Privacy policy
What we collect, why, how long we keep it, and what you can ask us to do with it. Written to Thailand's Personal Data Protection Act.
The short version
We collect what is needed to send you a parcel and confirm you paid for it. We do not sell it, we do not advertise with it, and we do not keep it longer than we need to.
We do not require you to create an account, which means there is no standing profile of what you have bought.
What we collect
When you place an order:
- Your name, delivery address, phone number and email address
- What you ordered, and what you paid
- Your payment slip, or your cryptocurrency transaction reference
- Any note you add to your order
- The language you ordered in, so that our emails match it
Why we collect it
Your name, address and phone number exist so a courier can deliver a parcel. Your email exists so we can confirm the order, tell you when payment clears, and send you a tracking number.
Your payment slip exists so we can match a transfer to an order. It is the only way to do that reliably with Thai bank transfers, and it is also our record if a payment is later disputed.
The lawful basis for all of this is performance of the contract you entered into by placing the order, together with our legitimate interest in keeping accurate records of what was sold.
Payment slips are treated carefully
Slips carry your name and bank details, so they are stored in private storage that is not publicly reachable, and are only ever viewed through a short-lived link that expires.
They are never published, never shared for any purpose other than verifying your payment, and never used to build a profile of you.
Who else sees your data
A small number of services, each doing one job:
- Our courier — your name, address and phone number, so they can deliver
- Supabase — hosts our database, in Singapore
- Vercel — hosts the website
- Resend — sends your order emails
What we do not do
We do not sell your data. We do not share it with advertisers, data brokers or analytics networks. We do not run advertising trackers on this site.
The only cookies this site sets are the ones needed for it to work — remembering your basket, your language, and that you confirmed your age.
How long we keep it
Order records are kept while they are needed for accounting and tax purposes, which under Thai law is generally five years.
Payment slips are kept while a payment could still be queried, and deleted when they are no longer needed for that.
Your rights
Under the Personal Data Protection Act you may ask us to:
- Tell you what personal data we hold about you, and give you a copy
- Correct anything that is wrong
- Delete your data, where we are not required to keep it
- Restrict or object to how we use it
- Withdraw consent, where we relied on consent
Making a request
Email team@siamlabs.co with the order number, and we will respond within 30 days.
We may need to confirm you are the person the data belongs to before we act — usually by replying from the email address the order was placed with.
Changes to this policy
If this policy changes we will publish the new version here. Anything that materially affects how we handle existing orders will be sent to affected customers by email.