Privacy Policy

Kanyaw Beauty ("Kanyaw Beauty", "we", "us", or "our") respects your privacy and is committed to protecting your personal data in accordance with the Personal Data Protection Act B.E. 2562 (2019) ("PDPA") of Thailand. This Privacy Policy explains what personal data we collect when you browse or shop at kanyawbeauty.example (the "Site"), why we collect it, how we use and protect it, and the rights you have over it.

By using the Site, placing an order, creating an account, or otherwise providing us with your personal data, you acknowledge that you have read and understood this Privacy Policy. Where we rely on your consent for a specific purpose (for example, marketing emails), we will ask for that consent separately and you may withdraw it at any time as described below.

1. Data controller

The data controller responsible for your personal data is:

[COMPANY LEGAL NAME], [COMPANY REGISTRATION NUMBER]
[REGISTERED ADDRESS, THAILAND]
Email: privacy@kanyawbeauty.example
Phone: [PHONE NUMBER]

We have not appointed a dedicated Data Protection Officer at this time. Requests regarding your personal data can be sent to the contact details above, or via our contact page.

2. Personal data we collect

We collect the following categories of personal data, depending on how you interact with the Site:

• Account data — first and last name, email address, phone number, and password (stored as a one-way hash, never in plain text).
• Order & shipping data — billing/shipping address (recipient name, phone, address lines, subdistrict, district, province, postal code), order history, and items purchased.
• Payment confirmation data — since we accept PromptPay bank transfers only, we ask you to submit the transfer amount, date/time, your name, phone, email, and an image of your payment slip so our team can verify and release your order. We do not collect or store credit/debit card numbers.
• Cart & wishlist data — items you add to your cart or wishlist, linked to your account or an anonymous session.
• Reviews — your name, email, star rating, and review text, if you submit a product review.
• Newsletter data — your email address, if you sign up for marketing emails or a product waitlist.
• Contact & support data — your name, email, and message content when you contact us.
• Technical data — IP address, browser/device information, and strictly necessary cookies (see Section 8).

3. Why we collect it & our legal basis

4. Who we share your data with

We do not sell your personal data. We share it only where necessary to run the Site and fulfil your order:

• Delivery couriers, so your order can be shipped to you.
• Our hosting and infrastructure providers, who store data on our behalf under contractual confidentiality obligations. [HOSTING PROVIDER(S) / SERVER LOCATION]
• Authorized Kanyaw Beauty staff, on a need-to-know basis, to process orders, verify payments, and provide support.
• Regulators, courts, or authorities, where we are legally required to disclose data.

If any of the above are located outside Thailand, we will only transfer your data where the destination country provides an adequate standard of data protection, or where another safeguard permitted under the PDPA applies (for example, a data transfer agreement).

5. How long we keep your data

• Account data is kept for as long as your account is active, and for [RETENTION PERIOD, e.g. 2 years] after your last activity, unless you ask us to delete it sooner.
• Order, payment, and invoicing records are kept for at least 5 years to meet Thai accounting and tax record-keeping obligations.
• Payment slip images are retained only as long as needed to verify your payment and resolve any disputes, then deleted.
• Newsletter/waitlist data is kept until you unsubscribe.
• Contact form messages are kept for [RETENTION PERIOD, e.g. 12 months] after resolution.

6. Your rights under the PDPA

Subject to the exceptions and conditions under Thai law, you have the right to:

• Be informed about how your personal data is collected and used (this policy).
• Access a copy of the personal data we hold about you.
• Rectify inaccurate or incomplete personal data — you can update most of this yourself under My account → Profile.
• Erase or anonymize your personal data, where it is no longer needed or you withdraw consent.
• Restrict or object to our processing of your personal data in certain circumstances.
• Data portability — receive your data in a structured, commonly-used format.
• Withdraw consent at any time, for processing that relies on consent (e.g. unsubscribe from marketing emails using the link in any email, or contact us).
• Lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) of Thailand, if you believe we have not handled your data lawfully.

To exercise any of these rights, submit a privacy request, or email privacy@kanyawbeauty.example. We will respond within the timeframe required by the PDPA.

7. Security

We use appropriate technical and organizational measures to protect your personal data, including encrypted password storage, access controls limiting staff access to what each role needs, and secure hosting. No method of transmission or storage is 100% secure; if we become aware of a data breach likely to affect your rights, we will notify the PDPC and affected individuals as required by the PDPA.

8. Cookies

We use only strictly necessary cookies/session storage to operate the Site:

• Keeping you logged in and remembering your cart between pages.
• Remembering your language preference (Thai/English).
• Protecting forms against cross-site request forgery.

We do not currently use third-party advertising or analytics cookies. If that changes, we will update this section and, where required, ask for your consent first.

9. Children's privacy

The Site is not directed at children. If you are under 20 (the age of majority in Thailand), please only use the Site with the involvement of a parent or legal guardian, as required for minors to give valid consent under the PDPA.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version here with an updated "Last updated" date, and where changes are material, we will notify you by email or a notice on the Site.

11. Contact us

Questions about this Privacy Policy or how we handle your data? Reach us at privacy@kanyawbeauty.example or via our contact page.