RD2551 Shop by Milin ("the shop", "we") respects your personal data. This policy explains how we collect, use and share it, under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).
1. Data controller
อลัน สุขเกษม (an individual operating RD2551 Shop by Milin)
Address: 8/16 หมู่ 2 ตำบลบ้านแก่ง อำเภอตรอน จังหวัดอุตรดิตถ์ 53140
Email: [email protected]
2. Data we collect
- When you order: name, delivery address, phone number, email and order notes
- If you create an account: name, email and password (stored encrypted; we cannot see it)
- If you log in with Google or LINE: that account's user ID, your name and the email Google or LINE sends us (we never receive your Google or LINE password). We use the email to connect all your login methods to one account.
- Order details: products, amounts, payment method, payment and delivery status
- Payment proof you send us, such as transfer slips
- Company name, tax ID and billing address, if you ask for a receipt in a company name
- Technical data needed for the website to work, such as cookies (see section 7)
We do not store card details. Card payments are handled directly by Stripe.
3. Purposes and legal basis
- Fulfilling your order (payment, delivery, order emails, contacting you about the order, returns and refunds) — necessary to perform our contract with you (Section 24(3))
- Your account (login, order history) — to provide the service you asked for
- Accounting and tax — to comply with the law (Section 24(6))
- Security and fraud prevention — our legitimate interest (Section 24(5))
We do not send you marketing messages. If we ever want to, we will ask for your consent first.
4. Who we share data with
We never sell your personal data. We share only what is needed with:
- Couriers — name, address and phone number, to deliver your order
- Banks and payment providers, including Stripe for card payments
- Resend — our order email service
- Google and LINE — only when you choose to log in with them
- SlipOK — the slip pictures you upload, to check the transfer with the bank
- Cloudflare — technical data from your browser (such as your IP address), to check you're not a robot
- The hosting provider that stores the website's data
- Government authorities when the law requires it
5. Transfers outside Thailand
Some providers may store or process data outside Thailand, such as Resend, Stripe, Cloudflare, Google and Meta (United States) and LINE (Japan), and images on our blog, which are served by Sanity. We choose providers with appropriate data protection and send only what they need.
6. How long we keep data
- Order records: up to 5 years from the order date, for accounting and tax purposes
- Accounts: until you delete yours, which you can do straight away on the "My account" page. The personal details in the account are then removed; order records are kept for the period above.
- After that, we delete the data or make it anonymous
7. Cookies
Cookies the website needs to work (no consent required):
rd_lang— remembers your language (1 year)rd_cart— remembers your cart (30 days)rd_jwt— keeps you logged in (7 days)
We do not use advertising or tracking cookies.
8. Your rights
You have the right to:
- access your data and get a copy
- have it corrected
- have it deleted, destroyed or anonymised
- restrict its use, and object to its collection, use or disclosure
- have it transferred (data portability)
- withdraw consent (where we asked for it)
- complain to the Office of the Personal Data Protection Committee (www.pdpc.or.th)
To use these rights, email [email protected]. We reply within 30 days. In some cases the law lets us refuse, for example for records we must keep for tax purposes.
9. Security
The website uses encrypted connections (HTTPS), passwords are stored encrypted, and only the seller can access the data. If a data breach puts you at risk, we will notify the PDPC Office and you as the law requires.
10. Changes
If this policy changes, we will publish the new version on this page with its date.
The Thai version of this policy is the official one; this English version is a translation.