Petchmaya Co., Ltd. (“we”, “us”) operates online sales pages and uses a self-hosted messaging assistant to help our staff respond to customers. This policy explains what we collect, why, how long we keep it, and your rights.
1. Information we collect
Conversation data — messages you send to our Page and our replies, images or files you send, message timestamps, and delivery/read status.
Platform data — from Meta we receive your public display name, profile picture, your Page-Scoped ID (PSID), and referral information indicating which ad or post you came from, if applicable. We do not receive your phone number, email address, or friend list from the platform.
Order information you provide — recipient name, phone number, delivery address, selected products, payment method, and payment slips if you choose to send them.
2. How we use it
To answer your questions about products, prices, and delivery.
To create and fulfil your order, and to pass required details to our shipping provider.
To keep your order history so you do not need to repeat your delivery address next time.
To review conversations internally in order to improve the accuracy of our product information and replies.
3. AI processing
We use an AI assistant to draft replies for our staff. The model runs on our own on-premise computer; conversation content is not sent to any third-party AI provider. Staff review drafts before they are sent, and prices, product details, and bank account numbers are validated against our own database by system rules.
4. Disclosure
We share the minimum necessary data with our shipping and order-management provider in order to deliver your parcel — including, where payment is made by bank transfer, the payment slip in order to verify payment before dispatch. We also disclose data to government authorities where required by law. We do not sell, rent, or trade your personal data for third-party marketing.
5. Retention
Conversations and customer records — kept for as long as needed to provide service and after-sales support.
General images you send (for example a photo of your delivery address or a product question) — not stored. They are read in memory for processing and discarded immediately.
Payment slips — retained for 45 days from the date the order is completed, so that we can verify payment with our shipping provider, reconcile amounts, and resolve disputes. They are deleted automatically after that period.
Accounting and tax records — kept for the period required by Thai law.
Payment slips are the only images we retain. We keep them because prepaid shipments must be reconciled with the carrier, and in cases of lost parcels, misdelivery, or payment disputes the transfer slip is the document used to verify what happened.
6. Security
Access is restricted by staff role, changes to sensitive data are logged for audit, and integration credentials are stored outside our source code.
7. Your rights
Under Thailand’s Personal Data Protection Act B.E. 2562 (PDPA) you may request access, correction, deletion, or restriction of your data, object to processing, and lodge a complaint with the Personal Data Protection Committee. To request deletion, see our Data Deletion page.