Privacy Policy (PDPA)

1. Data controller

WP Trading Intergroup Co., Ltd., 117 Soi Charoen Phatthana 11, Bang Chan, Khlong Sam Wa, Bangkok 10510, Thailand

Data Protection Officer (DPO): wp.trading.intergroup2021@gmail.com

2. Data we collect

Account data: name, email, user ID

Order data: shipping address, phone, order history, payment slips

Usage data: essential cookies/local storage (cart, locale, auth session)

3. Purposes and legal bases

Order processing, delivery, after-sales — contract/performance of contract

Marketing and promotions — consent (withdrawable)

Legal compliance and fraud prevention — legitimate interest/legal obligation

4. Disclosure

We may share data with: Supabase (database), Vercel (hosting), Resend (email), carriers — only as necessary.

5. Retention

We retain data as long as needed for the stated purposes and accounting/tax requirements, then delete or anonymize.

6. Your rights

You may request access, correction, deletion, restriction, objection, portability, and withdraw consent by contacting the DPO above.

7. Security

We apply appropriate technical and organizational measures including HTTPS, access controls (RLS), and limited data access.