Privacy Policy

Last updated: 06/18/2025

1. Introduction

B&H Shop (“we,” “our,” or “us”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services, in compliance with Thailand’s Personal Data Protection Act (PDPA) B.E. 2562 (2019).

2. Information We Collect

2.1 Personal Data You Provide

When you create an account or make a purchase, we collect:

• Contact Information: First name, last name, email address, phone number
• Account Information: Username, password (encrypted)
• Billing Information: Billing address and payment details (processed securely through our payment providers)
• Communication Data: Information you provide when contacting our customer support

2.2 Automatically Collected Data

We automatically collect certain information through cookies and similar technologies:

• Technical Data: IP address, browser type, device information, operating system
• Usage Data: Pages visited, time spent on site, click patterns, referral sources
• Analytics Data: Website performance metrics through Google Analytics

2.3 Payment Information

Payment data is processed by our secure payment partners:

• Stripe: Credit/debit card information (processed and stored by Stripe, not on our servers)
• PayPal: Transaction data (processed through PayPal’s secure systems)

3. How We Use Your Information

We process your personal data for the following purposes:

3.1 Essential Business Operations

• Processing and fulfilling your orders
• Managing your customer account
• Providing customer support services
• Sending order confirmations and shipping notifications

3.2 Legal Compliance

• Maintaining business records as required by Thai law
• Complying with tax and accounting regulations
• Fraud prevention and security monitoring

3.3 Website Improvement

• Analyzing website usage through Google Analytics
• Improving user experience and website functionality
• Technical maintenance and security

4. Legal Basis for Processing

Under the PDPA, we process your personal data based on:

• Consent: For marketing communications and non-essential cookies
• Contract Performance: To fulfill your orders and provide our services
• Legal Obligation: To comply with Thai tax and business regulations
• Legitimate Interest: For fraud prevention and website security

5. Data Sharing and Disclosure

We may share your personal data with:

5.1 Service Providers

• Payment Processors: Stripe (Europe) and PayPal for secure payment processing
• Fulfillment Partners: ALD Dropshipping & Fulfillment for order processing and shipping
• Web Services: Google Analytics for website analysis
• Hosting Provider: Hostinger for website hosting and data storage

5.2 Legal Requirements

We may disclose your information when required by Thai law or to:

• Comply with legal proceedings or government requests
• Protect our rights, property, or safety
• Prevent fraud or other illegal activities

6. International Data Transfers

Some of our service providers are located outside Thailand. When we transfer your data internationally, we ensure adequate protection through:

• European Union: Stripe processes payment data within EU data protection frameworks
• United States: Google Analytics and PayPal, which participate in recognized data protection frameworks
• Other Locations: Third-party providers who maintain appropriate data protection standards

We ensure all international transfers comply with PDPA requirements and provide adequate protection for your personal data.

7. Data Retention

We retain your personal data for the following periods:

• Account Information: Until you delete your account or request data deletion
• Order History: 7 years for tax and business record requirements
• Payment Data: Processed and stored by payment providers according to their retention policies
• Analytics Data: 14 months (Google Analytics default setting)
• Support Communications: 3 years for service improvement purposes

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and login status
• Analyze website usage and performance
• Provide secure payment processing

You can manage cookie preferences through your browser settings. However, disabling essential cookies may affect website functionality.

For detailed information about our cookie usage, please refer to our Cookie Policy.

9. Your Rights Under PDPA

You have the following rights regarding your personal data:

9.1 Access Rights

• Request information about data we hold about you
• Obtain a copy of your personal data

9.2 Correction Rights

• Request correction of inaccurate or incomplete data
• Update your account information at any time

9.3 Deletion Rights

• Request deletion of your personal data (subject to legal retention requirements)
• Delete your account through your customer portal

9.4 Objection Rights

• Object to processing based on legitimate interest
• Withdraw consent for marketing communications

9.5 Data Portability

• Request your data in a portable format
• Transfer your data to another service provider

10. How to Exercise Your Rights

To exercise any of your rights or for privacy-related inquiries:

Email: contact@bhpampering.com
Phone: +66 81 068 2096

We will respond to your request within 30 days as required by the PDPA.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• SSL encryption for data transmission
• Secure payment processing through certified providers
• Regular security updates and monitoring
• Access controls and staff training on data protection

12. Children’s Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a minor, we will take steps to delete such information promptly.

13. Data Protection Officer

For privacy matters and PDPA compliance: Contact: Le Beschu Maixent
Email: contact@bhpampering.com

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or applicable laws. We will notify you of material changes by:

• Posting the updated policy on our website
• Sending email notification for significant changes

Your continued use of our services after changes constitutes acceptance of the updated policy.

15. Complaints

If you believe we have not handled your personal data in accordance with this Privacy Policy or the PDPA, you may file a complaint with:

Thailand Personal Data Protection Committee
Office of the Personal Data Protection Committee
Ministry of Digital Economy and Society

16. Contact Information

For any questions about this Privacy Policy or our data practices:

B&H Shop
Email: contact@bhpampering.com
Phone: +66 81 068 2096

---

This Privacy Policy is governed by Thai law and complies with the Personal Data Protection Act (PDPA) B.E. 2562 (2019).