Privacy Policy

Privacy Policy

Bang Yai Thong, Nonthaburi, Thailand
Last updated: January 15, 2026

1. General Provisions

1.1. This Privacy Policy (the “Policy”) explains how Decos Company Limited (the “Company”, “we”, “us”, or “our”) collects, uses, stores, transfers, and otherwise processes personal data of website users, customers, order recipients, and other individuals interacting with the Decosthai website and services.

1.2. The Company is incorporated and operates in the Kingdom of Thailand.

1.3. Personal data is processed in accordance with applicable laws of Thailand, including laws regulating personal data protection, as well as with due regard to applicable principles of private international law and mandatory legal requirements of other jurisdictions where such requirements apply to a specific relationship, transaction, order, shipment, or user.

1.4. Where the processing of personal data relates to orders, deliveries, or users from particular jurisdictions, the Company may also take into account and comply with mandatory legal requirements of such jurisdictions to the extent applicable in the конкретной situation.

1.5. This Policy applies to personal data collected through the Decosthai website, customer support channels, order processing, delivery coordination, marketing communications, and related services.

2. Scope of This Policy

2.1. This Policy applies to personal data of:

website users;
customers;
order recipients;
subscribers to informational and marketing communications;
individuals contacting customer support.

3. Categories of Personal Data We May Process

3.1. Depending on the nature of the interaction, order, service, and delivery method selected, the Company may process the following personal data:

first name and last name;
additional name elements, where provided;
phone number;
email address;
delivery address;
pickup point information;
order, payment, and delivery details;
order history;
account-related information, including bonuses, reward points, and other related privileges;
customer support correspondence;
technical data automatically collected during use of the website, including IP address, cookies, browser type, device information, preferred language, time of access, on-site actions, and similar technical information.

3.2. The Company does not seek to collect excessive personal data and limits processing to data reasonably necessary for the purposes described in this Policy.

4. Purposes of Processing Personal Data

4.1. Personal data may be processed for the following purposes:

creating and maintaining a user account;
placing, confirming, and fulfilling orders;
organizing payment, packing, shipment, and delivery of goods;
informing customers and/or recipients about order status and shipment movement;
communicating with customers regarding purchases, delivery, returns, exchanges, support, and service matters;
sharing data with logistics, postal, payment, technical, and other partners involved in order fulfillment;
complying with legal, accounting, tax, regulatory, and operational requirements;
preventing misuse, fraud, abuse, and violations of the website terms;
improving the website, services, customer experience, and quality of support;
sending informational, service-related, marketing, and promotional communications where there is an appropriate legal basis.

5. Legal Bases for Processing

5.1. The Company may process personal data on the following legal bases:

performance of a contract or steps taken at the request of the data subject prior to entering into a contract;
compliance with applicable legal obligations;
consent of the data subject, where such consent is required;
the Company’s legitimate interests, including ensuring security, preventing abuse, improving services, providing customer support, and protecting the Company’s legal rights, provided such interests do not override the rights and reasonable expectations of the data subject.

6. Sharing of Personal Data with Third Parties

6.1. The Company may share personal data with third parties only to the extent necessary to achieve the relevant processing purposes.

6.2. Such recipients may include:

delivery services and logistics companies;
postal operators;
last-mile delivery providers;
payment providers and other entities involved in payment processing;
IT contractors and technical infrastructure providers;
communication and customer support service providers;
other contractors and partners involved in order fulfillment or website operation.

6.3. If customs clearance is required for a shipment, personal data may be processed by independent third parties involved in such procedures, acting within their own responsibility and under the legal framework applicable to them.

7. International Data Transfers

7.1. As the Company is established in Thailand and engages in international trade and international delivery, personal data may be transferred between countries, including Thailand, the destination country of an order, transit countries, and other jurisdictions where such transfer is reasonably necessary for order processing, payment processing, delivery, customer support, or compliance with legal requirements.

7.2. International data transfers are carried out only to the extent reasonably necessary for the relevant purpose.

8. Retention of Personal Data

8.1. The Company retains personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law, accounting rules, tax requirements, dispute resolution needs, security purposes, or the protection of the Company’s legitimate interests.

8.2. Data related to orders, payments, deliveries, customer communications, and recordkeeping may be retained for a reasonable period after completion of the transaction for accounting, tax, legal, operational, and support purposes.

8.3. Account-related data may be retained while the account remains active, until the account is deleted, or until the account has been inactive for an extended period of time.

8.4. Data used for marketing communications may be retained until consent is withdrawn, or until the Company determines that continued retention is no longer appropriate in light of user inactivity or other relevant circumstances.

9. Deletion of Data and User Accounts

9.1. Users may request deletion, correction, or other modification of their personal data.

9.2. The Company will review such requests within a reasonable period, taking into account the nature of the request, the need to verify the identity of the requester, the existence of active orders, and any accounting, tax, legal, contractual, or operational requirements.

9.3. If deletion of a user account results in the loss of bonuses, reward points, balances, or other privileges linked to that account, such loss may be considered a consequence of account deletion.

9.4. The Company may refuse full deletion of personal data or postpone deletion to the extent continued processing is necessary to comply with law, resolve disputes, protect the Company’s rights, fulfill a contract, or complete operational processes relating to an order.

10. Marketing and Informational Communications

10.1. The Company may send service and informational messages directly related to an order, payment, shipment, delivery, status changes, returns, support, and similar matters necessary for contract performance.

10.2. Marketing, advertising, and promotional messages are sent on the basis of the user’s consent where such consent is required under applicable law.

10.3. Users may opt out of marketing communications at any time.

11. Cookies and Similar Technologies

11.1. The website may use cookies and similar technologies for the following purposes:

ensuring the proper operation of the website;
saving user preferences and settings;
analyzing website performance and usage;
improving convenience, functionality, and service quality;
ensuring security;
displaying more relevant content and marketing materials, where applicable.

11.2. Users may manage cookies through browser settings and other available tools. However, disabling certain cookies may affect the proper functioning of the website.

12. Data Security

12.1. The Company takes reasonable organizational, technical, and administrative measures to protect personal data against loss, unauthorized access, unlawful alteration, disclosure, destruction, and other unlawful processing.

12.2. However, no method of data transmission over the internet and no data storage system can guarantee absolute security. While the Company applies measures appropriate to the nature of the data processed and the level of protection reasonably expected, absolute security cannot be guaranteed.

13. Rights of Users

13.1. Depending on applicable law, users may have the right to:

request access to their personal data;
request correction of inaccurate or outdated data;
request deletion of personal data in cases provided by law;
request restriction of certain processing activities;
object to certain processing activities;
withdraw previously given consent;
opt out of marketing communications;
submit complaints and inquiries regarding the processing of personal data.

13.2. Requests regarding personal data may be sent to: help@decosthai.com

13.3. The Company may request additional information to verify the identity of the requester and to protect against unauthorized or fraudulent requests.

14. Changes to This Policy

14.1. The Company may update this Policy from time to time to reflect changes in law, business structure, services, logistics models, technical infrastructure, or personal data processing practices.

14.2. The current version of the Policy is published on the website and takes effect from the moment of publication unless otherwise stated in the updated version.

Decos Company Limited
reg N: 0125557024483
51/60-61, Moo 6,
Sao Thong Hin,
Bang Yai District,
Nonthaburi 11140,
Thailand