บริการของ Meta หรือผู้ให้บริการบางรายอาจประมวลผลข้อมูลนอกประเทศไทย การส่งข้อมูลที่ร้านเป็นผู้รับผิดชอบต้องเป็นไปตามเงื่อนไขและมาตรการคุ้มครองที่กฎหมายกำหนดตามกรณี การใช้บริการไม่ใช่ความยินยอมแบบครอบคลุมต่อการโอนข้อมูลทุกประเภท ส่วนการประมวลผลที่ Meta รับผิดชอบเองอยู่ภายใต้นโยบายของ Meta
การลบบัญชีหรือสิทธิ์ที่เกี่ยวข้องอาจทำให้เข้าถึงเนื้อหาสมาชิกไม่ได้ ส่วนข้อมูล Messenger อาจต้องจัดการแยกจากบัญชีเว็บไซต์ โปรดระบุหากต้องการทั้งสองส่วน ร้านไม่สามารถลบข้อมูลที่ Meta หรือคู่สนทนารายอื่นดูแลเองได้
11. ข้อมูลของร้านแยกจากข้อมูลที่ Meta ดูแล
นโยบายนี้อธิบายข้อมูลที่อยู่ในความรับผิดชอบของร้าน การลบจากระบบร้านไม่ได้รับรองว่าจะลบข้อความ สำเนา หรือบันทึกใน Facebook/Messenger ของ Meta หรือของผู้รับรายอื่นด้วย และการลบแชต ถอนการเชื่อมต่อแอป หรือถอนสิทธิ์ผ่าน Meta ไม่ได้หมายความว่าข้อมูลที่ร้านเก็บไว้ถูกลบแล้ว หากต้องการลบข้อมูลฝั่งร้าน ให้ส่งคำขอตามข้อ 10
การจัดการบัญชี ข้อความ และสิทธิ์ที่ Meta ดูแลให้ใช้เครื่องมือของ Meta และดู นโยบายความเป็นส่วนตัวของ Meta เว็บไซต์หรือบริการภายนอกที่คุณเปิดผ่านลิงก์มีนโยบายของตนเอง
BJK Novel is the personal data controller for data the shop stores and uses to operate bjknovel.com and handle BJK Novel Page conversations through the shop's systems. Shop administrators receive and handle data requests.
Website membership: username or display name, email, member ID, password verification data, email verification status, registration and login dates, membership status, and access rights to novels or groups, depending on the registration method and services used.
Facebook Login: Facebook user ID, name, and email supplied by Facebook, subject to your permissions and available information, to create or locate an account and sign you in. The shop does not receive your Facebook password.
Reading and technical data: member ID, files or chapters opened, content type, time, browser or device information, and IP addresses and access or error logs generated by the website and hosting systems.
Account security: registration and login events, success or failure, time, IP address, browser information, email verification values, and hashed identifiers used to limit abnormal activity.
Messenger: Page ID and Page-scoped contact ID (PSID), message IDs, incoming and outgoing text, timestamps, direction and delivery status, image or attachment types and links supplied by Meta, sending error information, and the ID of an administrator replying through the shop's system. The system records attachment types and links; it does not automatically download and store attachment files. Links may expire under Meta's controls.
Shop rules and service: when menus or rule-based replies are used, data may include the novel and groups selected, conversation steps, matched rules, replies, job status, and reply pauses or administrator handoff status, together with details you provide to obtain help.
Sources are you, your website activity, and Facebook/Meta when you use the relevant services. The shop's Messenger connection receives new events from its connection start time; it does not automatically retrieve the entire earlier conversation history or automatically link a PSID to a website member account.
3. Purposes and legal bases
Requested services and contract performance: account registration and verification, login, membership and reading access, and services you request.
Customer service and legitimate interests: answering questions about novels, groups, and shop rules, following up enquiries, maintaining conversation continuity, and handing matters to administrators. When automatic replies are enabled, the system selects replies from configured rules and shop information; it does not automatically verify payment or approve reading access.
Security and legitimate interests: investigating reading problems and errors and preventing spam, abnormal login attempts, and misuse, taking your rights and the effects on you into account.
Legal obligations and legal claims: handling data requests, complying with lawful orders, and retaining necessary evidence for disputes or claims.
Consent: where processing legally requires consent, it will be sought separately for the purpose concerned and can be withdrawn. Reading this policy or using the website does not constitute consent to every use of data.
4. Required data and the effect of not providing it
Account and authentication information is needed to register, sign in, and access member content. Without necessary information, the shop may be unable to create or verify an account or provide the relevant access. You may choose a website account instead of Facebook Login through the registration options the website provides.
Messenger is optional; you may contact the shop by email instead. If information is insufficient to identify the account, conversation, or request, an administrator may need further details before helping. Legally required records apply only where the relevant legal duty applies. Please do not send passwords, one-time codes (OTPs), card numbers, or sensitive information unnecessary for your enquiry.
5. Cookies and Facebook services
The website uses membership and session cookies to remember login, check requests, and operate account features. A persistent membership cookie may last up to one year; sessions depend on settings and usage. You can remove or block cookies in your browser, but login or restricted content may not work. Removing cookies does not delete data stored on the shop's servers.
Pages with Facebook Login load Meta's software, which may receive device and usage information and use cookies under Meta's settings and policy. This policy page does not load the Facebook SDK or analytics scripts or add trackers. Its images are served from the shop's website.
6. Recipients, providers, and international transfers
Assigned shop administrators and system maintainers may access data as needed for their duties. Hosting, server, database, backup, and operational email providers may process data to deliver those services. Meta processes information for Facebook Login and Messenger and receives necessary data when the shop's system calls Meta services.
The shop may disclose necessary information to advisers, competent authorities, or relevant parties where a legal basis applies, such as compliance with a lawful order or handling a dispute, limiting disclosure to what is necessary.
Meta or some providers may process information outside Thailand. Transfers for which the shop is responsible must follow applicable legal conditions and safeguards. Using a service is not blanket consent to every international transfer. Processing independently controlled by Meta is governed by Meta's policy.
7. Security
System measures include HTTPS, authenticated administrator access to management pages, relevant permission and request checks, password hashing in the current membership system, verification of Meta webhook signatures, and restricted access to secrets and backups. Necessary events are recorded to help investigate faults and abnormal activity.
These measures reduce risk but cannot guarantee complete security. If a data incident is identified, the shop will investigate and take appropriate action, including notifying affected parties or authorities where legally required.
8. Retention
Accounts and membership access: retained while the account and access are in use and as needed for requests, legal obligations, or disputes. Account closure and deletion require administrator review; inactive accounts are not currently deleted automatically after a fixed time.
PDF reading logs: the existing cleanup job uses a cutoff of three calendar months before its run time and is scheduled daily. Newly expired records may remain until the next successful run. This applies to PDF logs, not every data category.
Security, email verification, and hosting logs: retention depends on incident investigation, misuse prevention, and system or provider settings. Expiry of an email verification link does not mean its record is immediately deleted. There is no assurance of one automatic deletion period covering all log types.
Messenger and shop-rule records:Messenger history currently has no automatic time-based deletion. Messages, attachment links, group selections, handoff information, and rule-based reply records may remain until an administrator assesses and deletes or anonymises them, considering open service issues, investigation needs, disputes, law, and your request. Turning off the bot or expiry of an attachment link does not delete history.
Backups and request records: kept separately from active data as needed for recovery, security, and evidence of request handling. Deletion from active systems may not immediately remove backup copies. Administrators will explain relevant limitations and consider deletion requests before bringing related data back into active use.
Where there is no fixed period, retention is assessed against the purposes above. Once there is no reason to retain information, administrators will consider deletion or anonymisation according to the data and applicable law. You can ask for a retention review or deletion using the channels below.
9. Your rights
Subject to legal conditions and exceptions, you may request access, copies and information about data sources; correction; receipt or transfer where legally applicable; objection; restriction; deletion or anonymisation; and withdrawal of consent for consent-based processing, without affecting earlier lawful processing. You may also complain to the competent expert committee under Thailand's personal data protection law.
Contact an administrator to exercise your rights. Administrators will verify ownership, handle the request within applicable legal conditions and time limits, and explain the outcome or restrictions. There is no self-service screen for deleting or exporting every data category; exercising your rights does not depend on an automated feature.
Email benjakul.premlumlurg@gmail.com or message the BJK Novel Page Inbox, stating “Personal data deletion request”. An administrator handles requests. This page provides no deletion API or automatic deletion confirmation.
Provide search details: your member username or email and, where relevant, the Facebook name or name used to contact the Page. For Messenger, include the approximate conversation dates and a short description of the matter. You may supply a member ID or PSID if known, but these IDs are not required.
Specify the scope: account and membership access, reading history, information received through Facebook Login, Messenger history/attachment links, group selections or administrator handoffs, or selected records. Include the relevant date range and a channel for the outcome.
Verify ownership proportionately: preferably use the email linked to your account or the original Messenger account. An administrator may ask for relevant account or conversation details to prevent deletion of someone else's data. If you cannot access the original channel, explain this so an appropriate alternative can be considered. The shop does not request passwords, OTPs, or excessive identity documents through this procedure.
Administrator review and outcome: after ownership and scope are established, an administrator reviews data controlled by the shop, acts on applicable rights, and replies through the verified channel. The response will explain what was deleted or anonymised, any data that must remain and why, and relevant backup limitations. If more information is needed or action cannot yet be taken, you will be informed. Applicable legal time limits apply; there is no automatic tracking number or guarantee of automated deletion.
Deleting an account or related access may prevent access to member content. Messenger records may need to be handled separately from a website account; specify both if required. The shop cannot delete data independently controlled by Meta or other conversation recipients.
11. Shop data and data controlled by Meta
This policy describes data for which the shop is responsible. Deletion from the shop's systems does not guarantee removal of messages, copies, or logs held by Meta in Facebook/Messenger or by other recipients. Deleting a chat, disconnecting an app, or revoking permissions through Meta does not mean the shop's stored records have been deleted. To request deletion on the shop's side, follow section 10.
Use Meta's tools for accounts, messages, and permissions controlled by Meta, and see Meta's Privacy Policy. External websites and services opened through links have their own policies.
12. Policy updates
Revisions will be published at this URL with their effective date. New processing purposes requiring notice or consent will be handled as required by law. Questions and rights requests can be sent to the email or Page in section 1.
