Privacy Policy

1. Data Controller Information

This Privacy Policy applies to Yumi Stroopwafel ("we", "us", or "our"), operating in Thailand. We are committed to protecting your privacy and ensuring the security of your personal data in full compliance with the Thailand Personal Data Protection Act B.E. 2562 (2019) ("PDPA").

2. Personal Data We Collect

We do not collect or store credit card details or password accounts on this website. However, when you browse our website or initiate an order via WhatsApp, the following data may be processed:

• Order Information: Full name, delivery address, and telephone number provided voluntarily by you during WhatsApp chat communication.
• Browser Storage Data: Technical session identifiers and cart item data stored locally in your browser (localStorage) to maintain your selected shopping basket.
• Communication Records: WhatsApp order chat histories necessary to fulfill nationwide courier delivery in Thailand.

3. Purpose & Legal Basis for Processing

We process your personal data under the following legal bases pursuant to the Thai PDPA:

• Contractual Necessity: To prepare, package, and deliver fresh stroopwafels and food items to your designated address via courier services.
• Legitimate Interests: To respond to customer inquiries, improve customer support, and maintain website security.
• Consent: When you voluntarily initiate contact via WhatsApp or consent to local browser storage.

4. Local Storage & Cookies

Our website utilizes client-side local storage (localStorage) to store your active basket items. This data remains on your personal device and is not used for tracking across third-party websites. You may clear your browser storage at any time.

5. Data Sharing & Third-Party Couriers

Your personal delivery information (name, address, phone number) is shared solely with trusted third-party courier services operating within Thailand (such as Flash Express, Kerry Express, or Thailand Post) exclusively for fulfilling order delivery. We do not sell or rent your personal data to advertisers.

6. Your Rights Under Thai PDPA

Under the PDPA B.E. 2562, you hold the following statutory rights regarding your personal data:

• Right to access and request a copy of your personal data.
• Right to request correction of inaccurate data.
• Right to request erasure or anonymization of your data.
• Right to object to or restrict processing.