Privacy Policy

Effective 7 October 2026

This page explains what personal data our shop collects through praneeratjewelry.com, why we collect it, and your rights under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

Who we are

Praneerat Jewelry is the data controller for this website. Address: 55 Udomwithi Road, Anoru, Mueang Pattani, Pattani 94000. Phone: 081-959-5824. Open Monday to Saturday, 9:00 AM to 5:00 PM.

What we collect

Browsing. You can browse without giving us any personal data. Your wishlist, your shopping bag and whether you have closed our cookie notice are saved in your own browser on your device. Unless you sign in, we do not receive them.
Fonts. Our pages load fonts from Google Fonts, so Google receives your IP address and browser details when a page loads.
Purchase requests. If you send us a purchase request by phone or message, we receive what you include: your name, phone number and delivery address, and anything else you choose to add, such as your email, LINE ID or ring size.
Online payment. If you pay on our website, Stripe collects your name, email, phone number and delivery address, together with the pieces you buy and the amount. Your card number or bank details go straight to Stripe. We never see them.
Your account. If you sign in with Google, we receive your name, email address and Google account ID from Google. If you sign up with email, we keep your email, the name you give and a scrambled form of your password that nobody, including us, can read back. We save your bag, wishlist and chosen ring sizes to your account so they appear on every device, and link your online orders to it.
Tax invoices. If you ask for a full tax invoice on LINE, we receive the name, address and tax ID you send.
Damage claims. If a piece arrives damaged and you contact us on LINE, we receive your LINE display name, your messages and the unboxing video you send.

Why we use it

To handle your order: confirm it, deliver it or arrange pickup, and issue your receipt and store certificate. We need your name, phone number and address for this. Without them we cannot deliver your order. (To carry out our sale contract with you.)
To handle damage claims: check the video, repair the piece or refund you, and claim from the delivery company's insurance. (To carry out our sale contract with you.)
To run your account: keep you signed in and keep your bag, wishlist and ring sizes on every device. (Because you asked us to, by signing in.)
To issue tax invoices and keep accounting and tax records that Thai law requires. (To meet a legal duty.)
To protect payments from fraud: Stripe screens payments to block stolen cards. (Our legitimate interest in safe payments.)
To answer your questions. (Because you asked us.)
We do not sell your data, and we do not use it to send you advertising.

Stripe, our payment processor (privacy policy)
The delivery company that brings your parcel: your name, phone number and address only, plus the unboxing video if we need to claim for damage
LINE (LY Corporation), when you message us on LINE (privacy policy)
Vercel, which hosts our website (privacy policy)
Neon, which stores account data for us (privacy policy)
Google, which serves our fonts and runs Sign in with Google (privacy policy)
Resend, which sends our sign-in emails (codes) (privacy policy)
Government agencies, when the law requires it

Data outside Thailand

Stripe, Vercel, Neon, Google, LINE and Resend may store or process data on servers outside Thailand. We send payment data to Stripe only as needed to complete your payment, and these companies protect it under their own privacy policies and contracts.

How long we keep it

Order, payment and tax invoice records: at least 5 years after the accounts for that year are closed, as Thai accounting and tax law requires
Your account: until you delete it, which you can do yourself on the account page. Each sign-in ends after 30 days. Email codes are deleted once used or after 10 minutes.
Requests and messages that do not become an order: up to 1 year
Damage-claim videos and messages: up to 1 year after the claim is closed
Your wishlist and bag: in your browser until you clear them

Cookies

Our own pages do not set cookies to track you. When you sign in, we set one cookie that keeps you signed in, and a short-lived one for 10 minutes that protects the sign-in itself. Both are needed for signing in to work, and the sign-in cookie is removed when you sign out. When you open the payment form, Stripe may set cookies to keep the payment secure and prevent fraud.

Your rights

Under Thailand's Personal Data Protection Act you can ask us to:

show you your data or give you a copy
correct it
delete it, or limit how we use it
stop using it
send it to you in a format you can use elsewhere
withdraw any consent you gave us

You can delete your account yourself at any time on the account page. We may need to keep some records when the law requires it, such as tax records. To ask, call 081-959-5824, message us on LINE with the same number, or visit our store. We reply within 30 days. You can also complain to the Office of the Personal Data Protection Committee (PDPC).

Security

Our website uses an encrypted connection (HTTPS). Payments are handled by Stripe, which is certified to PCI DSS Level 1, the highest card-security level, so card numbers never reach us. Only our shop team can see order details.

Changes

If we change how we use personal data, we will update this page and the date at the top.