Privacy Policy

Your privacy matters to us. This policy explains what personal data we collect, how we use it, and what rights you hold under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

1. What we collect

1.1 Information you give us such as name, email, phone number, shipping and billing addresses, and anything you write in our contact form.

1.2 Order information such as the items you bought, the amount, and your payment and delivery status.

1.3 Technical information such as IP address, browser type, and the pages you visit, collected through cookies.

We never store card numbers or CVV codes on our systems; payment details go directly to a PCI DSS compliant payment provider.

2. How we use it

2.1 To process your order, ship it, and issue tax documents.

2.2 To contact you about your order status or a question you have raised.

2.3 To prevent fraud and keep our systems secure.

2.4 To improve the website and the shopping experience.

2.5 To send marketing news, only where you have given consent.

3. Legal basis for processing

We process your data to perform our sales contract with you, to meet legal obligations such as keeping accounting records, for our legitimate interest in preventing fraud, and on the basis of your consent for marketing and non-essential cookies.

4. Sharing with third parties

We share only what is necessary with our shipping carriers, payment provider, hosting and email providers, and with government authorities where the law requires it. We do not sell or rent your personal data to anyone.

5. Cookies

We use essential cookies so that the cart and login work, and may use analytics cookies to understand how the site is used. You can refuse or delete cookies in your browser settings, though some features may then not work correctly.

6. How long we keep it

Order records and accounting documents are kept for the period the law requires, generally at least five years. Account data is kept while your account remains active, and is deleted or anonymised once it is no longer needed.

7. Data security

We protect your data with HTTPS encryption, hashed passwords, and access limited to staff who need it, guarding against unauthorised access, alteration, or disclosure.

8. Your rights

You may request access to and a copy of your data, ask us to correct it, request its deletion or the suspension of its use, ask for it to be transferred, object to processing, and withdraw your consent at any time. Contact us through the Contact page and we will respond within 30 days.

9. Children's data

This website is not intended to collect data from anyone under 20 years of age without parental consent. If we learn we have collected such data, we will delete it promptly.

10. Changes to this policy

We may update this policy from time to time. The version shown on this page is the one currently in force.

11. Contact us

For any question about this policy, or to exercise your rights, please reach us through the Contact page of this website.