Last updated: November 10, 2026

1. Who We Are

Thai Decoded is operated by Tanon Vichitkulthon, based in Bangkok, Thailand. Our website is thaidecoded.com. For privacy-related enquiries, contact us at contact@thaidecoded.com.

This Privacy Policy describes how we collect, use, and protect your personal data when you visit this website or use our services. It applies alongside Thailand’s Personal Data Protection Act B.E. 2562 (PDPA) and, where applicable, the European Union’s General Data Protection Regulation (GDPR).

2. Data We Collect

Account registration

When you create an account directly, we collect your name, email address, and a password stored in encrypted form. If you register or log in through Google, we receive your name, email address, and Google profile ID via Google OAuth (provided by Nextend Social Login).

Purchases

If you purchase through our store (powered by WooCommerce), we collect your name, billing address, email address, and payment details. Payment processing is handled by Stripe or PayPal; we do not store your full card number.

Newsletter subscriptions

If you subscribe to our newsletter, we collect your email address. Subscriptions are managed by MailPoet. We use confirmed opt-in (double opt-in): you receive a confirmation email and are added to our mailing list only after you click the confirmation link.

Contact forms

If you submit a contact form, we collect the information you provide, typically your name and email address.

Abandoned cart data

We use CartBounty to record incomplete purchases. If you add products to your cart and enter your email address without completing the purchase, that cart data is stored. Automated cart recovery emails are not currently active.

Community forum

If you participate in our forum (powered by wpForo), your posts, topics, profile information, and activity are stored in our database.

Website analytics

We use Google Analytics 4 (measurement ID: G-V8C1YJ4EPL) to understand how visitors use this website. Analytics is applied to non-logged-in visitors only; logged-in members are excluded. Google Analytics 4 processes IP addresses and anonymizes them at Google’s platform level. See Google’s Privacy Policy.

3. Cookies

This website uses cookies for essential functions: session management, user authentication, and WooCommerce shopping cart state. If you post a comment, WordPress may store your name and email address in cookies to pre-fill the form on your next visit. No dedicated cookie consent mechanism is currently deployed on this site. You can disable non-essential cookies in your browser settings at any time.

4. How We Use Your Data

• To create and manage your user account
• To process and fulfil your orders
• To communicate with you about your orders, account, or enquiries
• To send newsletters to subscribers who have confirmed their subscription
• To operate and improve this website
• To analyse how visitors use the website (via Google Analytics 4)

5. Data Retention

We retain personal data as follows:

• User accounts: retained until you request deletion
• Newsletter subscriptions: retained until you unsubscribe
• WooCommerce order data: retained indefinitely (no automated deletion is currently configured)
• Google Analytics data: as determined by Google’s data retention settings
• Forum posts and profiles: retained until you request removal
• CartBounty cart records: retained for a limited period as configured by CartBounty defaults

6. Third-Party Services

We do not sell your personal data. We share data only with the services that operate this website:

• Google — Google OAuth login and Google Analytics 4. Privacy Policy
• Stripe — payment processing. Privacy Policy
• PayPal — payment processing. Privacy Policy
• MailPoet — newsletter delivery. Privacy Policy

7. Your Rights

Thailand residents (PDPA): You have the right to access, correct, delete, or restrict processing of your personal data, to withdraw consent at any time, and to lodge a complaint with the Personal Data Protection Committee.

EU/EEA residents (GDPR): You have the right to access, rectify, erase, or restrict your personal data, to object to processing, and to request data portability. You may lodge a complaint with your local data protection authority.

How to exercise your rights

• Account deletion: We do not currently offer self-service account deletion. To request deletion of your account and associated data, email contact@thaidecoded.com. Note: WooCommerce order records are not removed automatically by our current process; we handle such requests manually on a case-by-case basis.
• Newsletter unsubscribe: Use the unsubscribe link in any newsletter email, or contact us directly.
• Data access, correction, or other requests: Email contact@thaidecoded.com.

We aim to respond to all requests within 30 days.

8. Data Security

We use HTTPS throughout this website. Passwords are stored in hashed form. We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure.

9. International Transfers

This website is hosted in Thailand. If you access it from outside Thailand, your data is transferred to and processed in Thailand. Some third-party services (Google, Stripe, PayPal, MailPoet) may process data in other countries under their own data transfer frameworks.

10. Children

This website is not directed at children under 13. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of the website after a revision constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions or to exercise your rights:
Thai Decoded
Bangkok, Thailand
Email: contact@thaidecoded.com