TMES Co., Ltd. ("TMES", "we", "us") is committed to protecting your personal data in accordance with the Personal Data Protection Act B.E. 2562 (PDPA) of Thailand. This Privacy Policy explains what personal data we collect, how we use it, and your rights as a data subject.
1. Data Controller
TMES Co., Ltd.
43 Thai CC Tower, 22nd floor, Unit A228-A229, South Sathon Road, Yannawa, Sathon, Bangkok 10120, Thailand
Tax ID: 0105554141420
Email: privacy@tmes.co.th · Phone: 02-6757498
2. Data Protection Officer (DPO)
Our DPO can be reached at privacy@tmes.co.th for any privacy-related enquiries or to exercise your rights under the PDPA.
3. Personal Data We Collect
- Identity data: name, surname
- Contact data: email address, phone number, shipping & billing address
- Transaction data: order history, payment method type (not full card numbers), purchase amounts
- Account data: username, password (hashed), membership tier, preferences
- Technical data: IP address, browser type, device information, cookies
- Marketing data: preferences for receiving marketing communications
We do not collect sensitive personal data (as defined by PDPA Section 26) unless explicitly required and with your explicit consent.
4. Purposes & Legal Basis for Processing
| Purpose | Legal Basis (PDPA) |
|---|---|
| Processing your order and payment | Contract performance (s.24(3)) |
| Account creation and management | Contract performance (s.24(3)) |
| Transactional emails (order confirmation, shipping updates) | Contract performance (s.24(3)) |
| Marketing communications (newsletters, promotions) | Consent (s.24(1)) |
| Fraud detection and security | Legitimate interests (s.24(5)) |
| Tax and legal compliance | Legal obligation (s.24(6)) |
| Website analytics and service improvement | Consent (s.24(1)) |
5. Cookies & Tracking Technologies
We use cookies and similar technologies. You can manage preferences through our Cookie Consent Banner on your first visit.
- Strictly Necessary: Required for the website to function (session, cart, auth)
- Analytics: Help us understand how visitors use our site (e.g. Google Analytics)
- Marketing: Deliver relevant advertising (e.g. Facebook Pixel, Google Ads)
6. Sharing Your Personal Data
We may share data with these categories of third parties acting as processors on our behalf:
- Payment gateway providers (Omise, 2C2P, Stripe) for transaction processing
- Logistics partners (Thailand Post, Kerry, Flash Express, DHL) for delivery
- Email and SMS providers for transactional communications
- Analytics providers (Google Analytics) — data is anonymised or pseudonymised
We do not sell or rent your personal data to third parties for their own marketing purposes.
7. Data Security
We implement TLS/HTTPS encryption, hashed passwords, role-based access controls, and regular security assessments to protect your data. No internet transmission is completely secure, but we take all reasonable steps to protect your information.
8. Data Retention
- Transaction and tax records: 5 years (Thai Revenue Code requirement)
- Customer account data: for the duration of the account plus 3 years after closure
- Marketing consent records: until consent is withdrawn
9. Your Rights Under the PDPA
- Right of access (s.30) — obtain a copy of your personal data
- Right to rectification (s.35) — request correction of inaccurate data
- Right to erasure (s.33) — request deletion in certain circumstances
- Right to data portability (s.31) — receive data in a machine-readable format
- Right to object (s.32) — object to processing based on legitimate interests or direct marketing
- Right to withdraw consent (s.19) — withdraw at any time for consent-based processing
- Right to lodge a complaint — with the Personal Data Protection Committee (PDPC) of Thailand
To exercise any right, email privacy@tmes.co.th. We will respond within 30 days.
10. Children's Privacy
Our services are not directed to individuals under 20. If we learn we have collected data from a minor without parental consent, we will delete it promptly.
11. Changes to This Policy
Material changes will be notified by email or a prominent website notice at least 30 days before taking effect.
12. Contact Our DPO
- Email: privacy@tmes.co.th
- Post: Data Protection Officer, TMES Co., Ltd., 43 Thai CC Tower, 22nd floor, Unit A228-A229, South Sathon Road, Yannawa, Sathon, Bangkok 10120