นโยบายความเป็นส่วนตัว

Who is responsible for your information

KHINTAWAN / SIWAPHUMIBODIN ST. CO., LTD. is responsible for the personal data described in this policy when we determine why and how that data is processed.

Customer-care address: 58/1 Moo 1, Pak Hai Subdistrict, Pak Hai District, Phra Nakhon Si Ayutthaya 13120, Thailand.

Privacy contact: khintawan@khintawan.com

We seek to process personal data in accordance with applicable Thai data-protection law, including the Personal Data Protection Act B.E. 2562 (2019) and related requirements where they apply.

Personal data we may collect

The information we process depends on how you interact with KHINTAWAN. It may include:

Payment-card or bank-account details may be collected directly by the payment provider rather than stored by KHINTAWAN. We may receive payment identifiers, payment status and transaction information needed to manage the order.

How we obtain personal data

We generally obtain personal data directly from you when you place an order, create or use an account, submit a form, contact customer care, request a return, subscribe to communications or otherwise interact with the website.

We may also receive limited information from service providers involved in payments, delivery, website hosting, fraud prevention, analytics, email delivery or other services used to operate the store.

Some technical information may be collected automatically when you use the website, including through cookies, server logs and similar technologies.

Why we use personal data

We may process personal data for purposes including:

• processing, confirming, delivering and supporting orders;
• processing payments, refunds, cancellations and returns;
• providing customer support and responding to enquiries;
• maintaining website functionality, security, fraud prevention and troubleshooting;
• maintaining accounting, tax, compliance and business records;
• improving products, services, website usability and customer experience;
• sending transactional messages about orders, payments, delivery, returns or account activity;
• sending marketing communications where permitted and where any required consent or other lawful basis exists.

Depending on the activity, processing may be necessary to perform a contract with you, comply with a legal obligation, pursue a legitimate interest that is not overridden by your rights, protect vital interests, or rely on your consent where consent is required.

Marketing communications

Where we send optional marketing communications, you can unsubscribe using the link in the message or contact us. Unsubscribing from marketing does not prevent us from sending necessary transactional or service messages about an order, payment, return, account or security issue.

If marketing relies on consent, you may withdraw that consent for future processing. Withdrawal does not affect processing that was lawful before the withdrawal.

When we share personal data

We do not sell personal data to advertisers. We may disclose personal data only where reasonably necessary for legitimate business or legal purposes, including to:

• payment processors and financial-service providers;
• delivery, logistics or pickup-service providers;
• website hosting, security, cloud, email and technical-service providers;
• professional advisers, auditors, insurers or consultants where necessary;
• government authorities, regulators, courts or law-enforcement bodies where disclosure is required or permitted by law;
• a buyer, investor or successor in connection with a genuine corporate transaction, subject to appropriate confidentiality and legal requirements.

Service providers are expected to handle personal data only for the relevant service and in accordance with applicable contractual and legal requirements.

International data transfers

Some technology or service providers may process information on systems located outside Thailand. Where an international transfer is subject to legal restrictions, we seek to use an appropriate transfer mechanism, contractual safeguard or other lawful basis required by applicable data-protection law.

Cookies & similar technologies

The website may use cookies or similar technologies to keep the website and cart functioning, remember preferences, protect the site, understand website performance and support analytics or other permitted functionality.

Some cookies may be necessary for core website or checkout functions. Other cookies may depend on your choices, browser settings or a consent mechanism where applicable.

You can usually control cookies through your browser settings. Blocking necessary cookies may affect cart, checkout, account or other website functions.

How long we keep personal data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to fulfil orders, provide support, maintain security, meet accounting or tax requirements, resolve disputes and comply with legal obligations.

Different categories of data may have different retention periods. When data is no longer required, we seek to delete, anonymize or securely dispose of it as appropriate.

How we protect personal data

We use reasonable administrative, technical and organizational measures intended to protect personal data against unauthorized access, loss, misuse, alteration or disclosure. No internet transmission or storage system can be guaranteed to be completely secure, so we also encourage you to protect your account credentials and devices.

Your privacy rights

Subject to the conditions, exceptions and procedures provided by applicable law, you may have rights to:

• request access to and a copy of your personal data;
• request correction of inaccurate or incomplete personal data;
• request deletion or anonymization where the legal conditions are met;
• request restriction of certain processing;
• object to certain processing;
• request data portability where applicable;
• withdraw consent where processing is based on consent; and
• lodge a complaint with the competent data-protection authority where you believe your rights have been infringed.

To make a request, email khintawan@khintawan.com. We may need to verify your identity before acting on a request and may retain information where continued retention is permitted or required by law.

Children & legally restricted persons

Our online store is intended for customers who can lawfully enter into the relevant transaction. If we need to process personal data relating to a child or another person whose ability to consent or contract is legally restricted, we will seek to follow the additional requirements imposed by applicable law.

Third-party websites

Our website may link to websites or services operated by third parties. Their privacy practices are governed by their own notices, and we encourage you to review those notices when leaving our website or using a third-party service.

Changes to this Privacy Policy

We may update this Privacy Policy when our website, services, technology, business practices or legal obligations change. The updated version will be published on this page with a revised update date. Where required, we may provide additional notice of material changes.

Contact us about privacy

KHINTAWAN / SIWAPHUMIBODIN ST. CO., LTD.
58/1 Moo 1, Pak Hai Subdistrict
Pak Hai District, Phra Nakhon Si Ayutthaya 13120
Thailand

Email: khintawan@khintawan.com
Website: khintawan.com