This Privacy Policy explains how Laundry Service by Jewel([LEGAL_NAME], company registration [DBD_NUMBER], registered at [REGISTERED_ADDRESS]) (“we”, “us”, “our”) collects, uses, stores, and shares your personal data when you use our website and laundry services. We comply with the Thailand Personal Data Protection Act (PDPA, B.E. 2562) and the EU General Data Protection Regulation (GDPR) for visitors in the EU/EEA.
1. Data we collect
When you book a laundry pickup or interact with our site, we collect:
- Contact details: first name, last name, email address, phone number (with country code), WhatsApp opt-in preference.
- Pickup & delivery details: location type (hotel, residence, condo), property name, room or unit number, address, access instructions, pickup time slot, special instructions.
- Order details: service type, quantity (kg), payment method, payment confirmation, order status history.
- Communication records: emails, WhatsApp messages, phone notes, customer support exchanges.
- Technical data: IP address (used for fraud prevention and country detection), browser type, device type, pages visited, referrer URL, cookies (see our Cookies Policy).
- Reseller attribution: if you arrived via a partner tracking link, we record which partner referred you (cookie name
lsb_ref, 30-day lifespan).
2. Why we use your data (lawful basis)
- Contract performance (PDPA s. 24(3) / GDPR Art. 6(1)(b)): to fulfil your laundry order — pickup, washing, delivery, payment, status notifications.
- Legitimate interest (PDPA s. 24(5) / GDPR Art. 6(1)(f)): for fraud prevention, service improvement, internal record-keeping, and reseller commission attribution.
- Consent (PDPA s. 19 / GDPR Art. 6(1)(a)): for WhatsApp marketing updates (opt-in checkbox at booking) and non-essential cookies (cookie banner).
- Legal obligation (PDPA s. 24(6) / GDPR Art. 6(1)(c)): for tax records, VAT invoices, and compliance with Thai accounting requirements.
3. Who we share data with
We share the minimum necessary personal data with the following categories of third-party service providers, all bound by data processing agreements:
- Email delivery: Resend, Inc. (United States) — for transactional emails (order confirmation, payment links, delivery notification). Subject to GDPR-equivalent contractual safeguards.
- Payments: PayPal Pte. Ltd. (Singapore) for PayPal-based payments; PromptPay (Bank of Thailand network) for QR payments. We never store your card details.
- Hosting & infrastructure: Vercel Inc. (United States) — application hosting; Vercel Postgres for database storage (data resides in Vercel's selected region).
- Analytics & advertising: Google LLC for Google Analytics 4 and Google Ads conversion measurement (only after cookie consent).
- Resellers / partners: if you arrived via a partner link, we share aggregated and per-order attribution data (your name, email, order total, commission amount) with that partner for commission settlement. Partners are contractually prohibited from using this data for any other purpose.
We never sell your personal data. We share it only as described above.
4. International transfers
Some service providers (Resend, Vercel, Google) are located outside Thailand. For transfers from Thailand, we rely on PDPA s. 28 (consent, contract performance, or adequate-protection arrangements). For transfers from the EU/EEA, we rely on GDPR Standard Contractual Clauses with each provider.
5. How long we keep your data
- Order records (incl. customer contact details): 7 years from the date of the last order, to meet Thai accounting and tax retention requirements.
- Marketing opt-ins (WhatsApp, email): until you withdraw consent.
- Reseller attribution cookie (
lsb_ref): 30 days from the last visit. - Server logs (technical/IP): 90 days.
6. Your rights
Under both PDPA and GDPR, you have the right to:
- Access a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure ("right to be forgotten") — subject to retention obligations.
- Restriction — limit how we process your data.
- Portability — receive your data in a machine-readable format.
- Objection — object to processing based on legitimate interest.
- Withdraw consent — at any time, where consent was the lawful basis.
- Lodge a complaint with the Thailand PDPC or your EU/EEA data protection authority.
To exercise any of these rights, email info@laundry-service-bangkok.com. We respond within 30 days.
7. Security
We protect your data with: HTTPS encryption in transit, encrypted database storage at rest, role-based access control on our internal CRM, password hashing with bcrypt, and routine review of third-party provider security practices. No method of transmission over the Internet is 100% secure; we use commercially reasonable measures.
8. Children
Our service is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have, contact us and we will delete it.
9. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the latest revision. Material changes will be communicated via email to active customers.
10. Contact us
Data Controller: [LEGAL_NAME]
Registered office: [REGISTERED_ADDRESS]
Email: info@laundry-service-bangkok.com
Phone: +66 94 982 8315