Privacy Policy
Last updated: 29 September 2026
This policy explains what personal data D’ami collects when you visit thedami.co or place an order, why we collect it, and your rights under Thailand’s Personal Data Protection Act (PDPA).
Who we are
D’ami is operated by Natpicha Laoboonchai. We are the data controller for the personal data described here. Contact: info@thedami.co · 090-696-4151 · LINE @dami.
What we collect
- Order details: name, email, phone number, shipping and billing address, and what you ordered.
- Payment: card and PromptPay payments are processed by Omise. We never see or store your full card number.
- Account details: if you create an account, your email and password (stored encrypted).
- Messages: what you send us by email or LINE.
- Website use: cookies, IP address, device and browser type, and pages visited.
Why we use it
|
Purpose |
Legal basis under PDPA |
|---|---|
|
Processing, delivering and supporting your order |
Contract with you |
|
Keeping tax and accounting records |
Legal obligation |
|
Keeping the site secure and working |
Legitimate interest |
|
Sending news and offers by email |
Your consent (unsubscribe anytime) |
|
Measuring visits and advertising (e.g. Meta Pixel) |
Your consent through the cookie banner |
Who we share it with
We never sell your data. We share only what each service needs to do its job:
- Omise, to take payment
- Flash Express and Kerry Express, to deliver your order
- Our website host Z.com and WooCommerce, which run the store
- Meta (Facebook/Instagram), for ad measurement, only if you accept cookies
- Google Analytics
Some of these providers process data outside Thailand. They protect it under their own safeguards and agreements.
How long we keep it
Order and payment records are kept for as long as Thai tax and accounting law requires, generally 5 years. Marketing data is kept until you unsubscribe or withdraw consent. Account data is kept until you ask us to delete your account.
Cookies
Essential cookies keep your cart and checkout working and can’t be turned off. Analytics and advertising cookies are only used if you accept them in the cookie banner, and you can change your choice at any time.
Your rights
Under the PDPA you can ask us to:
- Give you a copy of your data
- Correct it
- Delete it, or stop or limit its use
- Transfer it to another service
- Withdraw your consent at any time
Email info@thedami.co and we’ll reply within 30 days. You can also complain to Thailand’s Personal Data Protection Committee (PDPC).
Security
Our site uses encrypted connections (HTTPS), and payments are handled by Omise, a PCI DSS–certified payment provider.
Children
Our shop is not intended for children under 20, and we don’t knowingly collect their data.
Changes to this policy
We’ll post any changes on this page and update the date at the top.