you no longer wish to use these types of cookies, you can delete them yourself through your browser.
3) Analytical/Performance Cookies
These cookies allow us to recognise and count the number of users on our platform and to understand how users use our website. This helps improve how our platform works and ensures users can find what they are looking for more easily.
4) Advertising Cookies
These cookies remember your visits to our website, your visit locations and your interests to display relevant advertising to you. These cookies help us to measure the effectiveness of our marketing efforts and present advertising that may be of interest to you. In using these cookies, we may share this information with our third-party business partners, subject to your consent.
11.2 Cookie Management
You can set your browser not to accept our cookies by selecting the cookie settings menu on our platform or by going to Manage Privacy.
12. Notification of personal data breach
In the event of a breach of your personal data, we will notify the Office of the Personal Data Protection Committee without delay, within 72 hours of becoming aware of the breach, to the best of our ability. In cases where the breach poses a high risk of impacting your rights and freedoms, we will notify you of the breach and provide you with remedial measures without delay via various channels, such as our website, text messages (SMS), email, telephone, and mail.
13. Privacy Policy Update
Shippop may update or amend this Privacy Policy to reflect changes in our services and operations, or to comply with applicable law. We therefore encourage you to review this Privacy Policy each time you visit our Platform or use our Services. Your continued use of our Platform or Services after we have notified you of such changes constitutes your acceptance of the changes to this Privacy Policy. We may request your additional consent if required by applicable law.
14. Contact channels
If you have any questions, suggestions, or comments regarding this Privacy Policy or wish to exercise any of your rights, we are happy to answer your questions and welcome any suggestions or feedback that will be helpful in improving Chippop's services. You can contact us through the following channels:
This Policy was last modified and is effective as of March 4, 2025.