🔒 PDPA COMPLIANT
Privacy Policy
ThaiNex respects your privacy. This policy explains how we collect, use, protect and share your personal data in accordance with Thailand's Personal Data Protection Act (PDPA), B.E. 2562 (2019).
Last updated: July 2026
ThaiNex ("we", "us", "our") operates the website thainex.com and exports Thai consumer products to business partners worldwide. This Privacy Policy applies to personal data we process about visitors, customers, and business partners.
1. Data We Collect
- Contact & identity data — name, company name, email, phone/WhatsApp/LINE, country, job title.
- Business & order data — inquiries, quotation requests (RFQ), products of interest, order and shipping details.
- Account data — if you register a partner account: login email and profile information.
- Technical data — IP address, browser/device type, pages viewed, and cookie identifiers, collected via analytics.
2. How We Use Your Data
- To respond to your inquiries and prepare quotations.
- To process, fulfil and ship your orders, and to provide customer support.
- To manage your partner account and B2B relationship.
- To send you updates, offers or newsletters — only where you have given consent.
- To improve our website and measure marketing performance (analytics).
- To comply with legal, tax, accounting and regulatory obligations.
3. Legal Basis (PDPA)
We process personal data on the basis of: your consent (e.g. marketing, non-essential cookies); performance of a contract (processing your orders/quotations); our legitimate interest (improving our services, securing our site); and legal obligation (tax and record-keeping).
4. Cookies & Analytics
We use essential cookies to make the site work, and — with your consent — analytics and advertising cookies (Google Analytics, Meta Pixel) to understand traffic and improve marketing. You can accept or decline non-essential cookies via our cookie banner at any time. Declining does not affect your ability to browse or place inquiries.
5. Sharing Your Data
We never sell your personal data. We share it only with trusted service providers who help us operate, strictly as needed:
- Cloud & database hosting (e.g. Supabase, Cloudflare).
- Email delivery (e.g. Resend) for transactional and, with consent, marketing messages.
- Shipping, logistics and payment partners to fulfil your orders.
- Analytics providers (Google, Meta) where you have consented.
- Authorities or advisors where required by law.
6. International Transfers
As an export business, we may transfer your data across borders (e.g. to communicate with you or ship products to your country). Where we do, we take reasonable steps to ensure your data remains protected to a standard consistent with the PDPA.
7. Data Retention
We keep personal data only as long as necessary for the purposes above, or as required by Thai law (for example, accounting records). When no longer needed, we securely delete or anonymise it.
8. Your Rights Under PDPA
AccessRequest a copy of the data we hold about you.
RectificationAsk us to correct inaccurate or incomplete data.
ErasureAsk us to delete your data, subject to legal limits.
Withdraw consentOpt out of marketing or cookies at any time.
Object / RestrictObject to or limit certain processing.
PortabilityReceive your data in a usable format.
To exercise any right, contact us using the details below. You also have the right to lodge a complaint with the Thai Personal Data Protection Committee (PDPC).
9. Data Security
We apply appropriate technical and organisational measures — encryption in transit, access controls and row-level security on our database — to protect your data against unauthorised access, loss or disclosure.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest version. Material changes will be highlighted on this page.
This Privacy Policy is provided for transparency and PDPA compliance. It does not form part of any contract of sale.
