Privacy Policy

Privacy Policy

Last Updated: September 12, 2025

Brunchtime Global Co., Ltd. (“the Company”, “We”, “Us”, or “Our”), as the Data Controller, recognizes the importance of protecting the personal data of users (“You” or “Your”) who visit and use the website www.moleculogy.com (the “Website”). This Privacy Policy is established to provide a detailed explanation of how the Company collects, uses, discloses, and otherwise processes Your Personal Data in compliance with the Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) and other applicable laws.

By accessing or using the Website, You acknowledge that You have read and understood the terms of this Privacy Policy.

1. Definitions

“Personal Data” means any information relating to an individual, which enables the identification of such person, whether directly or indirectly, but does not include the information of deceased persons in particular.
“Processing” means any operation performed on Personal Data, such as collection, recording, use, disclosure, transfer, erasure, or destruction.
“Data Controller” means Brunchtime Global Co., Ltd.
“Data Subject” means You, the user of the Website.

2. Sources and Types of Personal Data We Process

We may collect Your Personal Data from two primary sources:

2.1 Personal Data You Directly Provide to Us: When You submit a product review via the form on the Website, we collect the data You voluntarily provide, which includes:

Identity Data: Full name.
Order Data: Order Number and the channel of purchase.
Contact Data: Telephone number.
User-Generated Content: Review text, star rating, uploaded image files, and/or links to external videos You provide.

2.2 Personal Data We Collect Automatically: When You access the Website, our systems may automatically collect certain technical data from Your device, which may include:

Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting and location, operating system, and platform.
Usage Data: Information about how You use our Website, such as pages visited, clickstream data, and duration of visits.

3. Purposes and Lawful Basis for Processing Personal Data

The Company processes Your Personal Data for the following purposes, based on the lawful bases provided under the PDPA:

Purpose of Processing	Data Types Used	Lawful Basis
1. To verify and authenticate reviews	Identity Data, Order Data, Contact Data	Legitimate Interest of the Company to maintain the credibility and transparency of information on the Website.
2. To publish product reviews	User-Generated Content (text, stars, images, videos)	Consent, which You provide by submitting the review form.
3. For necessary communications	Contact Data	Legitimate Interest to contact You for further information about Your review or to respond to Your requests.
4. For analysis, improvement, and maintenance of the Website	Technical Data, Usage Data	Legitimate Interest to develop the performance and user experience of our Website.
5. To comply with legal and regulatory obligations	All necessary data	Legal Obligation.

Important: Personal Data used for verification purposes (Purpose 1) will be treated as confidential and will not be publicly displayed under any circumstances.

4. Disclosure of Personal Data

The Company will not disclose Your Personal Data to third parties without Your consent, except where necessary in the following cases:

Third-Party Service Providers: We may disclose data to vendors who perform services on our behalf, such as web hosting providers and data analytics providers (e.g., Google Analytics). We will ensure that these providers are contractually obligated to process the data only as instructed and to implement appropriate security measures.
Business Transfers: In the event of a merger, acquisition, asset sale, or corporate restructuring, Your Personal Data may be transferred to the new entity. We will notify You of such a transfer.
Legal Enforcement: We may disclose Personal Data if we have a good-faith belief that such action is necessary to comply with applicable laws, a court order, or a request from a government authority.

5. Cookies and Tracking Technologies

Our Website uses cookies to distinguish You from other users. This helps us provide You with a good experience and allows us to improve our site. A cookie is a small text file stored on Your browser or device. You can configure Your browser to refuse all or some cookies, but please note that some parts of the Website may become inaccessible or not function properly as a result.

6. Data Retention Period

We will retain Your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected and to comply with our legal obligations. After this period, Your Personal Data will be securely deleted or destroyed in accordance with our procedures.

7. Data Security

The Company has implemented appropriate technical and organizational security measures to prevent the accidental loss, unauthorized access, use, alteration, or disclosure of Your Personal Data. However, no method of transmission over the Internet is 100% secure. While we strive to use commercially acceptable means to protect Your Personal Data, we cannot guarantee its absolute security.

8. Rights of the Data Subject

Under the PDPA, You have the following rights:

Right of Access: To request a copy of Your Personal Data.
Right to Rectification: To request the correction of inaccurate or incomplete data.
Right to Erasure: To request the deletion or destruction of Your data (subject to legal conditions).
Right to Restrict Processing: To request the temporary suspension of the use of Your data.
Right to Object: To object to the processing of Your Personal Data in certain cases.
Right to Withdraw Consent: To withdraw Your previously given consent at any time (this will not affect the lawfulness of processing carried out before the withdrawal).

To exercise any of these rights, please contact us via the channels provided in Section 11.

9. Links to Third-Party Websites

This Website may contain links to third-party websites (e.g., www.brunchtimeshop.com). This Privacy Policy does not apply to those websites. The Company is not responsible for the content or privacy practices of such sites. You should review their privacy policies directly.

10. Changes to this Privacy Policy

The Company reserves the right to amend or update this Privacy Policy at any time. Any changes will become effective immediately upon posting the revised version on the Website. We encourage You to review this Policy periodically.

11. Data Controller Contact Information

If You have any questions, suggestions, or wish to exercise Your legal rights concerning Your Personal Data, please contact: Data Controller: Brunchtime Global Co., Ltd. Address: [Enter Company Address] Email: [Enter Email for PDPA Matters] Phone: [Enter Phone Number]