Privacy policy

Privacy Policy

This Privacy Policy explains how NORDENFELD CO., LTD. ("Nordenfeld," "we," "us," or "our") collects, uses, and protects your personal data when you visit or make a purchase from nordenfeld.com (the "Site"), or visit our physical stores. We are committed to handling your data in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and, where applicable, the EU/UK General Data Protection Regulation (GDPR).

Who We Are

The data controller responsible for your personal data is:

NORDENFELD CO., LTD.
14/102 Moo 2, Bo Phut, Koh Samui, Surat Thani 84320, Thailand
Tax ID: 0845566013565
Email: info@nordenfeld.com

Information We Collect

We collect the following categories of personal data:

  • Information you provide: name, email address, phone number, shipping and billing address, and any messages you send us when you place an order, create an account, contact us, or subscribe to our newsletter.
  • Payment information: payment details are collected and processed directly by our payment providers. We do not store full card numbers on our servers.
  • Information collected automatically: when you browse the Site we automatically collect device information, browser type, IP address, and information about how you interact with the Site, through cookies and similar technologies.
  • Communications: if you contact us by email, social media, or messaging apps, we keep a record of that correspondence.

How We Use Your Information

We use your personal data to:

  • Process, fulfil, and deliver your orders, and manage payments, returns, and exchanges;
  • Communicate with you about your orders, respond to enquiries, and provide customer support;
  • Send marketing communications and newsletters, where you have consented to receive them;
  • Improve and personalise the Site and our products;
  • Detect and prevent fraud, and comply with our legal and accounting obligations;
  • Display and measure advertising on third-party platforms.

Legal Basis for Processing

We process your personal data on the following legal bases: performance of a contract (to fulfil your orders); your consent (for marketing and non-essential cookies); our legitimate interests (to operate and improve our business and prevent fraud); and compliance with legal obligations (such as tax and accounting law). Where we rely on consent, you may withdraw it at any time.

How We Share Your Information

We share your personal data only with trusted third parties who help us operate our business, and only as necessary. These include:

  • Shopify — our ecommerce platform, which hosts the Site and processes orders;
  • Payment providers — Stripe, Omise, and PayPal, to process payments securely;
  • Shipping and logistics partners — including DHL Express, to deliver your orders and complete customs clearance;
  • Meta Platforms (Facebook and Instagram) — for advertising, and where you contact us via Messenger or Instagram;
  • LINE — where you choose to communicate with us through LINE;
  • Analytics and marketing providers — to understand and improve Site performance.

We do not sell your personal data. We may also disclose your data where required by law or to protect our legal rights.

International Data Transfers

Some of our service providers are located outside Thailand, including in the United States and the European Union. Where we transfer your personal data abroad, we take steps to ensure an appropriate level of protection through recognised safeguards such as standard contractual clauses, in line with the PDPA and GDPR.

Where you place an international order, we also share your name, address, contact details and order contents with the destination country's customs authorities, as required for import clearance.

Data Retention

We keep your personal data only for as long as necessary for the purposes set out in this policy, including to satisfy any legal, accounting, or reporting requirements. Order and transaction records are retained for the period required by Thai tax and accounting law.

Your Rights

Subject to applicable law, you have the right to:

  • Access the personal data we hold about you and obtain a copy;
  • Request correction of inaccurate or incomplete data;
  • Request deletion of your personal data;
  • Object to or request restriction of processing;
  • Request portability of your data;
  • Withdraw consent at any time, where processing is based on consent;
  • Lodge a complaint with the relevant data protection authority.

To exercise any of these rights, please contact us at info@nordenfeld.com.

Cookies

We use cookies and similar technologies to operate the Site, remember your preferences, analyse traffic, and support advertising. You can control non-essential cookies through the cookie banner on the Site or through your browser settings. Disabling certain cookies may affect how the Site functions.

Children's Privacy

The Site is not intended for children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top indicates when it was last revised. We encourage you to review this page periodically.

Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at info@nordenfeld.com.