Privacy Policy

1. Data Controller Identity

This Privacy Policy explains how Kiri Botanicals Co., Ltd. collects, uses, and protects your personal data under Thailand's PDPA.

2. Personal Data We Collect

We only collect data necessary for fulfilling your orders:

• Identity & Contact Data
• Order & Transaction Data
• Technical & Consent Data

3. Legal Basis & Purpose of Processing

Under Section 24 of the Thai PDPA:

• Contractual Necessity
• Legal Obligation
• Explicit Consent

4. Your Rights as a Data Subject under Thailand PDPA

You have the statutory right to access, rectify, erase, and withdraw consent at any time.

5. Data Retention & Security

Order records are retained for 5 years in accordance with Thai tax and accounting laws.

6. Contact Our Data Protection Officer (DPO)

Email: [email protected] | Tel: +66 (0) 2-118-4920