Catalogue

Privacy Notice

Updated: October 23, 2026

This Privacy Notice explains how BND Delivery Co., Ltd. (“we”) collects, uses and protects personal data when you use the website bnd.delivery (the “Site”). It has been prepared in accordance with Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”).

1. Data controller

BND Delivery Co., Ltd.

Telegram: @bshk_phuket

2. What data we collect

Data you provide when submitting a request:

  • Contact details: Telegram username, WhatsApp or phone number
  • Delivery address or location (hotel name, map link)
  • Request details: items, quantities, total, payment method
  • Comments on the request
  • Messages sent via Telegram or WhatsApp

Data collected automatically:

  • Device and browser type, operating system, language, approximate location (country/city based on IP address)
  • Pages viewed, clicks, add-to-cart actions, referral source and tags
  • Data in browser storage: age confirmation, cart contents, language choice

We do not knowingly collect data from persons under 20.

3. Purposes and legal bases

  • Processing your request and contacting you to confirm it: performance of a contract / steps taken at your request (Section 24(3) PDPA).
  • Record-keeping, accounting and tax obligations: legal obligation (Section 24(6) PDPA).
  • Site security and fraud prevention: legitimate interest (Section 24(5) PDPA).
  • Analytics and site improvement: consent given by using the Site (Section 19 PDPA).

4. Cross-border transfers

Some services may process data on servers outside Thailand. Such transfers are made in accordance with Sections 28–29 PDPA on the basis of contractual safeguards and user consent.

5. Retention

  • Request records: up to 24 months (or longer where required for accounting or tax purposes).
  • Correspondence with the operator: up to 12 months.
  • Browser storage: until you clear it.

6. Your rights

Under the PDPA you have the right to:

  • access your data and obtain a copy;
  • request correction of inaccurate data;
  • request deletion or anonymisation of your data;
  • object to or restrict processing;
  • withdraw your consent or lodge a complaint with the PDPC.

To exercise your rights, message us on Telegram at @bshk_phuket. We will respond within 30 days.

7. Age restriction

The Site is intended only for persons aged 20 and over.

8. Security and changes

We apply reasonable measures to protect data and may update this Notice as needed.