Privacy Policy

MEESUK SUPPLY CO., LTD. ("Company") is committed to protecting your personal data. This policy explains how we collect, use, disclose, and protect your information in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

1. Information We Collect

• Identity: Name, username, encrypted password
• Contact: Email, phone, shipping address
• Order Data: Purchase history, products ordered, payment method
• Payment: Payment proof (credit card data is processed by Omise, not stored by us)
• Technical: IP, cookies, browser, device, pages visited

2. Purpose of Use

• Process and ship your orders
• Authenticate and manage user accounts
• Contact regarding order status and inquiries
• Send newsletters and promotions (with consent)
• Analyze and improve website experience
• Legal compliance and fraud prevention

3. Third-Party Disclosure

We do not sell or rent your data but may share with:

• Omise: PCI-DSS Level 1 certified payment processor
• Banks: For payment verification
• Shipping Providers: For delivery
• Google Analytics: Anonymous usage analytics
• Resend: Email service provider
• Legal Authorities: When legally required

4. Data Retention

• Order data: minimum 5 years (tax law requirement)
• Account data: duration of use + 2 years after closure
• Contact data: deleted upon request unless legally required

5. Data Protection

• SSL/TLS encryption for all communications
• Passwords encrypted with bcrypt
• Credit card data processed via Omise (PCI-DSS) — we don't store it
• Access restricted to authorized personnel
• Regular backups and security audits

6. Your Rights (under PDPA)

• Right to Access — view your data
• Right to Rectification — correct inaccurate data
• Right to Erasure — delete your data
• Right to Object — object to processing
• Right to Withdraw Consent — unsubscribe
• Right to Lodge Complaint — with PDPC

7. Cookies

We use cookies to enhance user experience, save cart items, remember language preferences, and analyze usage. You can disable cookies in browser settings.

8. Contact DPO