This policy explains what personal data Thai Fisherman Pants, a division of Caruso Consulting Co Ltd ("we", "us" or "our"), collects when you use thaifishermanpants.net or buy from us, what we do with it, and who else touches it.
We are a Thai company, so this policy is written to the Personal Data Protection Act B.E. 2562 (2019), known as the PDPA. We are the data controller for the personal data described here. If you live somewhere with its own privacy law, that law may give you extra rights, and this policy does not take them away.
Any question about your data, or any request to see it, correct it or delete it, goes to theteam@thaifishermanpants.net.
What we collect
- What you give us when you order: your name, delivery address, billing address, email address and phone number.
- What you give us when you get in touch: your name, email address and whatever you write in your message.
- Order records: what you bought, the amount, the currency, the date, and a reference from the payment provider.
- Payment details: handled entirely by Stripe or PayPal on their own pages. We never see or store your full card number.
- Website statistics: only if you accept cookies. That means things like which pages were viewed, the type of device and browser, and roughly which country the visit came from. See our Cookie Policy for exactly how that works.
We do not collect sensitive personal data as the PDPA defines it, such as health, religion, ethnicity or biometrics. Please do not send us any of that.
Why we use it, and our lawful basis
- To take and deliver your order, and to support you afterwards. Basis: performing our contract with you.
- To email you an order confirmation and delivery updates. Basis: performing our contract with you.
- To keep accounting and tax records. Basis: our legal obligations in Thailand.
- To prevent fraud and keep the site secure. Basis: our legitimate interest in running the shop safely, balanced against your rights.
- To measure how the website is used. Basis: your consent, given through the cookie banner, and withdrawable at any time.
- To send marketing email, if we ever do. Basis: your consent. We will ask first, and every such email will have an unsubscribe link.
Who processes your data for us
We keep the list short on purpose. These are the only companies that handle personal data on our behalf:
- Stripe and PayPal, for taking payment. You are taken to their pages to pay, and they receive the payment and contact details needed to process it and to run their own fraud checks.
- Resend, for sending our transactional email, such as order confirmations and replies to enquiries. It handles the email address the message is sent to and the content of that message.
- Google Analytics 4, for website statistics. It is loaded only after you press Accept on the cookie banner. If you decline, or ignore the banner, it is never loaded.
- Vercel, which hosts this website and serves its pages.
- Supabase, which stores our order records so we can look up an order when you contact us.
We also give your name, address and phone number to the postal or courier service carrying your parcel, because they cannot deliver it otherwise.
That is the whole list. We do not run advertising pixels, we do not use remarketing tags, and we do not sell personal data to anyone. We may disclose data where a law or a lawful order requires it.
Sending data outside Thailand
The companies above operate outside Thailand, and you may live outside Thailand too, so your data will cross borders. Where the PDPA requires it, we rely on the destination having adequate protection or on the provider's own contractual safeguards, and we only use providers that publish a privacy commitment we can read.
How long we keep it
Order and payment records are kept for as long as Thai accounting and tax law requires. Enquiry emails are kept while the conversation is useful and then deleted. Website statistics are kept in aggregate. When we no longer need personal data, we delete it or strip out anything that identifies you.
Your rights under the PDPA
You can ask us to:
- Tell you what personal data we hold about you, and give you a copy of it.
- Correct anything that is wrong or out of date.
- Delete your data, where we do not need to keep it for a legal reason.
- Stop or restrict what we are doing with it.
- Object to a particular use, including any marketing.
- Send your data to you or to another provider in a portable form.
- Withdraw consent you gave us, at any time. That includes analytics, which you can turn off using the Cookie settings link in the footer of any page.
Email theteam@thaifishermanpants.net and tell us what you want. We do not charge for this, and we will reply within the time the PDPA allows. We may ask a question or two to confirm it is really you before we hand over or delete anything.
If you think we have handled your data badly, please tell us first so we can fix it. You can also complain to the Personal Data Protection Committee in Thailand, or to the privacy regulator in your own country if you have one.
Security
The site is served over an encrypted connection, payment happens on Stripe's and PayPal's own secure pages, and access to order records is limited to the people who need it. No system online is perfectly secure, but we do not keep data we do not need, which is the best protection there is.
Children
This shop is meant for adults. We do not knowingly collect personal data from children. If you believe a child has given us their details, email us and we will remove them.
Changes to this policy
If we change how we handle personal data, or add a provider to the list above, we will update this page and change the date at the top.
Contact us
Thai Fisherman Pants, a division of Caruso Consulting Co Ltd
Registered address: 47 Moo 1, T. Nawoong, Meaung, Phetchaburi 76000, Thailand
Tax ID: 0765554000332
Email: theteam@thaifishermanpants.net
Phone: +66 098 391 3877