This Privacy Policy is paired with our PDPA Privacy Notice (Thai law) and Terms of Service. The PDPA notice satisfies the Thai legal disclosure under PDPA Section 23. This policy is the general plain-language explanation of how ACCINA handles user data.
1. Who we are
ACCINA Co., Ltd.(the "Company", "we", "us", "our") is a private limited company registered in Thailand.
- Registration number: 0505569010977
- Registered office: 189 หมู่ 5 ซอย ไชยเรืองศรี 1, ต.แม่เหียะ, อ.เมืองเชียงใหม่, จ.เชียงใหม่ 50100
- Website: https://accina.co
- Contact: hello@accina.co
We operate accina.co and the sub-brand Instagram accounts @accina.co, @accina.gifts, @accina.packing, @accina.paper (and future). This policy applies to all of them.
2. Data we collect
We try to collect as little personal data as possible.
| Data type | When collected | Why |
|---|---|---|
| Email address | Newsletter signup · contact · order | Reply · confirm · marketing if consented |
| Name | Order · contact | Address shipments · personalize replies |
| Shipping address | Order placement | Deliver physical products |
| Phone (optional) | Order placement | Courier delivery · order issues |
| Payment information | Order placement | Never stored by us. Payment processor only. |
| Analytics (anonymous) | Every page visit | Understand which pages are used |
We do notcollect ID card numbers (except for tax invoices, handled separately), biometric data, children's data (service not directed to anyone under 20), or sensitive data (race, religion, health).
3. How we use your data
- Operating the service — sending you the thing you ordered, replying to your email
- Improving the service — measuring which pages get attention
- Marketing (only with consent) — newsletters if you opt in. One-click unsubscribe.
- Legal obligations — keeping invoices for 5 years (Thai Revenue Department)
We do not sell to third parties, profile you for advertising, or cross-track you across sites beyond anonymized GA4.
4. Sharing your data
We share data only with parties that help us run the business:
- Vercel — website hosting (IP + request metadata)
- Cloudflare — DNS + email routing (IP + email data)
- Google Analytics 4 — anonymized usage events
- Payment processor (Stripe / Omise — TBD) — order and payment details
- Courier (Kerry Express, Thailand Post, Flash — TBD) — name, address, phone
- Thai government (Revenue, DBD) — invoices, tax records as legally required
We do not sell, rent, or trade your data with anyone. Ever.
5. Cookies
| Type | Purpose | Consent |
|---|---|---|
| Essential | Session, cart state | No (required) |
| Analytics | Google Analytics 4 (anonymized) | Yes — opt-in banner on first visit |
We do not use marketing/advertising cookies or third-party tracking pixels.
6. Tax-invoice data (Thai businesses)
If you ask for a tax invoice we collect your company tax ID, company name, and registered address. We use this solely for issuing the invoice and the Revenue Department record. Retention: 5 years.
7. Your rights
Under Thai PDPA (Personal Data Protection Act, B.E. 2562) and most international standards, you can:
- Access — get a copy of your data
- Correct— fix data that's wrong
- Delete— ask us to erase your data (except tax records we're legally required to keep)
- Restrict — tell us to stop using your data for marketing while keeping it for orders
- Object — object to specific uses
- Portability — get your data in CSV/JSON
- Withdraw consent — take back any consent you gave
- Complain — to the PDPA committee (pdpc.or.th)
Email privacy@accina.co · we reply within 30 days. Never charged.
8. Data retention
- Order records (legal req): 5 years
- Newsletter list: until unsubscribe or 2 years inactivity
- Contact form: 2 years
- Analytics: 14 months (GA4 default)
- Email correspondence: 3 years
9. Security
- HTTPS on all pages (Cloudflare SSL)
- Encrypted database storage (Postgres at rest)
- Limited access (sole director currently)
- 1Password for credentials
- Two-factor authentication on all admin accounts
We have not experienced a data breach. If we ever do, we will notify affected users within 72 hours and notify the PDPA committee where Thai law requires.
10. International transfers
ACCINA is based in Thailand. Some service providers (Vercel, Cloudflare, Google) process data in the EU and US. We pick processors with strong privacy commitments (GDPR-compliant, SCCs in place where required).
11. Children
This service is not directed to anyone under 20 (Thai legal age of majority). We do not knowingly collect data from minors. If you believe a minor has provided data to us, email privacy@accina.co and we will delete it.
12. Changes to this policy
We may update this policy. Material changes will be announced via newsletter, a banner on accina.cofor 30 days, and an updated "Last updated" date at the top.
13. Contact
- Privacy questions / rights requests:
privacy@accina.co - General contact:
hello@accina.co - Postal: ACCINA Co., Ltd., 189 หมู่ 5 ซอย ไชยเรืองศรี 1, ต.แม่เหียะ, อ.เมืองเชียงใหม่, จ.เชียงใหม่ 50100
14. Governing law
This Privacy Policy is governed by the laws of Thailand. The PDPA (Personal Data Protection Act, B.E. 2562) is the primary statute.