Privacy Policy

LXY POINT (“LXY POINT”, “we”, “us”, “our”) values your privacy and is committed to protecting the personal data of our members and website users.

This Privacy Policy explains how LXY POINT collects, uses, discloses, and safeguards your personal data when you register for membership, access our website, collect or redeem points, receive benefits, participate in activities, or contact us through various channels.

For the purposes of this policy, “Personal Data” means any information relating to an identified or identifiable natural person, directly or indirectly, in accordance with applicable data protection laws.

1. Personal Data We Collect

Types of personal data we collect may vary depending on the services you choose and your interaction with LXY POINT, including:

• 1.1 General Personal Data: e.g., First name, last name, prefix, date of birth, gender, and other information provided during membership registration or profile updates.
• 1.2 Contact Information: e.g., Phone number, email address, contact address, and social media handles linked to your LXY POINT account.
• 1.3 LXY POINT Membership Data: e.g., Member ID, member code, membership tier, registration date, accumulated points, points earned, points spent, expiring points, privileges, coupons, rewards, and membership history.
• 1.4 Transaction and Point Usage Data: e.g., Point earning history, point redemptions, reward claims, purchase transactions related to earning/spending points, date and time of transactions, participating merchants/partners, and transaction statuses.
• 1.5 Interests and Usage Behavior Data: e.g., Categories of products, services, stores, or privileges you are interested in, browsing history, search logs, clicks, promotion usage, and service usage patterns.
  This data is used to better understand member preferences and deliver tailored privileges.
• 1.6 Technical Data: When you access our website, we automatically collect technical information such as IP address, device ID, device type, operating system, browser type and version, access date and time, log files, cookie data, and website usage statistics.
• 1.7 Contact and Support Data: e.g., Messages, customer service inquiries, feedback, complaints, survey responses, and communication logs with LXY POINT.
• 1.8 Marketing Data: e.g., Preferences regarding news, promotions, special privileges, events, and preferred communication channels.

* Generally, LXY POINT does not intend to collect sensitive personal data unless strictly necessary for specific services, in which case we will proceed in compliance with legal bases and obtain explicit consent where required by law.

2. Where We Collect Your Data From

We collect personal data from multiple sources: directly provided by you during registration or service usage; generated through your use of LXY POINT services; received from participating merchants, brands, or partners; and automatically collected via cookies or similar technologies.

Where data is received from third parties, we process it in compliance with applicable laws.

3. Purposes of Collecting, Using, and Disclosing Data

We process your personal data for the following purposes:

• Member Services: Account creation, identity verification, point management, balance updates, and related membership services.
• Point Earning and Redemption: Calculating, recording, verifying points, and processing rewards, coupons, privileges, goods, or experiences from LXY POINT and partners.
• Request and Transaction Processing: Confirming transactions, status checks, error prevention, and post-redemption support.
• Personalized Privileges & Experiences: Analyzing preferences and behavior to recommend rewards, offers, promotions, and tailored experiences.
• Communications: Sending operational updates regarding accounts, points, terms changes, security alerts, or key notifications.
• Marketing & Promotions: Subject to consent or appropriate legal bases, delivering news, promotions, campaign offers, and event invitations via Email, SMS, or digital channels.
• Website & Service Development: Analyzing site performance, improving user experience, enhancing membership programs, and designing new benefits.
• Security & Fraud Prevention: Maintaining account security, monitoring abnormal transactions, preventing unauthorized point usage, fraud, or damage.
• Legal Compliance: Complying with applicable laws, regulations, official orders, or asserting/defending legal claims.

4. Legal Bases for Data Processing

We collect, use, or disclose your personal data based on appropriate legal bases, including:

• Contractual Performance: Membership registration, point accumulation, and reward redemptions.
• Consent: Marketing communications or specific processing required by law.
• Legitimate Interests: Security, fraud prevention, service analytics and improvement, balancing data subject rights.
• Legal Obligations: Compliance with statutory data retention and reporting requirements.

5. Disclosure of Personal Data to Third Parties

To deliver LXY POINT services effectively, we may disclose necessary personal data to:

• LXY POINT Merchants, Brands, and Partners: To process point earnings, redemptions, privileges, promotions, or selected services.
• Service Providers: IT support, hosting, cloud infrastructure, data analytics, customer service, Email/SMS platforms, cybersecurity, and marketing agencies.
• Professional Advisors: Auditors, legal counsel, or consultants who require data access.
• Government & Regulatory Authorities: When required by law or valid legal orders.

Receivers are required to process data strictly as necessary and implement appropriate data protection safeguards.

6. International Data Transfers

Where cloud infrastructure, technology vendors, or partners operate outside Thailand, your personal data may be transferred internationally.

LXY POINT ensures that adequate data protection measures and legal compliance safeguards are enforced.

7. Data Retention Period

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, throughout your active membership, and for any additional statutory period required for legal compliance, audit, or claim defense.

Data is securely erased, destroyed, or anonymized upon expiry of retention requirements.

8. Data Security Measures

LXY POINT implements administrative, technical, and physical security measures to safeguard personal data against unauthorized access, loss, misuse, modification, or disclosure.

9. Cookies and Related Technologies

We use cookies and similar tracking technologies to ensure optimal website functionality, remember preferences, analyze web traffic, and deliver personalized promotions.

Cookies may include strictly necessary cookies, analytical cookies, functional cookies, and marketing cookies.

Consent preferences can be updated via Cookie Settings on our website. For more details, please refer to the LXY POINT Cookie Policy.

10. Data Subject Rights

Subject to applicable data protection laws, you possess statutory rights including: right of access, rectification, erasure, restriction of processing, objection, data portability, consent withdrawal, and lodging complaints with regulatory authorities.

Withdrawal of consent does not affect processing lawfully conducted prior to withdrawal. To exercise your rights, please contact us via the details in “Contact Us”.

11. Third-Party Websites & Services

Our website may link to third-party partner websites or services governed by their own privacy policies outside LXY POINT control. We recommend reviewing third-party privacy policies prior to disclosing personal data.

12. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes in services, technologies, business practices, or laws. Material updates will be notified via our website, email, or appropriate channels. The latest revision date is displayed at the top of this policy.

13. Contact Us

If you have questions regarding this Privacy Policy or wish to exercise your data subject rights, please contact:

© LXY POINT. All Rights Reserved.