Privacy policy

This policy explains how BooBook Studio collects, uses and shares your personal data under Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA).

Data controller

CLOUD STONES CO., LTD (owner of the BooBook Studio brand), 37 Amnuaysongkram Road, Thanon Nakhon Chai Si, Dusit, Bangkok 10300, Thailand. E-mail: hello@cloud-stones.com

For anything about your personal data, write to hello@cloud-stones.com.

What we collect

• Order data: name, e-mail, phone, delivery address, items and amounts paid
• Tax invoice data (when requested): name, tax ID, branch and address
• Account data (if you sign up): e-mail and sign-in data
• Messages you send us through the contact form, LINE or e-mail
• Partner data (if you apply): your application and the details needed to pay commissions and withhold tax
• Website usage data, only if you consent to analytics and marketing cookies

We never receive or store your credit or debit card number.

Why we use it

• To process orders, take payment, deliver and keep you updated (performance of a contract)
• To issue receipts and tax invoices and keep records as the Revenue Code requires (legal obligation)
• To answer questions and provide after-sales care
• To calculate partner commissions from the codes used
• To measure website and advertising performance (only with your consent)

We send news and offers by e-mail only to people who agreed to receive them, for example by ticking the box when creating an account. Every such e-mail has an unsubscribe link, and you can ask us to stop at any time at hello@cloud-stones.com.

Cookies and tracking

We use the following tools only after you accept in the cookie banner:

• Google Analytics 4, to understand which pages are visited
• Meta (Facebook) Pixel, to measure ads on Facebook and Instagram

You can change your mind or withdraw consent at any time with the “Cookie settings” link at the bottom of every page. We ask again after 12 months.

Storage needed for the site to work, used without consent:

• locale: remembers your language
• Sign-in session cookies (Supabase), for account holders
• bb_partner: remembers a partner code for 30 days
• bb_ref: remembers a referral code
• Your cookie consent choice
• Your bag, kept in your browser (localStorage)

Who we share data with

Only what is needed, with these service providers:

• Opn Payments: payments
• SPX Express and Shippop: delivery (name, phone, address)
• Resend: order confirmation and status e-mails
• Vultr: provider of the server the company rents to host the website and database, in a data centre in Singapore
• Google and Meta: when you consent to cookies

Your data is therefore stored outside Thailand (in Singapore), and some providers, such as Google, Meta and Resend, may process data in other countries. We only pass on what each service needs, and use providers with appropriate personal data safeguards, as the PDPA requires.

We do not sell your personal data.

How long we keep it

• Order and tax records are kept for as long as the Revenue Code requires, generally at least 5 years.
• Accounts are kept until you ask us to delete them; an account with no sign-in or order for 3 years is deleted.
• Messages you send us are kept for 2 years after our last exchange.
• Partner applications that are not accepted are kept for 1 year; partner data is kept for the length of the partnership, and payment records as the Revenue Code requires.
• Marketing e-mail subscriptions last until you unsubscribe.
• Any other data is kept only as long as needed for its purpose.

Your rights

Under the PDPA you may access and obtain a copy of your data, correct it, have it deleted, restrict its use, object to processing, request portability and withdraw consent. You may also complain to the Personal Data Protection Committee.

To exercise your rights, contact us or e-mail hello@cloud-stones.com. We may ask you to verify your identity first.

Children's data

This site is meant for parents and adults buying for children. We do not knowingly collect children's personal data.

Changes

We may update this policy; the date at the top always shows the latest revision.