Privacy Policy
Last updated 9 Sep 2026
We collect only what we need to send your amulet, look after you afterwards, and answer the questions you ask us. This page explains what we hold, what we do with it, how long we keep it, and what you may ask us to do with it, under Thailand’s Personal Data Protection Act B.E. 2562 (2019).
What we collect
- Your name, phone number, email and LINE ID, as entered when ordering, registering or writing to us
- Your delivery address
- Your order history, amounts, dates and any payment slips you send us
- The amulets you have registered yourself as the owner of
- Messages sent through our contact form, together with the IP address and browser type, kept to keep spam out
- Notes our team writes about conversations with you (phone, LINE or in person), so we can look after you consistently
What we use it for
Who we share it with
- Courier companies — your name, phone and address, only as needed to deliver the parcel
- Banks and payment providers — to confirm that a transfer arrived
- The hosting and email providers that run our systems, who may access data only as far as providing that service requires
- Government authorities, where there is a lawful order or warrant
We do not sell, trade or rent your data to anyone, under any circumstances.
Cookies and email measurement
This site uses only the cookies it needs to work: staying logged in, remembering your cart and chosen language, and the token that prevents forged requests. We do not run any third-party advertising trackers.
Our newsletters (not the emails about your own orders) contain one tiny image that tells us whether the email was opened, and links in them count clicks. We use this only to see whether what we send is of any use to you. If you would rather we did not, the unsubscribe link at the foot of every newsletter stops it.
How long we keep it
- Orders, receipts and payment records: 5 years, as Thai tax law requires
- Contact-form messages: 2 years after they are answered (messages quarantined as spam are deleted within 90 days)
- Newsletter open and click statistics: 365 days
- Backup files: 14 days, then overwritten automatically
- Member account details and the amulet ownership register: for as long as the account is in use, or until you ask us to delete them
How we protect it
- Every page of the site is served over an encrypted HTTPS connection
- Your password is stored one-way encrypted — not even our team can read it
- The admin system is reachable only by authorised team members
- Backup files are kept where they cannot be opened from the internet
Your rights
Under the Personal Data Protection Act you have the rights below, and exercising them costs you nothing.
- To see and obtain a copy of the data we hold about you
- To have inaccurate or out-of-date data corrected
- To have your personal data deleted, except where the law requires us to keep it
- To withdraw your consent to marketing email at any time
- To object to, or ask us to suspend, our use of your data
- To complain to the Personal Data Protection Committee if you believe we have got it wrong
Make a request
Fill in this form and we will contact you and deal with it within 30 days.
Questions about your data
If anything on this page is unclear, or you would like to ask about the data we hold, please get in touch through any of the channels we list.