Privacy Policy

1. Data Controller

2. Personal Data We Collect

2.1 Data You Provide Directly

• Identity: first name, last name
• Contact: email address, phone number, delivery and installation address
• Account: login credentials (password stored in encrypted/hashed form), order history, preferences
• Transaction: order details, payment method type, payment confirmation reference (MINAIRAL does not receive or store full card numbers or bank account details)
• PromptPay: phone number or national ID if provided for refund processing purposes
• Communications: messages and enquiries sent to our support team

2.2 Data Collected Automatically

• Technical: IP address, browser type and version, device type, operating system, screen resolution
• Usage: pages visited, time on site, referral source, click behaviour, cart actions
• Cookie and tracking data: as detailed in the Cookie Policy

2.3 Data Received from Third Parties

3. Legal Bases for Processing

4. Cross-Border Data Transfers

MINAIRAL uses third-party services that involve transferring personal data outside Thailand. The following table documents each transfer, destination, and applicable safeguard in accordance with PDPA Sections 28 to 29 and the PDPC Cross-Border Transfer Notification (effective March 2024):

Customers may request information about the specific safeguards in place for any cross-border transfer by contacting info@minairal.com.

5. How We Use Your Data

• To process, confirm, and fulfil your orders (purchases, delivery coordination, installation booking)
• To process payments via the accepted payment methods and manage refunds
• To send transactional communications (order confirmation, dispatch notification, filter replacement reminders)
• To manage your customer account and order history
• To respond to customer service and after-sales enquiries
• To measure and improve the performance of our advertising campaigns on Meta, TikTok, and Google
• To personalise advertising shown to you on Meta, TikTok, and Google platforms
• To analyse Website traffic and user behaviour to improve Website performance (Shopify analytics, Google Analytics 4 and PostHog)
• To comply with legal obligations under Thai law (tax, accounting, consumer protection)
• To send newsletters and marketing emails you have subscribed to (Omnisend). Every email has an unsubscribe link

6. Data Sharing

We do not sell your personal data. We share data only with:

7. Your Rights Under the PDPA

We respond to all requests within 30 days. You have the right to lodge a complaint with Thailand's Personal Data Protection Committee (PDPC) if you believe your rights have been violated.

8. Data Security

We implement appropriate technical and organisational security measures including: SSL/TLS encryption for all Website transmissions; PCI-DSS compliant payment processing (no card data stored by MINAIRAL); access controls and role-based authentication for internal systems; and regular security reviews.

In the event of a personal data breach presenting a risk to your rights, we will notify the PDPC within 72 hours and inform affected individuals without undue delay in accordance with PDPA Section 37.

9. Children's Data

Our Website is not directed at individuals under 20 years of age. We do not knowingly collect personal data from minors. Contact info@minairal.com if you believe a minor has submitted data through our Website.

10. Cookies & Advertising Technologies

We use cookies and tracking tags from Google (Analytics 4 and Ads), PostHog, Meta, TikTok and Omnisend on the Website. They load when you open a page; there is no consent banner. The Cookie Policy explains what each one does and how to refuse or limit them.

11. Updates to This Policy

We may update this Privacy Policy to reflect changes in our practices, the services we use, or legal requirements. Material changes are communicated by email or via a prominent Website notice at least 30 days before taking effect. The updated date is shown at the top of this Policy.

12. Contact