Policies & Document

The Company places great emphasis on fair and equal treatment towards every single shareholder; either major shareholders, individual shareholders, institutional investors, or foreign shareholders. There are regulating guidelines as follows:

1. Regularly disseminate the information to shareholders via channels supported by the Stock Exchange of Thailand and the Company’s website and prepare a channel that shareholders can directly request for any information or make inquiries via the Board of Directors’, Independent Directors’ and the Investor Relations’ Email addresses.
2. Devise internal rules and regulations on the use of information within the organization in coherence with the securities-related laws. Constant reviews are encouraged to promote fairness and equality towards all relevant stakeholders, as follows:
   • Inform the rules, regulations, and policies related to the use of internal information to the Directors, executives, and associates regularly to ensure that those rules, regulations, and policies are well aware of and obliged by everyone.
   • The Company’s trading transactions are forbidden one month in advance before the due time that the financial statements are disclosed to the public. The Company Secretary Office will inform the Directors and executives of the said silent period. During that period, there were no shares traded by the Directors and executives.
   • The Directors’ and executives’ shareholding information is disclosed in the annual report, as regulated by the Securities and Exchange Commission. Furthermore, the Board of Directors has placed the protocols in following up with business ethics compliance on the use of internal information. Directors and executives are advised to submit a copy of the report recording any changes in their shareholding information to the Company Secretary Office monthly to report to the Board of Directors every time changes occur. The Company Secretary Office will consolidate the information and report to the Board of Directors’ meeting.
   • The Company explicitly set regulations concerning related parties transaction and connected transaction to be in alignment with the regulations of the Stock Exchange of Thailand and the Securities and Exchange Commission by explicitly specifying matters to be reported to the Board of Directors or shareholders, as well as become more cautious to ascertain prevention of related parties’ transaction that violates the Stock Exchange of Thailand’s regulations or Securities and Exchange Commission’s regulations

Policies on Treatment towards Different Groups of Stakeholders

The Company places a strong emphasis on all stakeholders, adhering on to everyone’s mutual and sustainable benefits as the principles. Policies and roles imposed upon stakeholders are clearly written down in “Business Ethics Manual”, with details as follows:

The Company is committed to managing personal data concerning privacy information of customers, suppliers, and associates as well as comply with the regulations as stipulated by laws, along with strict supervision of both documents and operating system to ascertain safety, steadiness, and transparency of customers’, suppliers’, and associates’ privacy information. To accommodate the usage of the Personal Data Protection Act B.E. 2562 which will be enforceable by law in 2022, the following actions have been taken:

1. The company appointed a Personal Data Protection Committee to manage and prepare the operational framework by analyzing and improving operating procedures and determining the policies and practices as stipulated by laws. The Personal Data Protection Committee consists of the following:

   Name - Surname	Position
   1. Mr. Weerapan Ungsumalee	Chairman of the Personal Data Protection Committee
   2. Ms. Sudapa Chamod	Personal Data Protection Committee
   3. Ms. Wannee Juntamongkol	Personal Data Protection Committee
   4. Ms. Saowanee Sirariyakul	Personal Data Protection Committee
   5. Mr. Nitat Aroontippaitoon	Personal Data Protection Committee
   6. Mr. Aryuratas Chai-anan	Personal Data Protection Committee
   7. Mrs. Apiradee Thavilap	Personal Data Protection Committee
   8. Mrs. Surangkhana Chaiprasart	Personal Data Protection Committee
   9. Mrs. Kamonthip Amornariyakul	Personal Data Protection Committee and Data Protection Officer

   To elaborate, Mr. Weerapun Ungsumalee, who has knowledge and experience in the field of information technology, is the Chairman of the Corporate Data Privacy Protection and the representative of the Board of Directors in managing data privacy.

2. The Personal Data Protection Committee has a duty to determine policies and operation plans for personal data protection to achieve standard operating procedures and abide by the law.
3. Determine the procedures concerning objectives, conditions, announcements, consent, agreements, gathering, usage, and personal data disclosure as stipulated by laws along with supervising, giving recommendations, supporting, promoting and reviewing policies for implementation.
4. The Personal Data Protection Committee has appointed a Data Protection Officer who has the authority to supervise and audit the collection, usage or disclosure of personal data to comply with the order of the Data Controller including risk assessment, handling of requests and complaints.
5. The Company employs high security systems in both technology and processes to prevent cybercrime of confidential information and develop personnel at all levels to ensure that the Company has standard personal data security with measures such as firewall and intrusion detection software, using Data Encryption technology, installing Scan Virus software for effective virus protection. Including determining the level of the authorization according to the level of associates. Further details can be found in the Personal Data Security Policy on the Company’s website, Facebook, and Line Application.

In addition, the Company has organized training on personal data protection to enhance knowledge and understanding for associates, as well as setting data privacy protection as the performance evaluation index of related associates. Additional details of data privacy policy can be found on the Company website at: http://hmpro.listedcompany.com/policy_document.html

Data Privacy Safety Statistics

Procedure to manage after Personal Data Breach

The Company has clear procedures in place to respond to the personal data breach. When data breach occurs, the Internal Audit department along with security incident response team will investigate the root cause, prepare risk management plan to mitigate the risk in case the personal data breach may affect all stakeholders, and report to the Personal Data Protection Committee as well as report further to the Audit Committee and take precaution to prevent future breach.

The Company appoints the Risk Management Committee that coordinates with the Personal Data Protection Committee to supervise and prepare the business plans by analyzing and developing the business framework to support future technology. The Company continually allocates resources and develops information technology related to the Company’s business. Besides, the Company emphasizes confidentiality of data as the Company involved with multi-parties: customers, suppliers, etc., by determining authorization for different levels and responsibilities of associates and set up the information technology security protocol such as back up site. Also, the Company determines Policies and Guidelines on information technology as follows:

1. The Company complies with relevant law, regulation, discipline, and standards related to information technology such as NNT Security Control Guide, one of the global practice which is in line with the standards of Center for Internet Security (CIS), North American Electric Reliability Corporation (NERC), National Institute of Standards and Technology (NIST) and PCI Security Standards Council.
2. The Company establishes an information technology security system to ensure the confidentiality, creditability, and data availability. Furthermore, the Company has a protocol to prevent the inappropriate usage of data or data editing without authorization by determining authorization for associates’ different levels and responsibilities.
3. The Company has considered the risk of information and technology and determined measure to manage the risk such as providing Help Desk and Hotline as part of the reporting system, training sessions on preliminary problems solving and reporting system according to the level of severity for the responsible and related persons to ensure business continuity.
4. The Company has Cybersecurity insurance policies, which intend to cover a variety of both liability and property losses that may occur when a business engages in various information technology activities, such as selling on the internet or collecting data within its internal electronic network.
5. The Company properly allocates and manages resources related to information technology by determining criteria to identify information technology priorities, consistent with business strategies, urgency, business model alignment, etc.

The Company focused on responsible marketing communication and the privacy of customers’ information, particularly through PR activities or online communication through social media. The Company respected customers’ privacy and gave them a choice to unsubscribe news (opt-in, opt-out) and data as well as maintained the information accuracy. Moreover, the Company continued to monitor the information to ensure the message is correct.

Cyber risk prevention and management can be detailed as follows:

• To conduct a screening and access authorization only for authorized persons to ensure proper access, implementation, provision, and information back-up.
• To set forth a cycle of system inspection, task relevant staff with operation system control and unforeseen problem-related solutions, and continually perform state-of-the-art hardware and software development to cope with a new type of cybercrime and prevent access to information responsible by an unauthorized person.
• To perform a Cyber Security Drill and devise an emergency plan in case of system breakdown as Disaster Recovery Plan (DRP). The drill is yearly executed to address an issue promptly, lessen the damage to the Company’s information system and ensure the continuation of the Company’s operation.
• The formulate the Business Continuity Plan (BCP) mainly related to information and Cyber Security Risk and test semi-annually. A clear escalation process is available for associates to follow if any suspicious event occurs according to the Level of Severity (Abnormalities to Crisis). Alerting systems and communication channels are also in place.
• To install a firewall system and equipment and monitor a threat surveillance system, both at the head office and stores. A monthly meeting ensures that a new threat is monitored and inspected. Simultaneously, an attack report and a solution’s outcome are discussed as part of the information to devise a preventive measure.
• To perform a penetration testing and vulnerability assessment regularly to assure the current protection system’s effectiveness.
• To roll out an information security management in accordance with international standard such as ISO/IEC 27001 (Information Security), which is a standard guideline of Information Security Management System (ISMS)
• To enhance a continual awareness of safety cyber pertaining to a threat, prevention and related IT laws amongst the workforce through all internal communication channels and training. Similarly, E-learning training allows associates to access the system regardless of location and time, and an assessment ensures that the online learning tool will be improved for better use. Associates at all levels can partake in this educational program.
• The Company also continuously provides knowledge on data protection and information technology management, as well as cultivates associates to recognize the importance of Cyber Security system. The knowledge and information are passed to every associate in the Company through ICT News Email 2 times per month.

Statistics of data leakage in Information Security

For further detail regarding Cyber Security Policy, please find on the Company’s website at http://hmpro.listedcompany.com/policy_document.html

The Company has imposed regulations to all associates to perform duties under the rules regarding rights in intellectual property such as trademark or any other intellectual properties identified by law. For instance, the use of licensed computer programs, whereby all programs must pass the qualifications, be copyrighted, and be installed by the Information and Communication Technology (ICT) Department only. Also, associates are advised to thoroughly check before using any information to determine whether it violates others’ rights in intellectual properties. Moreover, associates are encouraged to have knowledge and understanding regarding legal regulations and potential damage caused by the violation of Intellectual Property rights.

Besides the prevention of intellectual property violations, the Company develops products under the Company’s private brands. Thus, the Company has the policy to protect its intellectual property by registering those intellectual properties such as a trademark patent. In case of intellectual property violation, the Company will prosecute those who violated.

Complying with the rules of law is the significant foundation of the Company’s business operations. This includes domestic law, international law, customs, traditions, and cultures relevant to the operations. The focus is on the enhancement of the standard practice to be above what is regulated by law

The Company respects the protection of human rights and supports international principles and goals such as the Universal Declaration on Human Rights and the International Labor Organization (ILO)’s Declaration of Fundamental Principles and Rights at Work and, thus, ensures that the Company’s business is not involved in any infringements of human rights, e.g. forced labor, child labor and has standard working hour according to labor law. It emphasizes respect and fair treatment towards all groups of stakeholders based on human dignity, regardless of origins, race, gender, age, skin color, religion, physical condition, status, and nobility along with promoting the compliance of human right principle within the organization. The Company has also put an internal monitoring system regarding human rights protection that is up to the international standard to protect all stakeholders from possible damages from violation of human rights caused by the Company’s business operations. In case compensation is considered, it will not be lower than the rate determined by law.

The Board of Directors strongly emphasizes that disclosure of accurate, complete, transparent, and timely information is of utmost importance to investors and related parties for financial statements and other critical information that impacts the Company’s stock price. Disclosure of information was done via the Stock Exchange of Thailand’s channels and the Company’s website for investors and all stakeholders both in Thailand and internationally to regularly obtain reliable and adequate information for their decision.

Analysts Meeting

The Company normally arranges a quarterly session for announcing the operating results to analysts, investors, and interested shareholders. Also, Investor Releases are published quarterly, and extra analyst meetings can be held in case significant matters arise.

Investors Meetings and Company Visits

The Company opens the opportunity for securities analysts, shareholders and institutional investors, both local and international, to meet with the management team. Also, the Company has arranged both physical meeting and web conference for investors to be informed of operational performance, strategic plans, growth direction and other important situations that may occur throughout the year, as well as having their questions answered.

In the past year, the Company has organized the following activities:

1. Investor Meetings or Roadshow, a total of 9 events,
   • 4 International Roadshow in which 3 events were held in Singapore and another event was in Hong Kong
   • 5 Domestic Roadshow, as arranged by The Stock Exchange of Thailand (SET) and the securities firm, for both retail and institutional investors from domestic and overseas.
2. A total of 36 Company visits and Store visits with physical meetings for analysts, retail and institutional investors from domestic and overseas.
3. A total of 47 Virtual Meetings through Virtual Conference Call Event arranged by both domestic and international securities firms.
   • 6 International Virtual Conference (Virtual event)
   • 4 Local Virtual Conference with local institution
   • 37 One on One Virtual Meeting with international investors
4. Opportunity Days (for listed companies to meet with investors) organized by the Stock Exchange of Thailand on March 13th, May 8th, August 7th, and November 9th , 2023 with investors and the media in attendance.
5. A total of 4 Analyst Meetings with local analysts in the form of physical meeting and 2 post-result calls with foreign investors on virtual meeting.

Press Conference and Media Relation

In 2023, the Company arranged one press conference on the annual business results of 2022, business plan and outlook of 2023. There were also 4 press releases provided to the media informing business progress on a quarterly basis as well as business progress and other marketing events throughout the year.

The Board of Directors facilitates and promotes directors to attend training courses and seminars in order to accumulate knowledge that will benefit the Company. The Board of Directors assigned the Company Secretary to collaborate and notify directors of upcoming training courses and seminars as the training schedule. DAP or DCP trainings are considered mandatory. In 2023, there was one director, namely Mrs. Suwanna Buddhaprasart, attending the Director Leadership Certification Program (DLCP 9/2566) training course.

The Board of Directors and Executive Committee have a regular meeting every month and may have an extra meeting as necessary. The executives could attend the Board of Director Meeting in appropriate agendas. In order to conduct a Board of Directors’ meeting and vote in the meeting, the Company requires a quorum of two-third of the directors to participate (66.67%). The schedule of the Board of Director meeting and the sub-committee’s meeting for the whole year are defined in advance, and the calling notice for meeting with the agenda of the meeting will be sent at least 5 working days in advance for the directors to prepare prior to the meeting.

During the meetings, the Chairman sufficiently allocates time in explaining important issues, encourages every director to express opinion creatively and independently, and uses discretion carefully. Besides, the Company Secretary will record the minutes of the meetings. The directors, who have a conflict of interest in any issue, will be absent and have no right to vote on that issue. Meeting documents, meeting minutes as well as related information and documents shall be wholly kept in a safe place and recorded into the electronic files along with the original copies.

In addition, the Board of Directors has determined that non-executive directors can conduct meetings among themselves as appropriate. No executive directors participated in such meetings to discuss various issues related to management that have material impact to the Company. In 2023, there was a meeting of non-executive directors 1 time on December 26, 2023. The purpose of this meeting was to examine the overall organization management, material issues that could have impact on the business and required improvement, and selfevaluation of the Board of Directors, Sub-committee, and Managing Director.

The Board of Directors shall be updated regularly on any change in laws, rules, and regulations, and important guidelines, movement on industrial information and good corporate governance guidelines so that the performance as the Board is in accordance and keep abreast with the laws, regulations, and sound principles and guidelines.

The Board of Directors supervises the management to monitor and assess the company’s financial position as the important agenda to report to the Board of Directors’ meeting on a monthly basis. The Board of Directors and Management will jointly find the solution immediately when there is a weak sign of liquidity and debt repayment ability. Nonetheless, the guidance to solve this issue must be reasonable and fair to all concerned, including complying with the concerned rules and regulations such as the disclosure rule.

In 2023, there were 12 Board of Directors meetings, and Sub-Committee meetings: 12 Executive Committee meetings, 12 Audit Committee meetings, 3 Nomination and Remuneration Committee’s meetings, and 1 Non-Executive Directors meeting.

The Company has a policy of evaluating associates that are fair to all associates. The performance evaluation is separated according to the type of work performed twice a year to regularly reflect the performance results. For example, to appraise associates involves taking care of corporate image, which includes operation division, customer satisfaction division, and corporate communication. There will be the evaluation of customer satisfaction and engagement toward the Company brand and proportion of PR expense to total sales, which will be taken as the factors to calculate the welfare apart from salary base. Including appropriate treatment for associates in terms of opportunities and compensation that are consistent with the Company’s performance both in the short term, such as bonuses according to the Key Performance Indicators (KPI), Objective and Key Results (OKR) and operating results of the Company each year and in the long-term, such as the Employee Joint Investment Program (EJIP) which will ensure that the Company will be able to attract, develop potential, and retain associates with good performance to have the motivation to work. In a market situation with high competition, associates will be offered compensation at appropriate rates and in line with market guidelines for the main compensation component. In addition, the Company also applies Management by objectives, 360 Degree Feedback, team-based performance appraisal, including agile ability to evaluate and rank the performance of associates.

Regarding the remuneration structure, the company provides remuneration at a rate not lower than the minimum wage stipulated by the law. One of the determinants for determining the compensation structure is the principal connectivity between job levels and job value. In addition, range structure, the span between the minimum and maximum base salary an organization will pay for a specific job or group of jobs, has also been applied for the management of remuneration structure with the following rates: lowest, median, and highest.

In determining wage structure, the company conducts surveys and benchmarks compared to organizations in the labor market within the retail and outside retail industry. Furthermore, the company also considers salary proportion and other income so that it is appropriate, competitive to the market, and sufficing the well-being of the associates and their families (Living Wage) Principles.

The Company has a policy towards its associates as follows:

1. The Company treats the associates with politeness and respect to individual and human dignity.
2. The Company has fair remuneration to the associates.
3. Assign and transfer the position, including reward and punishment to the associates shall be made with honestyand based on the associates’ knowledge, ability, and suitability.
4. The Company emphasizes the importance of knowledge competency development by providing opportunities for all associates on regular basis.
5. The Company regularly preserves the working environment to be safe for associates’ life and properties.
6. The Company opens to associates’ opinions and suggestions based on associates’ professional knowledge.
7. The Company strictly complies with labor laws and any regulations related to the associates.
8. The associates are allowed to file complaints to the Company if the associates are mistreated through the given specified system and procedure.
9. The Company respects associates’ rights in joining collective groups of their free choice and does not prevent associates from forming a union or joining other labor unions.

According to the notification of Capital Market Supervisory Board regarding Establishing Compliance Unit of Business Operator which applies to the person licensed to undertake the following businesses: (1) securities brokerage, (2) securities dealing, (3) securities underwriting, (4) mutual fund management, (5) private fund management, (6) being derivatives broker, (7) being derivatives dealer, and (8) being a derivatives fund manager. The notification stipulated that the business operator shall arrange to have the compliance unit responsible for monitoring the business operator’s compliance with good governance.

The Company have a dedicated Compliance Unit by assigning the legal department for external affairs and Internal Audit for internal activities on top of assigning each department and division to manage on its own. For examples, compliance on business licenses, legal compliance, and compliance related to the Stock Exchange of Thailand and the Securities and Exchange Commission will be taken care by the Legal Department. Compliance on the standard operations of the branches will be the responsibilities of the Branch Operations Center Division; and there is also the Internal Audit Department that will audit each department’s operations to ensure standardized practices as a whole.

To promote the procedures of good governance, the Company has an internal audit to review and follow up the result of work performing to the executives by performing its tasks independently and reporting the results to the Audit Committee directly and regularly. The chief of internal audit is Mr. Aryuratas Chai-anan, Vice President of the Internal Audit department appointed by the Audit Committee.

Moreover, there is an appointment to an auditor who passes a consideration from the Audit Committee to evaluate the effectiveness of the internal control in accounting. The resolution of shareholders’ meeting of 2023 approved to appoint Mrs. Gingkarn Atsawarangsalit, the auditor with certified license no.4496 of EY office company limited, to be the Company’s and subsidiaries’ auditor of 2023. In this regard, the auditor has no direct and indirect benefit or conflict of interest, including not being a debtor, creditor, executives, major shareholder, or does not be related to the aforementioned person. The auditor is independent and has acceptable qualifications as approved from the Securities and Exchange Commission.

The company’s policy is to operate the business with honesty, openness, transparency, and fairness. Directors, executives, and all associates are not allowed to do any business that is considered to compete with the Company’s business. They are advised to avoid making transactions related to oneself, individuals, or juristic persons that are prone to have conflicts of interest with the Company. The Board of Directors is responsible for ensuring strict compliance to the criteria, procedures, and disclosure of any inter-related transactions regulated by laws or the Corporate Governance Office.

In case the so-called inter-related transactions are necessary or unavoidable, such transactions must be in line with the condition of a general business transaction as approved by the Board of Directors on a transparent and fair basis. This is to be regarded as if a transaction was always made with the external party with the Company’s utmost interest. Stakeholders must not get involved in considering to approve the transactions in which they have conflicts of interest. On the other hand, in case the inter-related transactions which are not in accordance with the general business transaction approved by the Board of Directors, and might possibly generate conflicts of interest, such cases must be investigated and opined by the Audit Committee, prior to the proposal to the Board of Directors or shareholders for approval.

• Report of related-party transactions : Directors and executives are required to report for the related-party transactions declaration form for the accounting period ending December 31 every year in order to demonstrate transparency and cautiousness in doing any transactions. The Company Secretary Office will hand out this declaration form and compile all the information.
• Disclosure of directors, executives, and related parties’ conflicts of interest: The report is due to be prepared within 30 days after the date of assumption of duties and to be reported annually as of December 31. For cases taking place during the year, directors, executives or any related parties have to make transactions, either directly or indirectly, with the Company or its affiliates, such activities must be declared to the Company for the type of contract that being made, name of the partner of the contract and any interests eligible to the directors or executives, in order to ensure transparency in making such transactions. Throughout the year 2023, there were no board of directors, management or related parties who have transactions or conflict of interests with the Company.
• Report of Conflicts of interest : Directors and executives are required to report their own and related parties’ transactions if the interests are related to the Company’s management and administration according to the criteria, conditions, and procedures regulated by the Securities and Exchange Commission. The Company Secretary Office will compile the information and submit a copy of this conflict of interest report to the Chairman of the Board and the Chairman of the Audit Committee, which is to be reviewed within 7 days after receiving.
• Disclosure of strategic shareholder information : The Company is responsible for preparing the share distribution report on a free-float basis by individual minor shareholders or shareholders who are not involved in directing or managing the Company (Strategic Shareholder). The proportion of the free float shares is considered a significant factor in determining the Company’s liquidity of share trading transactions. This benefits all shareholders and investors so that they can conveniently purchase or sell their shares. Also, reasonable price is also another appealing factor for those who are interested in investing in the Company.

In 2022, the Company had not received any complaints regarding acts of violation of Conflicts of Interest conducted by directors or executives.

The Company places great emphasis on operating the business with morality, taking business ethics as a way of practice, and an excellent guiding principle for directors, executives, and all associates to follow to encourage effectiveness and transparency. This would create trust and acceptance in the Company’s transparent operations, as well as sustainably and fairly create values to all stakeholders. The Board of Directors has initiated the “Code of Conduct” as part of the Company’s “Good Corporate Governance” principles, which can be downloaded from the Company’s website.

The Code of Conduct comprises policies and ways of practice in 6 different perspectives that reflect the Company’s values in business operations. Directors, executives and associates are expected to adhere to and abide by the following topics:

1. Principles of operating business
2. Conflicts of interest and confidentiality
3. Responsibility towards the Company and its assets
4. Stakeholders management
5. Supervision on compliance to business ethics
6. Receipt of complaints regarding corporate governance and business ethics

This manual has been distributed to all directors, executives and associates to encourage the execution of a code of conduct and can be used as a reference. Assuming that everyone has accountability to acknowledge, understand and strictly comply with the policies and protocols stated in the codes of conduct. Everyone will be evaluated on the execution of the code of conduct via performance evaluation yearly. The Code of conduct was integrated and communicated into the Company’s culture (HomePro Culture). The Company has published this manual on the website under the good governance topic for shareholders, investors, and interested individuals’ convenient access.

The Company has consistently been placing great significance on equipping knowledge and understanding of good governance and business ethics. The Board of Directors has been working to ensure that communication on such matters is sufficient to encourage adhering with such policies, as seen from incorporating the good governance topic and business ethics as one of the orientation agendas for directors and associates. In 2023, there were 24 orientation sessions for associates.

Disciplinary Action

In case of wrongdoing by associates, the Company has the following disciplinary action in place as following;

• Verbal warning or warning letter
• Punishment by:
  • Wage reduction or demotion
  • Job suspension
  • Withholding of annual bonus
  • Not providing pay raise
  • Requesting for resignation
  • Dismissal

The Company inspected and monitored associate behavior according to business ethics. In 2023, there was 0 serious violation or legal proceeding found. Nevertheless, the Company focuses on encouraging associates to comply with business ethics, along with inspecting those compliances continuously