Privacy notice

Who is responsible for your data

The data controller is Whiterose Design Co., Ltd., a company registered in Thailand (company registration no. 0105568044634), with its office at 104 Lat Phrao 80 Alley, Wang Thonglang, Bangkok 10310.

For any privacy question, or to exercise your rights, contact us at info@whiterose.co.th.

What personal data we collect

We only collect what we need to answer you and deliver our work:

• Identity & contact details — your name, email address, phone number and/or LINE ID, and preferred language.
• Project details — the property location or area, the type of space, your style preferences, timeline, budget indications, and anything you choose to tell us in the message field or our Get Started tool.
• Your enquiry category — for example whether you are a homeowner, renter, interior designer or hospitality client.
• Communications — the messages you send us through our forms, LINE, WhatsApp, email or phone, and our replies.
• Technical data — collected automatically by our hosting provider for security and reliability, such as your IP address, browser type and the pages you view. We do not use this to identify you personally.

We do not intentionally collect sensitive personal data (such as health, religion or biometric data). Please do not send us such information.

Why we use it, and our legal basis

We process your personal data to:

• respond to your enquiry, arrange a consultation and prepare a quotation — necessary to take steps at your request before entering a contract, and to provide our services;
• make, ship and install your order and provide after-sales support — to perform our contract with you;
• keep our website secure and improve it — for our legitimate interest in running a safe, useful site;
• keep accounting and tax records — to comply with our legal obligations under Thai law;
• send you updates or offers only where you have asked us to — based on your consent, which you can withdraw at any time.

How we collect it

We collect personal data directly from you when you complete a form, use our Get Started tool, or contact us by LINE, WhatsApp, email or phone. Technical data is collected automatically by our website hosting when you visit.

Cookies

Our site uses only the essential cookies needed for the website to load and stay secure. We do not currently use advertising or analytics cookies, and we do not track you across other websites.

If we add analytics or advertising tools in future, we will update this notice and, where the law requires, ask for your consent first.

Who we share it with

We never sell your personal data. We share it only with:

• Service providers who run our website and handle form submissions and scheduling on our behalf (for example our website host), under agreements that require them to protect your data;
• The messaging platforms you choose to contact us through — LINE and WhatsApp — which process your messages under their own privacy policies;
• Trusted partners we need in order to complete your project — such as printers, material suppliers and installers — with only the information needed to do the work;
• Government authorities or professional advisers where we are required to by law, or to establish or defend legal claims.

Sending data outside Thailand

Some of our service providers (for example our website host and the messaging platforms) may store or process data on servers outside Thailand. Where this happens, we take steps to ensure your data receives a suitable standard of protection, as required by the PDPA.

How long we keep it

We keep enquiry details for as long as we are in active discussion with you, and for a reasonable period afterwards in case you return to us. Where you become a customer, we keep project and transaction records for as long as required by Thai tax and accounting law. When we no longer need your data, we securely delete or anonymise it.

Your rights

Under the PDPA you have the right to:

• Access — ask for a copy of the personal data we hold about you;
• Rectification — ask us to correct data that is inaccurate or incomplete;
• Erasure — ask us to delete or anonymise your data;
• Restriction — ask us to pause our use of your data;
• Objection — object to certain uses of your data;
• Portability — receive your data in a commonly used format;
• Withdraw consent — where we rely on your consent, withdraw it at any time;
• Complain — lodge a complaint with the Office of the Personal Data Protection Committee (PDPC).

To exercise any of these rights, email us at info@whiterose.co.th. We will respond within the timeframe required by law. Withdrawing consent does not affect any processing we already carried out lawfully.

How we protect your data

We apply appropriate technical and organisational measures to keep your personal data secure, including hosting on reputable platforms and limiting access to those who need it. No online service can be guaranteed completely secure, but we take reasonable steps to protect your information.

Children

Our services are aimed at adults. We do not knowingly collect personal data from children without appropriate parental consent. If you believe a child has given us their data, please contact us and we will remove it.

Changes to this notice

We may update this notice from time to time. The current version and its effective date are always shown on this page.

How to contact us

For any question about this notice or your personal data, or to make a complaint, contact Whiterose Design Co., Ltd. at info@whiterose.co.th or +66 81 172 7663. You also have the right to complain to the Office of the Personal Data Protection Committee (PDPC) in Thailand.