Privacy Policy
Last updated: January 2025 · PDPA & GDPR Compliant
1. Introduction
TheBuyingHub ("we," "us," or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in accordance with the Thailand Personal Data Protection Act B.E. 2562 (2019) ("PDPA") and applicable international data protection laws, including the EU General Data Protection Regulation ("GDPR").
2. Personal Data We Collect
We collect the following types of personal data: (a) Contact Information: name, email address, phone number, shipping address; (b) Account Information: email, password (encrypted), order history; (c) Payment Information: we do not store full credit card numbers; payment processing is handled by our secure payment providers (Stripe, PromptPay); (d) Usage Data: IP address, browser type, pages visited, cookies; (e) Communication Data: messages you send us via contact forms, email, or chat.
3. How We Use Your Personal Data
We use your personal data for the following purposes: (a) Processing and fulfilling your orders, including shipping and delivery; (b) Communicating with you about your orders, account, and customer service inquiries; (c) Processing payments and preventing fraud; (d) Sending promotional emails and newsletters (only with your consent; you can opt out at any time); (e) Improving our website, products, and services; (f) Complying with legal obligations under Thai and international law.
4. Legal Basis for Processing
Under the PDPA and GDPR, we process your personal data on the following legal bases: (a) Consent: for marketing communications and optional data collection; (b) Contract Performance: to fulfill your orders and provide services you requested; (c) Legal Obligation: to comply with Thai laws, tax regulations, and consumer protection requirements; (d) Legitimate Interests: to prevent fraud, ensure security, and improve our services.
5. Data Sharing & Disclosure
We do not sell your personal data. We may share your data with: (a) Shipping carriers (e.g., Thailand Post, DHL, FedEx) for order delivery; (b) Payment processors (e.g., Stripe, PromptPay) for transaction processing; (c) Service providers (e.g., email, hosting, analytics) under strict data protection agreements; (d) Thai government authorities when required by law. All third parties are bound by confidentiality obligations and may only use your data for the purposes we specify.
6. Data Security
We implement industry-standard technical and organizational security measures to protect your personal data, including SSL/TLS encryption for data transmission, secure data storage, access controls, and regular security assessments. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations (e.g., tax records under Thai law), resolve disputes, and enforce our agreements. Order data is retained for a minimum of 5 years as required by Thai tax law. Marketing data is deleted when you withdraw consent.
8. Your Rights (PDPA & GDPR)
You have the following rights regarding your personal data: (a) Right to Access: request a copy of your personal data; (b) Right to Rectification: request correction of inaccurate data; (c) Right to Erasure: request deletion of your data ("right to be forgotten"); (d) Right to Restrict Processing: limit how we use your data; (e) Right to Data Portability: receive your data in a structured format; (f) Right to Object: object to processing based on legitimate interests; (g) Right to Withdraw Consent: withdraw consent for marketing at any time. To exercise these rights, contact us at info@thebuyinghub.com.
9. Cookies
We use cookies and similar technologies to operate our website, analyze traffic, and personalize content. Types of cookies: (a) Essential: required for website functionality (cart, checkout, authentication); (b) Analytics: help us understand how visitors use our site; (c) Marketing: used to display relevant advertisements. You can control cookies through your browser settings. Disabling essential cookies may affect website functionality.
10. International Data Transfers
As we ship internationally and use global service providers, your personal data may be transferred to and processed in countries outside Thailand, including the United States and EU member states. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) and adequacy decisions, to protect your data during international transfers in compliance with the PDPA and GDPR.
11. Children's Privacy
Our website is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a minor, please contact us immediately, and we will take steps to delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes are effective immediately upon posting on our website. We will notify you of significant changes via email or a prominent notice on our website. We encourage you to review this page periodically.
13. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact our Data Protection Officer at: TheBuyingHub Co., Ltd., Sukhumvit Road, Bangkok 10110, Thailand. Email: info@thebuyinghub.com. Phone: +66 98 990 5659.