Privacy Policy

ข้อมูลจากร้านค้า

Buuble Store ("we", "us", "our") is the data controller for your personal data under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

Address: Bangkok, Thailand

DPO Email: privacy@buuble.com

ข้อมูลจากร้านค้า

We collect the following data when you use our store:

• Identity data: Full name, email address, phone number
• Delivery address: Street, district, province, postal code, country
• Order data: Purchase history, items, prices, payment status
• Payment data: Processed via certified Payment Gateway — we never store card numbers
• Usage data: Pages visited, session duration, device and browser (via cookies)

ข้อมูลจากร้านค้า

We use your data for the following purposes:

• Contract performance (Art. 24(3)): Processing orders, shipping, delivery notifications
• Legitimate interest (Art. 24(5)): Fraud prevention, service improvement, usage analytics
• Consent (Art. 19): Marketing emails, offers, and promotions — you may withdraw consent at any time

ข้อมูลจากร้านค้า

We may share your data with third parties in the following cases:

• Logistics partners: Kerry Express, J&T Express, Thailand Post (delivery address and phone only)
• Payment gateways: Stripe, Omise (payment data is securely encrypted)
• Analytics services: Google Analytics (anonymized usage data)
• Advertising: Meta (Facebook) Pixel (with your consent only)

All third parties are bound by Data Processing Agreements (DPA) and may not use your data for any other purpose.

ข้อมูลจากร้านค้า

As a data subject, you have the following rights:

• Right of access (Art. 30): Request a copy of personal data we hold about you
• Right to rectification (Art. 34): Request correction of inaccurate or incomplete data
• Right to erasure (Art. 33): Request deletion of your data when no longer necessary
• Right to data portability (Art. 35): Receive your data in a machine-readable format
• Right to object (Art. 32): Object to processing in certain circumstances
• Right to withdraw consent (Art. 19): Withdraw consent at any time without affecting prior processing

Contact our DPO at privacy@buuble.com. We will respond within 30 days.

ข้อมูลจากร้านค้า

We retain your data for as long as necessary:

• Customer account data: 3 years after your last transaction
• Order records: 7 years as required by Thai accounting law
• System access logs: 90 days
• Marketing data: Until you withdraw consent

When periods expire, data is securely deleted or anonymized.

ข้อมูลจากร้านค้า

We implement appropriate technical and organizational measures to protect your data:

• Encryption: Sensitive data encrypted with AES-256
• HTTPS: All communications encrypted with TLS
• Access control: Restricted to authorized personnel only
• Audits: Regular security reviews and system updates

ข้อมูลจากร้านค้า

Some services we use may process data outside Thailand, including Stripe (USA) and Google (multiple countries).

These transfers are conducted under adequate data protection requirements per PDPA Art. 28 and/or appropriate safeguards such as Standard Contractual Clauses.

ข้อมูลจากร้านค้า

For questions or to exercise your rights, contact our Data Protection Officer (DPO):

Email: privacy@buuble.com

Hours: Monday–Friday, 9:00 AM – 6:00 PM (Bangkok time)

If you are unsatisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) at www.pdpc.or.th