Privacy policy

Who handles your data

Gonna Crack, the shop you’re ordering from, is the data controller. Contact us on Instagram at @gonna.crack or at gonnacrack1@gmail.com.

What we collect

At checkout: your name, phone number, email address and Thai shipping address. If you ask for a refund, the PromptPay number you want it sent to.

We never see or store your card or bank credentials. Payment happens through our payment provider, which handles those details directly.

Why we need it

To take payment, pack and ship your order, email you about it, and handle returns and refunds. Under the PDPA this is processing necessary to perform our contract with you.

Who else sees it

Only the services that make an order work: our payment provider, our email provider, our hosting provider, and the delivery carrier that brings you the parcel. We don’t sell your data or use it for advertising.

How long we keep it

We keep order records for as long as we need them to run the shop, settle returns and meet accounting obligations, then delete them.

Site analytics

We use Vercel Analytics to count page views. It doesn’t use cookies and doesn’t identify you.

Your rights

You can ask us for a copy of your data, ask us to correct or delete it, object to how we use it, or withdraw consent. Message us and we’ll handle it. You also have the right to complain to Thailand’s Personal Data Protection Committee.