Privacy
We collect what an order and a delivery need, and nothing else. This page says what that is, why we hold it, and who else sees it.
Last updated
What we collect
When you place an order we store your name, email address, phone number if you give one, and delivery address, together with the items, quantities and totals of that order.
When you sign in we email you a link. We store the email address, when the link expires, and the IP address that asked for it. Once you are signed in we store the IP address and browser user agent of that session.
Neither the link nor the session is stored as readable text — only its SHA-256 hash. Someone with access to the database cannot turn what is stored back into a way to sign in as you.
What we do not collect
This site runs no analytics. There is no Google Analytics, no Meta pixel, no session recorder and no advertising cookie anywhere on it.
We never see your card details. Card and PromptPay information is entered on Stripe's own page and never reaches our servers.
Your basket lives in your own browser (localStorage) until you check out. Before that we cannot see what is in it.
Cookies
We set one cookie, cust_sess, which keeps you signed in. It is HttpOnly and set only on this brand's own domain.
Accounts are separate per brand: a session created on one of our storefronts is refused by another, even for the same email address.
Who else sees it
Stripe, our payment processor, receives your email address and the order lines in order to take payment.
Resend, our email provider, receives your email address in order to send sign-in links and order confirmations.
Cloudflare hosts this site and its database, and therefore processes every request made to it.
Delivery companies receive the name, address and phone number needed to bring the goods to you.
Meta is the messaging platform: a message you send our Page travels through Meta's systems under Meta's own policies.
Anthropic, our AI provider, receives chat conversations in order to generate automated replies (see the chat section).
We do not sell your data, and we do not pass it to anyone for advertising.
Chat messages (Facebook / Instagram)
When you message our Page, Meta delivers the message to us and we keep the conversation — the text, the time, and your Messenger user number (not your Facebook profile).
Replies may come from staff or from an AI assistant. The assistant's first message always says it is one, and typing "แอดมิน" (admin) hands you to a person at any time.
To write a reply, the conversation and our product catalogue (prices, colours, sizes) are processed by Anthropic's Claude. Your order and payment details are not used in chat.
Marketplace orders
If you order through Shopee or TikTok Shop, the order reaches us with whatever buyer details that marketplace chooses to share. Their policy governs their side; this one governs what arrives in our system.
How long we keep it
Orders and receipts are kept for as long as accounting and tax law require.
Sign-in links expire on their own and can be used once. Sessions expire at the time set when they are created.
We do not run scheduled deletion. If you want your data removed, see the data deletion page.
Your rights
Under Thailand's Personal Data Protection Act (PDPA) you may ask to see, correct or delete your personal data.
Contact us through the contact page and we will act on it.