Personal Data Protection Policy

Pursuant to Thailand's Personal Data Protection Act B.E. 2562 (2019)

Last updated: April 2026

---

1. Data Controller

Design Classique Ltd. ("the Company," "we," "us," or "our") acts as the Data Controller under the Personal Data Protection Act B.E. 2562 (PDPA). We are committed to protecting the personal data of our clients, partners, and website visitors in accordance with Thai law.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity Data — full name, title, nationality
• Contact Data — email address, telephone number, mailing address
• Business Data — company name, job title, business registration details
• Transaction Data — purchase history, order details, payment records
• Communication Data — records of correspondence, inquiries, and feedback
• Technical Data — IP address, browser type, cookies, and website usage data

We do not collect sensitive personal data (as defined under Section 26 of the PDPA) unless you voluntarily provide it and have given explicit consent.

3. Purposes and Legal Basis for Processing

Purpose	Legal Basis
Processing orders and transactions	Performance of Contract
Responding to inquiries and customer support	Legitimate Interests
Sending service-related communications	Performance of Contract
Compliance with legal and regulatory obligations	Legal Obligation
Website analytics and performance improvement	Legitimate Interests
Marketing communications (opt-in only)	Consent

4. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined above, or as required by applicable law:

• Transaction records — 10 years (Thai accounting and tax law)
• Customer communications — 3 years from last interaction
• Marketing consent records — until consent is withdrawn
• Website technical data — up to 12 months

5. Disclosure of Personal Data

We may share your personal data with:

• Service providers — logistics, payment processors, IT systems, acting as our Data Processors under binding agreements
• Professional advisors — legal counsel, auditors, insurers
• Regulatory authorities — when required by law or court order
• Business partners — only with your explicit consent

We do not sell your personal data to third parties.

6. International Data Transfers

As an international jewellery exporter, we may transfer personal data to recipients outside Thailand. Where such transfers occur, we ensure adequate protection measures are in place in accordance with PDPA Section 28, including contractual safeguards with receiving parties.

7. Your Rights as a Data Subject

Under the PDPA, you have the following rights:

• Right to be Informed — to know how your data is used
• Right of Access — to request a copy of your personal data
• Right to Rectification — to correct inaccurate data
• Right to Erasure — to request deletion of your data (right to be forgotten)
• Right to Restriction — to limit how we process your data
• Right to Data Portability — to receive your data in a machine-readable format
• Right to Object — to object to certain types of processing
• Right to Withdraw Consent — at any time, without affecting prior processing

To exercise any of these rights, please contact us using the details in Section 9.

8. Cookies

Our website uses cookies to improve user experience and analyse traffic. For full details on the types of cookies we use and how to manage your preferences, please refer to our Privacy Policy.

9. Contact & Complaints

For data protection matters, please contact our Data Controller:

If you believe we have not handled your personal data in accordance with the PDPA, you have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.

10. Changes to This Policy

We may update this PDPA Compliance Policy from time to time. Any changes will be posted on this page with a revised effective date. We encourage you to review this page periodically.

---

© 2026 Design Classique Ltd. All rights reserved.