PRIVACY POLICIES
Last updated: August 28, 2026
Sam Edelman Customer Privacy Notice
KONAT INTERNATIONAL CO., LTD. (the "Company") issues this Customer Privacy Notice (this "Notice") to explain how the Company collects, uses, and otherwise processes the personal data of individuals who purchase Sam Edelman products through the Company's various sales channels. These channels include (1) Sam Edelman retail stores, (2) the Company's own online channels such as its website and social media accounts (including LINE Official Account, Facebook, and Instagram), and (3) third-party online marketplaces. Individuals purchasing through any of these channels are referred to collectively as "Customers."
By entering a Company store, purchasing any product, or otherwise submitting personal data to the Company through any channel, a Customer is deemed to have read and accepted this Notice. Where a Customer declines to allow the Company to process personal data as described below, the Company may decline to provide the requested service, because such processing is necessary for the Company to fulfil its obligations to the Customer.
This Notice covers only the purchase of Sam Edelman products directly through the Company and does not extend to platforms or services operated by third parties over which the Company has no control, such as data handling by marketplace operators, or the collection of facial images and other transaction data by department stores hosting a Sam Edelman counter or corner. Customers should consult the relevant third party's own privacy notice for those situations.
The Company may revise this Notice from time to time to remain consistent with applicable law or to reflect changes to its sales, delivery, or service arrangements. Any revision will be communicated to Customers through the Company's usual communication channels.
Categories of Personal Data Collected
To fulfil orders, provide delivery, and maintain and improve its relationship with Customers, the Company processes the following categories of personal data, depending on the sales channel used:
In-store purchases (Store, Counter, or Corner):
• Facial images that may be captured by the Company's CCTV system at locations under the Company's direct control;
• Other data voluntarily provided by the Customer, such as identification details supplied for the issuance of a tax invoice, information shared during conversations with the Company's customer service team, or data submitted to redeem a voucher, claim a reward, or take part in a promotional event, survey, competition, or lucky draw.
Business-to-business (B2B) transactions:
• Where the Customer is a corporate entity, the Company collects data relating to its authorised directors, representatives, or the individuals designated to handle sales or procurement matters.
Online purchases:
• Identifying information such as the Customer's name, IP address, and details of the device used to access the Company's online channels;
• Delivery and contact details, including shipping address, phone number, and email address;
• Order and payment details, including the products purchased and payment method used (such as a bank account or credit card number);
• Additional data the Customer chooses to share, such as stated interests, marketing preferences, or information provided while entering a survey, lucky draw, or other promotional activity.
Why the Company Processes This Data, and for How Long
The Company processes Customer personal data for the following purposes, each subject to the retention period noted:
• Order fulfilment and delivery — confirming orders, verifying identity and payment, and coordinating shipment. Data is kept for as long as the Company must deliver the order and for as long as the Customer retains a right to claim against the Company (for example, during any applicable return or exchange window).
• Legal and regulatory compliance — particularly tax and accounting obligations, retained for the period required under applicable law.
• Relationship management — building rapport with Customers and supporting future purchases, retained for one year following the Customer's most recent order.
• Customer service — handling inquiries, feedback, and complaints, retained for the period needed to resolve each matter, with the Company entitled to keep records for one calendar year for service-quality monitoring.
• Legal defence — protecting the Company's ability to assert or defend a claim, retained for one year following the Customer's most recent order.
• Promotions and events — administering contests and marketing activities the Customer has chosen to join, retained for the duration of the event and generally no longer than one calendar year; however, photographs taken at such events for use in advertising or marketing materials may be retained for as long as reasonably necessary for the Company's business, provided this does not unduly infringe the Customer's rights as a data subject.
• Premises security — CCTV facial imagery is retained for no more than 60 days from the date of recording.
• Direct marketing — where the Customer has given consent, the Company may use their data to send marketing communications until that consent is withdrawn.
Sharing of Personal Data
The Company treats Customer personal data as confidential. It may, however, share such data with:
• Third-party providers engaged to support sales and delivery, such as logistics partners or professional advisers, limited to what is necessary and governed by a data processing agreement with the Company;
• Government authorities, where the Company is legally required to disclose data (for example, to the Revenue Department).
Security
The Company maintains information security measures appropriate to applicable law to guard against unauthorised access, use, alteration, or disclosure of Customer personal data, and reviews these measures periodically to reflect industry practice and legal developments.
Customer Rights
Customers have the following rights as data subjects under applicable law: to withdraw consent; to access or obtain a copy of their personal data; to correct or update their personal data; to receive their data in a portable format; to object to processing; to request deletion or de-identification once retention is no longer necessary; to request that processing be suspended; and to lodge a complaint. Requests can be directed to the Company, which will respond within the timeframe required by law.
Cookies Privacy Notice
KONAT INTERNATIONAL CO., LTD. (the "Company") uses cookies on its website to keep the site running smoothly and to make it easier and more convenient for visitors ("Website Users") to browse and use. Because cookies are treated as personal data under applicable law, this Cookies Privacy Notice explains how they are used. The Company uses cookies only as needed, applies appropriate security safeguards to them, and does not share cookie data with third parties except where a cookie is itself operated by a third-party provider.
Continuing to browse or use the website is treated as acknowledgment of this Notice. The Company may update this Notice periodically to comply with applicable law or to reflect changes in the cookies deployed, and will post any update on the website.
Categories of Cookies Used
Cookies are small text files stored in a Website User's browser that allow the Company to understand browsing behaviour and improve site functionality. The website uses four categories of cookies:
• Strictly necessary cookies — required for core site functions, such as adding an item to the shopping cart;
• Functional cookies — remember a User's preferences, such as account details, language, font size, or display settings, to personalise the browsing experience;
• Performance cookies — measure how well different parts of the website perform; these may be operated by a third-party provider;
• Advertising cookies — used to recommend products or services that may interest the User; these may also be operated by a third-party provider.
Aside from strictly necessary cookies, the Company deploys cookies for the purposes described above only after obtaining the Website User's specific consent.
Your Rights
Website Users retain their statutory rights as data subjects over cookie data, including the right to withdraw previously given consent. Questions can be directed to support@mwc.co.th. Users may also clear their browser's cache and cookies at any time.
Sam Edelman Membership Privacy Notice
KONAT INTERNATIONAL CO., LTD. (the "Company") sets out in this Privacy Notice how it processes the personal data of Sam Edelman members (each, a "Member"). By enrolling as a Member through any channel, the Member is deemed to accept the terms of this Notice. If a Member does not agree to these terms, the Company may decline the enrolment or decline to extend certain privileges under the membership programme, since processing this data is necessary to deliver those benefits.
The Company may amend this Notice at any time to reflect best practice or changes to membership benefits, and will notify Members of any such amendment through its usual communication channels.
Personal Data Collected
• Basic identifying information, including full name and date of birth;
• Contact details, including phone number and email address;
• Transaction and benefit history, such as purchases, points earned, discounts applied, and participation in campaigns or events under the programme's terms; and
• Any other information a Member chooses to submit in connection with their membership.
Purposes of Processing
• Confirming membership status and administering programme benefits — including points, rewards, discounts, event participation, order support, and notifications about member benefits — limited strictly to what is needed to deliver these privileges;
• Strengthening the relationship with Members, including gathering feedback and handling inquiries or complaints, carried out in a way that avoids unnecessary impact on Members' rights as data subjects; and
• Meeting legal obligations, particularly for tax and accounting purposes.
Retention Period
Member data is retained for the purposes above throughout the term of the membership. Where retention is required under applicable law, the Company will retain the data for the period prescribed by that law.
Sharing of Personal Data
Member data is kept confidential, except that the Company may share it with (i) third parties engaged to deliver membership benefits, and (ii) government authorities where legally required to do so, in all cases limited to what is necessary to meet the Company's legal obligations.
Security
The Company maintains appropriate information security safeguards to prevent unauthorised access, use, alteration, or disclosure of Member data, and reviews these safeguards periodically against industry practice and applicable law.
Member Rights
Members hold the following statutory rights as data subjects: (1) to access or obtain a copy of their personal data; (2) to receive their data in a portable format; (3) to object to processing; (4) to request deletion or de-identification once retention is no longer necessary; (5) to request suspension of processing; (6) to withdraw consent; (7) to correct or update their personal data; and (8) to lodge a complaint. Requests may be submitted through the Company's designated contact channels, and the Company will respond within the timeframe required by law.