Privacy Policy

XY Global TH Privacy policy

I. Introduction

Welcome to the XY Global TH platform operated by XY Global TH (Singapore) and its affiliates (collectively referred to as "XY Global TH," "us," "our," or "we"). XY Global TH is committed to fulfilling its responsibilities under applicable privacy laws and regulations ("Privacy Laws") and pledges to respect our XY Global TH website and mobile application ("Platform") (where we refer to the Platform and the services described on it collectively as "Services"). Users are individuals who register an account with us for the purpose of using the Services, including buyers and sellers (collectively referred to as "Users," "You," or "Your"). We recognize the importance of the personal data you entrust to us and believe that it is our responsibility to manage, protect, and process your personal data properly. This Privacy Policy ("Privacy Policy" or "Policy") is designed to help you understand how we collect, use, disclose, and/or process any personal data about you that you provide to us and/or which we own, both now and in the future, and to assist you in making informed decisions before providing any personal data to us.

"Personal data" or "personal data" means, whether true or not, data about an individual that can be identified from the data, or data that can be identified from the data and other information that the organization has or may have access to. Common examples of personal data include names, ID numbers and contact information.

By using our services, registering your account, accessing our platform, or visiting our services, you acknowledge and agree to the practices, requirements, and/or policies outlined in this Privacy Policy, and you hereby consent to us collecting, using, disclosing, and/or processing your personal data as described here. If you do not agree to the handling of your personal data as described in this Privacy Policy, please do not use our services or access our platform. If we change our Privacy Policy, we will notify you, including by posting these changes or revised Privacy Policies on our platform. We reserve the right to modify this Privacy Policy at any time. By continuing to use the services or platform, including placing any orders, you acknowledge and accept the changes made to this Privacy Policy.

This policy applies together with other notices, contract terms and consent terms applicable to our collection, storage, use, disclosure and/or processing of your personal data and is not intended to override such notices or terms unless otherwise expressly stated by us.

5. Unless otherwise expressly provided, this policy applies to both the buyer and the seller using the Service.

When does XY Global TH collect personal data?

1. We will / may collect your personal data:

When you register and/or use our services or platforms, or open an account with us; when you submit any forms, including but not limited to application forms or other forms related to any of our products and services, whether online or in physical form; when you enter into any agreements or provide other documents or information regarding your interactions with us or the use of our products and services; when you interact with us, such as via phone (which may be recorded), letters, faxes, face-to-face meetings, social media platforms, and email, including when interacting with our customer service agents; when you use our electronic services, or interact with us or use services on our platform through our applications. This includes but is not limited to cookie deployed during your interaction with our applications or websites; when you grant permission on your device to share information with our applications or platforms; according to the policies of providers, when you link your XY Global TH account to your social media or other external accounts or use other social media features;

When you conduct transactions through our services;

When you provide us with feedback or complaints;

When you sign up for the competition; and/or

When you submit your personal data to us for any reason.

The above is not exhaustive, but lists some of the common situations in which your personal data may be collected.

2. We may collect your personal data from you, our affiliates, third parties and other sources, including but not limited to business partners (such as logistics or payment service providers), credit bureaus or rating agencies, marketing service providers or partners, referrers or loyalty programs, other users of our services or publicly available or government data sources.

3. In certain circumstances, you may provide us with the personal data of others (such as your family members or friends or people in your contact list). If you provide us with their personal data, you declare and warrant that you have obtained their consent and that their personal data will be processed in accordance with this policy.

3. XY Global TH What personal data will be collected?

1 XY Global TH Personal data that may be collected includes, but is not limited to:

surname and personal name;

e mail address;

date of birth;

Bill and/or delivery address;

Bank account and payment information;

phone code;

sex;

Information sent or associated with devices used to access our services or platforms; information about your network, including contact lists shared on your device when you grant permissions, as well as people and accounts interacting with you; photos or audio or video recordings; government-issued identification or other information required for us to conduct due diligence, understand your customers, verify identity, and/or prevent fraud; marketing and communication data, such as preferences for marketing received from us and third parties, your communication preferences, and communication history with us, our service providers, and other third parties; usage and transaction data, including details about your searches, orders, ads and content you interact with on the platform, and other products and services related to you; location data; any other information about users at the time they register to use our services or platforms and during their use of these services or platforms, as well as information relevant to how users utilize our services or platforms; and aggregated data on user engagement content.

2. You agree not to submit any inaccurate or misleading information to us and you agree to notify us of any inaccuracies or changes to such information. We reserve the right to request further documentation at our discretion to verify any information provided by you.

3. If you register as a user of our platform using your social media account ("social media account"), link your XY Global TH account to your social media account, or use any XY Global TH social media features, we may access your information as voluntarily provided to your social media account provider according to the policies of such providers. We will always manage and use any such personal data in accordance with this policy.

3. If you do not wish us to collect the above information/personal data, you can at any time opt out by notifying our Data Protection Officer in writing. For more information on opting out, please refer to the section below titled "How Do I Withdraw Consent, Delete, Request Access to, or Amend the Information You Provide Us?" However, please note that opting out or revoking your consent for us to collect, use, or process your personal data may affect your use of services and platforms. For example, opting out of location-based information collection will disable its location-based features.

IV. Collection of other data

1. Like most websites and mobile applications, the information your device sends may include data about you recorded by our platform's network servers when you browse. This typically includes, but is not limited to, your device's Internet Protocol (IP) address, computer/mobile operating system and browser type, mobile device type, characteristics of the mobile device, unique device identifier (UDID), or mobile device identifier (MEID). For your mobile device, it also includes the URL of the site being referenced (if any), the pages you visit on our website and mobile application, and the time of access. Sometimes, there is also a "cookie" (which can be disabled using your browser preferences) to help the site remember your last visit. If you are logged in, this information will be associated with your personal account. This information is also included in anonymous statistics so we can understand how visitors use our website.

2. Our mobile application may use technologies such as GPS and Wi-Fi to collect precise information about the location of your mobile device. We collect, use, disclose, and/or process this information for one or more purposes, including but not limited to locating the service you request, providing you with relevant content based on your location, or allowing you to share your location with other users as part of the services provided by our mobile application. For most mobile devices, you can revoke permission for us to obtain your location information through your device settings. If you have any questions about how to disable the location service on your mobile device, please contact your mobile device service provider or the device manufacturer.

3. When you view pages on our website or mobile application, when you watch content and ads on our platform or through services, and access other software, such information may be sent to us (including but not limited to IP addresses, operating systems, etc.); however, what your device sends us is not page views, but information about the content viewed, ads and/or services accessed, and installed software on the platform, as well as the time.

five.Cookies

We or our authorized service providers and advertising partners may use "cookies" or other features to allow us or third parties to collect or share information related to your use of our services or platforms. These features help us improve our platform and the services we provide, assist us in offering new services and features, and/or enable us and our advertising partners to provide you with more relevant content, including through remarketing. "Cookie" is an identifier stored on your computer or mobile device, used to record data about the computer or device, how and when it uses or accesses services or platforms, how many people are using it, and other activities within our platform. We may link cookie information to personal data. Cookie also links to information about products you have chosen to purchase and web pages you have viewed. This information is used to track your shopping cart, provide specific content of interest, enable our third-party advertising partners to serve ads on websites across the internet, and conduct data analysis and monitor the usage of services.

2. You can refuse to use cookie by selecting appropriate Settings on your browser or device. However, please note that if you do so, you may not be able to use all the features of our platform or services.

How do we use the information you provide us?

1. We may collect, use, disclose and/or process your personal data for one or more of the following purposes:

Consider and/or process your applications/transactions with us or transactions/communications with third parties through our services; manage, operate, provide, and/or manage your use and/or access to our services and platforms (including but not limited to remembering your preferences), as well as your relationship with us and user accounts; respond to, process, handle, or complete transactions and/or meet your requests for certain products and services, and notify you of service issues and abnormal account operations; enforce our terms of service or any applicable end-user license agreements; for the purpose of protecting personal safety and the rights, property, or safety of others; for the purpose of identifying, verifying, due diligence, or understanding your customers; evaluate and make decisions related to your credit and risk profile and eligibility for loans, deferred payments, or credit products (if applicable); maintain and manage any software updates and/or other updates and support that may be required from time to time to ensure the smooth operation of our services; process or facilitate customer service, execute your instructions, handle or respond to any inquiries made by you or on your behalf (or claimed to be made by you); to manage and/or regulate your relationship with us or your use of our services, contact or communicate with you via voice calls, text messages and/or fax messages, emails, and/or postal mail, or other means, such as but not limited to conveying management information related to our services. You acknowledge and agree that we may communicate with you through the mailing of letters, documents, or notices to you, which may involve disclosing certain personal data about you for the same purpose as delivery and in envelopes/mailing packages; allowing other users on the platform to interact with, contact, or view some of your activities, including notifying you when other users send private messages to you, post comments for you on the platform, or use social features to connect with you on the platform; conducting research, analysis, and development activities (including but not limited to data analysis, surveys, product and service development and/or analysis), analyzing how you use our services, recommending products and/or services related to your interests, improving our services or products and/or enhancing your customer experience; allowing audits and investigations to verify the size and composition of our target audience and understand their experience with XY Global TH services; using marketing and advertising, and in this regard, sending you marketing and promotional information and materials related to products and/or services (including but not limited to third-party products and/or services that XY Global TH may offer) through various media and communication methods in cooperation with products or services that XY Global TH (and/or its affiliates or related companies) may be selling, marketing, or promoting, whether such products or services currently exist or will be created in the future. You can unsubscribe by using the opt-out function in electronic marketing materials and/or adjusting your settings on the platform (if applicable), to stop receiving marketing messages at any time. We may use your contact information to send newsletters or marketing materials related to us and our affiliates; collaborate with third parties to offer loyalty, partner, and bonus programs and offers, as well as other co-branded marketing activities such as merchant loyalty programs, seller discounts, or co-branded credit cards; respond to legal proceedings or comply with any applicable laws, government, or regulatory requirements of any relevant jurisdiction, or if we genuinely believe such disclosures are necessary, including but not limited to meeting disclosure requirements under any law binding on XY Global TH or its affiliates or related companies (including displaying your name, contact information, and company details where applicable); prepare statistics and research for internal and statutory reporting and/or record-keeping requirements; conduct due diligence or other screening activities (including but not limited to background checks) in accordance with legal or regulatory obligations or risk management procedures that may be required by law or that we have established; audit our services or the business of XY Global TH; prevent or investigate any actual or alleged violations of our terms of service, fraud, illegal activities, negligence, or misconduct, whether related to your use of our services or any other matters arising from your relationship with us; respond to any threats or actual claims against XY Global TH or any other claims involving content infringement of third-party rights; Store, host, and back up (whether for disaster recovery or other purposes) your personal data, whether within or outside your jurisdiction; process and/or facilitate commercial asset transactions or potential commercial asset transactions where such transactions involve XY Global TH as a participant or only involve XY Global TH's related companies or affiliates as participants, or involve XY Global TH and/or any one or more of XY Global TH's related companies or affiliates as participants, with other third-party organizations possibly involved in such transactions. "Commercial asset transactions" refer to the purchase, sale, lease, merger, consolidation, or any other acquisition, disposition, or financing of an organization or part thereof, or any business or asset of the organization; and/or any other purpose we notify you of with your consent. (collectively referred to as "purposes").

2. You acknowledge, agree, and consent that if required by law or court order, or as requested by any government or regulatory authority with jurisdiction over XY Global TH, XY Global TH may access, retain, and disclose your account information and content. We believe such access or disclosure is reasonably necessary for: (a) complying with legal process; (b) complying with the requirements of any government or regulatory authority with jurisdiction over XY Global TH; (c) enforcing Target Mall's terms of service or this privacy policy; (d) responding to any threat or actual claim against XY Global TH, or any other claims involving content infringement of third-party rights; (e) responding to your customer service requests; (f) protecting the rights, property, or personal safety of XY Global TH, its users, and/or the public.

3. Since the purposes for which we will / may collect, use, disclose, or process your personal data depend on the current circumstances, such purposes may not appear in the above content. However, we will notify you of these other purposes when we obtain your consent, unless privacy laws permit processing of applicable data without your consent.

How to protect and retain customer information?

We implement various security measures to ensure the security of your personal data on our systems. User personal data is contained behind a secure network and can only be accessed by a small number of employees with special access to such systems. However, absolute security cannot be guaranteed.

2. We will retain personal data in accordance with privacy laws and/or other applicable laws. That is, we will destroy or anonymize your personal data when we reasonably determine that: (i) retaining such personal data no longer serves the purpose for which it was collected; (ii) it is no longer necessary to retain it for any legal or commercial purpose; (iii) there are no other legitimate interests that warrant further retention of such personal data. If you cease using the platform, or if your license to use the platform and/or services is terminated or revoked, we may continue to store g, use and/or disclose your personal data in accordance with this Privacy Policy and our obligations under privacy laws. We may process your personal data securely in accordance with applicable law without further notice.

Will the eight Target Mall disclose information it collects from visitors to outside parties?

When conducting our business, we may need to use, process, disclose, and/or transfer your personal data to third-party service providers, agents, and/or affiliated companies or related companies, and/or other third parties, which may be located in Singapore or outside of Singapore, for one or more of the aforementioned purposes. These third-party service providers, agents, and/or affiliated companies or related companies, and/or other third parties will handle your personal data on our behalf or otherwise for one or more of these purposes. We strive to ensure that third parties and our affiliated companies protect your personal data from unauthorized access, collection, use, disclosure, processing, or similar risks, and retain your personal data only as necessary for the aforementioned purposes. Such third parties include, but are not limited to: our subsidiaries, affiliates, and related companies; buyers or sellers with whom you transact or interact on the platform, or buyers or sellers associated with your use of services for the aforementioned purposes; other users who use our platform for one or more of these purposes; contractors, agents, service providers, and other third parties we use to support our operations. These include, but are not limited to, parties that provide us with administrative or other services, such as mail companies, logistics service providers, financial service providers, advertising and marketing partners, telecommunications companies, IT companies, and data centers; governments or regulatory bodies that have jurisdiction over YouTube or whose regulations permit it; buyers or other successors who acquire Target Mall in whole or in part through mergers, spin-offs, restructurings, dissolutions, or otherwise sell or transfer Target Mall's assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceedings, where Target Mall holds personal data about our service users as part of the transferred assets; or counterparties in commercial asset transactions in which Target Mall or any of its affiliates or related companies are involved; and third parties with whom we disclose information for one or more purposes, who in turn collect and process your personal data for one or more purposes.

2. We may share user information with advertising partners and third party providers of advertising, remarketing and/or other programs, including statistical and demographic information about our users and information about their use of the Services.

3. To avoid any doubt, if privacy laws or other applicable laws permit organizations like us to collect, use, or disclose your personal data without your consent, such legal permissions will continue to apply. According to the above provisions and applicable laws, we may use your personal data for recognized legal purposes, including complying with our legal obligations, fulfilling contracts with you, achieving legitimate interests, and using it for reasons that exceed any harm to your data protection rights, or in connection with legal claims when necessary.

4. Third parties may illegally intercept or access personal data transmitted to or contained on the website, technical issues may occur or fail to function as expected, or someone may access, misuse, or misappropriate information, which is not our fault. Nevertheless, we will deploy reasonable security measures in accordance with privacy laws to protect your personal data; however, absolute security cannot be guaranteed, for example, unauthorized disclosure caused by malicious and complex hacker attacks that are not our fault.

5. XY Global TH allows you to share videos from YouTube in the YouTube Live feature ("YouTube Content"). For this purpose, XY Global TH uses the YouTube API service provided by YouTube. By sharing YouTube content, you hereby agree to be bound by the Google Privacy Policy (http://www.google.com/policies/privacy).

6. As stated in the XY Global TH Terms of Service, users (including any employees, agents, representatives, or any other persons acting on behalf of the user or on behalf of the user) hereby agree that they will (i) comply with all applicable privacy laws concerning such data, including any collection, processing, storage, or transmission of such data; (ii) allow XY Global TH or its own users to receive final data collected by the recipient (the "Discloser"), to delete the data they have collected from the recipient's database; (iii) in each case under (ii) and (iii), allow XY Global TH or the Discloser to review which information about them has been collected by the recipient in accordance with applicable law and as required by applicable law.

7. Despite any provisions here, the seller (including any employees, agents, representatives, or anyone else representing the user or on behalf of the user) shall comply with all applicable privacy laws and, regarding any buyer personal data received from XY Global TH, (i) shall not use such buyer's personal data without prior written consent from both the buyer and XY Global TH, unless it is reasonably necessary to respond to the buyer's inquiries and to execute, process, handle, or complete transactions; (ii) shall avoid using such information to contact buyers outside the XY Global TH platform; (iii) shall not disclose such buyer's personal data to any unauthorized third party without prior written consent from both the buyer and XY Global TH; (iv) shall take adequate security measures to protect personal data owned by each XY Global TH user, retain such data only for the purposes mentioned above and for the duration required by privacy laws, and delete such data or return it to XY Global TH upon request from XY Global TH or as soon as possible after the transaction is completed; (v) in the event of any potential data breach or other loss of such user data, please notify XY Global TH's Personal Data Protection Officer through the xyselectth@xyselectth.com.

IX. Information on children

1. Services are not applicable to children under the age of 13. We do not intentionally collect or maintain any personal data or non-personal identity information from anyone under the age of 13, and no part of our platform or other services is targeted at children under the age of 13. As parents or legal guardians, please do not allow the children you care for to submit personal data to XY Global TH. If the personal data of a child under the age of 13 you care for is disclosed to XY Global TH, you hereby agree to process the child's personal data and accept and agree to be bound by this policy on behalf of the child. We will close any accounts dedicated to such children and remove and/or delete any personal data we believe was submitted by any child under the age of 13 without parental consent.

X. Information collected by third parties

1. Our platform uses Google Analytics, a web analytics service provided by Google, Inc. (the "Google"). Google Analytics uses cookie (a text file placed on your device) to help the platform analyze how users interact with it. Information about your use of the platform generated by cookie (including your IP address) will be transmitted to and stored by Google's servers in the United States. Google will use this information to evaluate your usage of the platform, compile website activity reports for site operators, and provide other services related to website activity and internet usage. Google may also transfer this information to third parties when required by law or when such third parties represent Google in processing the information. Google will not associate your IP address with any other data held by Google.

2. We and third parties may from time to time provide software application downloads through the platform or service for your use. These applications may independently access and allow third parties to view your identity information, such as your name, your user ID, the IP address of your device, or other information, for example, any cookie you have previously installed or installed for you through third-party software applications or websites. Additionally, these applications may require you to provide additional information directly to third parties. The third-party products or services provided through these applications are not owned or controlled by XY Global TH. We encourage you to read the terms and other policies published by such third parties on their websites or elsewhere.

XI. Disclaimer regarding security and third party websites

We do not guarantee the security of your personal data and/or other information provided on third-party websites. We have indeed implemented various security measures to safeguard your personal data that we own or control. Your personal data is stored behind a secure network, accessible only by a select few with special access rights to such systems, and must be kept confidential. When you place an order or access your personal data, we provide secure server usage. All personal data or sensitive information you provide is encrypted in our data, and abases can only be accessed in the manner described above.

2. To provide you with greater value, we may choose various third-party websites to link to the platform and establish frameworks within it. We may also engage in co-branding and other relationships to offer our visitors e-commerce and other services and features. These linked sites have their own separate and independent privacy policies and security arrangements. Even if these third parties are associated with us, we cannot control these linked sites, each having its own independent privacy and data collection practices. We may not receive data collected by our co-brand partners or third-party websites (even if provided on or through our platform).

3. Therefore, we assume no responsibility or obligation for the content, security arrangements (or lack thereof) and activities of these linked websites. These linked sites are provided solely for your convenience, so you must assume the risks associated with accessing them. Nevertheless, we strive to protect the integrity of our platform and the links placed on each platform, and thus welcome any feedback regarding these linked sites (including but not limited to specific links failing to function).

12.XY Global TH Will your information be transferred overseas?

1. For one or more purposes, your personal data and/or information may be transmitted to countries outside your country/region and stored or processed outside those countries. XY Global TH will only transmit your information overseas in accordance with privacy laws.

How do you withdraw your consent, request access to or correct information you have provided us?

Withdraw consent

You can withdraw your consent to the collection, use and/or disclosure of your personal data, or request its deletion from us by sending an email to our Personal Data Protection Officer xyselectth@xyselectth.com. We will handle such requests in accordance with this Privacy Policy and our obligations under privacy laws and other applicable laws. However, withdrawing your consent may mean that we will no longer be able to provide you with services, and we may need to terminate your existing relationship and/or contract with us.

If you share YouTube content, in addition to withdrawing your consent via email as per Section 13.1.1, you can also revoke XY Global TH's access to your personal data through the Google Security Settings page on https://security.google. com/Settings/security/permissions.

2 Requests to access or correct personal data

If you have our account, you can personally access and/or correct the personal data we currently own or control through the account settings page on the platform. If you do not have our account, you can request access to and/or correction of the personal data we currently own or control by submitting a written request to us. We will need you to provide sufficient information to verify your identity and the nature of your request so that we can process it. Therefore, please submit your written request by sending an email to our Personal Data Protection Officer xyselectth@xyselectth.com.

We may charge you a reasonable fee for processing and handling your request to access personal data. If we choose to charge, we will provide you with a written estimate of the fees we will incur. Please note that unless you agree to pay the fee, we are not required to respond to or process your access request.

We reserve the right to refuse to correct your personal data in accordance with the provisions of the Privacy Act, which require and/or authorize organizations to refuse to correct personal data in specified circumstances.

14. Questions, concerns or complaints? Contact us

1. If you have any questions or concerns about our privacy practices, we welcome your contact with us

Official website: https://www.xyselectth.com

Cross-border e-commerce platform: https://xyglobalth.com

Official email: xyselectth@xyselectth.com

Contact: +66 95 308 8084

Address of the Thai company: 989 Debaratna Rd, Bang Na Nuea, Bang Na, Bangkok, 10260, Thailand

Global Headquarters: Hong Kong 16 Argyle St, Mong Kok, Hong Kong 16 Yau Ma Tei Street, Mong Kok, Hong Kong

Last Updated: March 26, 2025

Effective Date: March 4, 2024