PRIVACY POLICY

Effective from February 21, 2025

This Privacy Policy outlines the practices of Dr. Martens Thailand, a premium fashion retailer operated by Map Active Thailand Ltd. ("Dr. Martens Thailand" or "we"), regarding the handling of data and personal information of users of its website, mobile applications, services, and customers of its physical and online stores. The terms ("User" or "you") refer to users of the website, applications, services, and customers of our physical and online stores. The terms ("Personal Information" or "Personal Data") refer to any information, details, or data sets that can identify you, describe you, relate to you, or be linked to you, whether directly or indirectly, including personal information or similar definitions as defined by relevant laws.

Dr. Martens Thailand values your privacy and is committed to protecting the security of your personal information. This Privacy Policy describes the principles, terms, and conditions related to the acquisition, collection, processing, analysis, storage, modification, display, announcement, delivery, publication, disclosure, and/or granting access to information, deletion, and destruction of data related to the information and personal data that users have provided to us, as well as information that Dr. Martens Thailand has collected from users, whether at the time users register as customers, access the website, use mobile applications, make purchases at physical or online stores, and/or use our services.

INFORMATION WE COLLECT

We may receive your personal information from various sources, including when you use, access, and/or create a user account on Dr. Martens Thailand's website and mobile applications, when you visit or make purchases at our physical or online stores, when you contact or interact with us via phone, email, or social media, as well as from our affiliated companies (e.g., parent company, affiliates, or subsidiaries), business partners, and other third parties who are authorized to disclose your personal information to us.

The types of information and personal data we collect include, but are not limited to, the following:

• Contact information (e.g., name, address, email address, and phone number)
• Personal identification information (e.g., date of birth, age, gender, weight, height, and body measurements)
• Photos (e.g., if you submit entries to our competitions or participate in our events)
• Financial information (e.g., debit card, credit card information, and bank account details)
• Records of communication between you and us (e.g., phone conversation recordings, live chat usage, emails, or letters sent to us, or other forms of contact records)
• Authentication information (e.g., security information used for authentication and access to accounts and services)
• Device and system information (e.g., operating system type and version, hardware version, device settings, software type, device ID, manufacturer and model, language, and internet browser type and version)
• Information collected by automated means (e.g., Cookies, which are text files that websites send to a visitor's computer or internet-connected device to uniquely identify the visitor's browser or to store information or settings in the browser, and Web Beacons, used to send information back to a web server)
• Geolocation data, such as location derived from your IP address
• Additionally, we may use third-party website analytics tools that collect data about user traffic on our website and applications.

HOW WE USE YOUR INFORMATION

We may use the information we obtain from you for the following purposes:

• Register you as a user/create a user account, and manage and maintain your account on our website.
• Provide goods and/or services to you.
• Process, verify, confirm, and track your orders (including processing payments, shipping, handling returns and refunds, and contacting you about your orders).
• Maintain records of your order history on our website.
• Answer your inquiries and comments, provide customer service assistance, and resolve issues related to our services.
• Communicate with you about products, services, offers, events, and promotions, and present products and services that we believe may be of interest to you.
• Allow you to communicate with us through blogs, social networks, and other interactive media.
• Publish your testimonials about Dr. Martens Thailand on our website, blog, and social media (if published, we will only display your real name/initials, city, and state).
• Manage your participation in events, sweepstakes, and other promotions.
• Customize products and services to suit your personal interests, and improve the website to display content, offers, and advertisements that match your interests.
• Operate, evaluate, and develop our business, including our products and services.
• Analyze and improve our marketing communications and marketing strategies (including monitoring whether emails sent to you are received and opened).
• Analyze trends and statistics related to user behavior on the website, mobile applications, and social media, as well as online purchasing behavior.
• Maintain website security, prevent fraud and unauthorized transactions, and manage risks, such as detecting malicious actors or unauthorized and illegal activities.
• Enforce the website's Terms of Use and other terms and conditions.
• Comply with legal requirements, industry standards, and our policies.
• Use information for other purposes as informed at the time of data collection, and as permitted by law.

In addition to the above, we and our service providers may use information collected through Cookies, Web Beacons, Pixel Tags, and other automated methods to automatically collect certain types of information when you use our website, mobile applications, visit, and place orders through our website (e.g., to allow you to identify and use electronic shopping carts you created on our website and to view previously created shopping carts). We may also use cookies to identify and authenticate website visitors. We may combine the information we collect with publicly available information, as well as information we receive from our parent company, affiliated companies, or subsidiaries, business partners, and other third parties, and may use such information to enhance and customize your shopping experience to better suit your needs, to communicate with you about products, services, and events that may be of interest to you, for other marketing purposes, and for other purposes as described in this section.

LEGAL BASIS FOR USE OF YOUR INFORMATION

The legal basis for collecting and using your personal information will depend on the type of personal information and the specific context in which it is collected.

We need to use personal information to perform our contract with you, to comply with legal obligations, or where it is in our legitimate interests to process it (e.g., processing for administrative purposes, direct marketing, service improvement, fraud prevention or crime, and data security support). This is provided that it does not affect your data protection rights or your fundamental rights and freedoms. Where we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will inform you at the time of data collection. We will also advise you whether the provision of that information is mandatory and explain the possible consequences if you do not provide it.

If we collect and use your personal information based on our legitimate interests (or those of a third party), we will clearly inform you and take reasonable steps to explain such legitimate interests. Map Active Thailand Ltd. is the Data Controller for all collected personal data, unless otherwise specified in additional privacy notices.

ONLINE ADVERTISING

On our website, we may collect information about your online activities to provide you with advertisements about products and services that align with your individual interests. You may see some advertisements both on this website and on other websites because we participate in Advertising Networks, which allow us to target advertisements based on demographic, behavioral, and contextual information of users.

Such advertising networks track your online activities over time by collecting information through automated methods, including the use of Cookies, Web Server Logs, Web Beacons, and other methods. The network will use this information to display advertisements from Dr. Martens Thailand and our business partners that match your individual interests.

The information collected by our advertising network providers includes information about visits to websites participating in the advertising network, such as the pages you view, the advertisements you see, and the actions you take on the website. This data collection and ad targeting occur both on our website and on third-party websites participating in the advertising network. This process also allows us to track and evaluate the effectiveness of our marketing activities.

INFORMATION WE SHARE

We do not sell or disclose your personal information, except for disclosure of information in the manner and to the persons specified in this Privacy Policy. We may disclose personal information we collect from and about you in the following cases:

• To our parent company, affiliated companies, and subsidiaries for administrative, analytical, and operational purposes.
• To our business partners (including brand owners), external service providers who help fulfill orders and other operational services, network providers and network participants, and other third parties as necessary, to perform business, professional, or technical support functions for us.
• To payment service providers, banks, and financial institutions for the purpose of processing and approving payments, preventing fraud, reducing credit risk, and providing customer service.
• To third-party partners to inform you about offers, promotions, and various services.
• To advertising networks, social networks, and data analytics providers.
• To third parties for the purpose of joint promotions. Such parties will be responsible for complying with relevant data protection laws themselves.
• To service providers for the purpose of evaluating and improving the website, mobile applications, and services.
• To law enforcement officials, government agencies or institutions, regulatory bodies, courts, or other government agencies to comply with laws, respond to requests or inquiries from government agencies, enforce our policies, or to protect our rights, property, or safety, or those of others.
• In other cases where your consent is obtained, or as permitted by the relevant legal basis.

We may need to transfer your data to our affiliated companies, business partners, and/or service providers in countries outside the jurisdiction of Indonesia. If your data is transferred outside the jurisdiction of Indonesia, we will ensure that your data is adequately protected. We will always ensure that the destination country where the third party is located has an equivalent or higher level of personal data protection than Indonesia, or that the third party receiving your personal data has sufficient and binding data protection standards. In cases where these standards are not met, we will implement additional protective measures or seek your explicit consent before proceeding.

STORAGE AND RETENTION

We will store and retain your personal information for a reasonably necessary period, or as permitted by law, to fulfill the purposes for which such data was collected.

The personal information we collect will be stored in electronic form. We will store your data in data centers managed by us or by service providers acting on our behalf. All our systems and data storage locations are equipped with appropriate security measures to ensure the protection of your personal information.

We may retain your personal information to provide services you have requested, or for other essential purposes, such as complying with legal requirements, resolving disputes, and enforcing our policies. The retention period may vary significantly depending on the type of data and how it is used. Our data retention period is based on various factors, including the period stipulated by relevant laws and regulations, necessity related to ongoing or potential disputes or litigation, contractual or agreement requirements, operational guidelines or necessities, and data storage for historical reference. Once the retention period expires, we will delete your personal information from our systems using appropriate security measures to ensure that the data cannot be recovered or read again.

YOUR RIGHTS

The following details describe how you can exercise your rights regarding your personal information. However, these rights are not absolute, and in some cases, we may refuse your request as permitted by relevant laws and regulations, especially when such requests may affect matters including but not limited to:

• Causing harm to your safety, physical health, or mental health and/or others, and/or
• Affecting the disclosure of personal information of other individuals, and/or
• Contravening state security and safety interests, and/or
• The reasons for the request are not related to you and/or the personal data processing activities we undertake.

We may charge a processing fee for each of your requests, as determined by relevant laws and regulations.

RIGHT TO INFORMATION

You can request information about how we collect and use your personal information, as follows:

• The types of personal information we have collected.
• The purposes for which your personal information is collected and used.
• The types of third parties to whom we have disclosed your personal information.
• The disclosure of your personal information for business purposes (if any), including the types of personal information disclosed to each category of third party.

RIGHT TO ACCESS

You can request a copy of your personal information that we have collected.

RIGHT TO CORRECT PERSONAL DATA

You have the right to request the correction of inaccurate or incomplete personal information to be accurate and complete.

RIGHT TO ERASURE

You can request us to delete your personal information that we have collected, subject to the limitations and conditions specified by relevant laws and regulations.

RIGHT TO RESTRICTION OF PROCESSING

You can request us to restrict the processing of your personal information, especially if you dispute the accuracy of the data or object to such data processing.

RIGHT TO WITHDRAW CONSENT

You can withdraw your consent for the processing of your personal information at any time. Upon withdrawal of consent, we will cease processing your personal information within 3 x 24 hours, unless otherwise required by law.

We provide you with choices regarding the information we collect, how it is used and disclosed, and how we communicate with you. However, in some cases, your withdrawal of consent for Dr. Martens Thailand to use or disclose your personal information may result in you not being able to benefit from certain offers or features of the website.

RIGHT TO DATA PORTABILITY

You have the right to request your personal information in a readable format and to transfer such data to another data controller.

RIGHT TO OBJECT TO AUTOMATED DECISION-MAKING

You can object to decisions resulting solely from automated processing, including profiling, if such processing produces legal effects concerning you or significantly affects you.

RIGHT TO COMPENSATION

You have the right to claim compensation in the event of a breach of your personal data protection rights.

NON-DISCRIMINATION

You have the right to exercise the rights described above without discrimination. We will not take any action that punishes you for exercising such rights, such as denying services, increasing service charges, reducing service quality, or communicating in a way that may suggest we will take such action.

If you have any questions or wish to exercise any of your rights, please contact us through the "Contact Us" section as described in this Privacy Policy.

LINKS TO OTHER WEBSITES

Our website may contain links to other websites for your convenience and to provide additional information. Such websites may be operated by companies not affiliated with Dr. Martens Thailand. Linked websites may have their own privacy policies, which you should review when you visit those sites.

We are not responsible for the content of any websites not affiliated with Dr. Martens Thailand, the use of such websites, or their data protection practices.

HOW WE PROTECT PERSONAL INFORMATION

We have implemented administrative, technical, and physical safeguards to help protect the personal information we collect from accidental or unlawful destruction, loss, alteration, access, disclosure, or unauthorized or unlawful use. For example, we use Secure Sockets Layer (SSL) encryption to protect certain information about your orders during transmission.

However, please note that no electronic transmission of data can be entirely secure. We cannot guarantee that the security measures we use to protect personal information will not be breached or fail, or will be adequate and effective in all circumstances. In the event that we discover an incident affecting the confidentiality of data, we will notify you in writing.

To enhance the security of your information, you should keep your Dr. Martens Thailand account username and password confidential and not disclose them to others. Additionally, you should sign out and close your browser window each time you finish using our website. Please note that we will never ask for your Dr. Martens Thailand account username or password via email.

INFORMATION ABOUT CHILDREN

If you are under 17 years old, you must obtain consent from your parents or legal guardian and their involvement before registering on our website (including providing any personal information), using our services, and placing orders on the Dr. Martens Thailand website.

If you do not obtain consent from, or do not involve, your parents or guardians as required, you must immediately cease using the website.

UPDATES TO THIS PRIVACY POLICY

This Privacy Policy may be updated periodically to reflect changes in our data processing practices and changes in relevant legal or regulatory requirements, without prior notice to you. Users should regularly read and review this Privacy Policy carefully to be aware of any changes that may occur. Your access to and use of Dr. Martens Thailand's website, mobile applications, or other services constitutes your acceptance of the changes to this Privacy Policy.

We will clearly announce significant changes to the Privacy Policy on our website, along with the date of the latest update at the end of such announcement.

OPTION TO OPT-OUT OF OUR MARKETING NEWSLETTER

When you subscribe to our Newsletter, you will be given the option to opt-out of receiving our regular updates delivered via the following channels:

• Email, to inform you about new products, new features, developments, special offers, contests, interesting events, and occasional marketing promotions.
• Mail, to inform you about new products, new features, developments, special offers, contests, interesting events, and occasional marketing promotions.

We grant you the right to unsubscribe from any service or update your subscription settings at any time, free of charge. All emails we send to you will include an automatic unsubscribe link, allowing you to easily unsubscribe from such emails. Additionally, you can change your email preferences or unsubscribe from all emails by logging into your "My Account" here (https://www.drmartens.id/account/login).

APPLICABLE LAW

This Privacy Policy shall be governed by the laws of the Republic of Indonesia. This Privacy Policy is prepared in both Indonesian and English. In the event of any inconsistency or conflict between the Indonesian and English versions, the Indonesian version shall prevail, and the English version shall be deemed amended to conform to the Indonesian version.

CONTACT US

If you have any questions about this Privacy Policy, wish to exercise your rights related to personal data, or wish to change your data processing settings, please contact us via email at connect@drmartens.co.th