Privacy Policy

สรุปภาษาไทย (Thai summary)

เราเก็บข้อมูลที่จำเป็นต่อการสั่งตัดและจัดส่ง เช่น ชื่อ อีเมล โทรศัพท์ ที่อยู่ และขนาดตัว เพื่อปฏิบัติตามสัญญาซื้อขาย ชำระเงินผ่านผู้ให้บริการชำระเงิน และส่งอีเมลยืนยันคำสั่งซื้อ เราไม่สมัครรับข่าวสารการตลาดให้อัตโนมัติตอนชำระเงิน คุณสามารถขอเข้าถึง แก้ไข หรือลบข้อมูลได้ที่ ช่องทางติดต่อของร้านตามพระราชบัญญัติคุ้มครองข้อมูลส่วนบุคคล พ.ศ. 2562 (PDPA)

1. Data controller

The data controller for this storefront is KEiDENiM.CC Configurator (Bangkok, Thailand). For privacy requests, contact KEiDENiM.CC.

2. What we collect

• Order and contact details — name, email, phone, shipping address, order notes.
• Product configuration and measurements — fit selections and body measurements you provide so we can make the garment.
• Payment metadata — payment status and gateway references. Card details are handled by our payment provider (Beam); we do not store full card numbers on this site.
• Order tracking lookups — order number plus email or phone used to look up status.
• Technical data for currency display — we look up an approximate country from your IP on the server (IP itself is not returned or saved in your browser). We may store the detected country/region and matching display currency in local storage, and update them if that country changes.
• Security / abuse prevention — CAPTCHA challenges and, when enabled, security audit context such as IP and request path.

3. Why we use your data (legal bases)

• Contract — to take and fulfil your order, process payment, ship, and send transactional email (confirmations, status updates).
• Legitimate interests — to keep the storefront secure, prevent abuse, detect a suitable display currency, and improve fulfilment operations, in ways that do not override your rights.
• Consent — only where we ask for it (for example, optional marketing preferences if offered). Checking out does not subscribe you to marketing lists automatically.
• Legal obligation — where Thai or other applicable law requires retention of transaction records.

This notice is written primarily for Thailand’s Personal Data Protection Act B.E. 2562 (PDPA). If you are in the EEA/UK and we offer goods to you there, analogous GDPR rights and bases may also apply.

4. Who we share data with

We use service providers (processors) to operate the shop:

• Beam — payment processing and hosted checkout.
• SMTP2GO — transactional email delivery (when live email is enabled).
• Hosting / database — infrastructure that stores orders and related records for this application.
• Sendy (optional, admin-operated) — email list tooling. Customer emails are not auto-subscribed at checkout. Any marketing sync is initiated by staff and should rely on a valid PDPA basis (consent or another permitted basis) and unsubscribe options in those messages.
• Exchange-rate APIs — server-side rate lookups; they do not receive your order personal data.

5. Retention

Order and payment records are kept as long as needed for fulfilment, customer support, accounting, and legal requirements, then deleted or anonymised when no longer needed. Browser storage used for convenience (see below) stays on your device until you clear it or we change how the app stores those keys.

6. Cookies and local storage

This storefront does not use third-party analytics or advertising cookies. We currently rely on:

• Essential cookie — admin_session — httpOnly session for staff access to the admin area only. Not used for shopper tracking.
• First-party local storage — cart contents; measurements and shipping autofill for convenience; track-order search fields; detected country/region and display currency (not your IP); preferred currency; temporary pending-payment context during checkout redirects.

These first-party storage items support the shopping experience. You can clear them in your browser settings. If we later add non-essential analytics or advertising cookies, we will update this notice and, where required, ask for consent before enabling them.

7. Your rights

Under the PDPA (and similar laws where they apply), you may request to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete data where applicable
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Lodge a complaint with Thailand’s Personal Data Protection Committee (PDPC)

To exercise these rights, email our support contact. We may need to verify your identity (for example with an order number and the email used at checkout).

8. Security

We use industry-standard protections appropriate to an online store (HTTPS, access controls for admin tools, CAPTCHA on sensitive forms). No method of transmission or storage is perfectly secure; please use a strong unique password if you are a staff user of the admin area.

9. Changes

We may update this page when our practices or processors change. The “Last updated” date at the top will change when we do.