Privacy Notice
How PackaPack Studio Co., Ltd. collects, uses, and protects information when you visit our site, request a brief, or work with our studio.
Overview
This Privacy Notice explains how PackaPack Studio Co., Ltd. ("PackaPack," "we," "our," "us") handles personal information that you, our clients, prospects, vendors, and site visitors share with us. We act as a Data Controller for the data we collect, and as a Data Processor when we handle data on behalf of a client under a written agreement.
We operate under the Thailand Personal Data Protection Act B.E. 2562 (PDPA). For visitors residing in the European Economic Area or the United Kingdom, we additionally honour the principles of the General Data Protection Regulation (GDPR).
What we collect
The categories of personal information we collect depend on how you interact with us.
| Category | Examples | Source |
|---|---|---|
| Identifiers | Name, company, role, email, phone | You |
| Project brief | Product specs, budget range, timeline, brand assets you upload | You |
| Commercial records | Invoices, purchase orders, banking details, tax IDs | You / accountant |
| Correspondence | Emails, Line chats, meeting notes, sample feedback | You / us |
| Technical data | IP address, device type, browser, referrer, session timing | Auto / analytics |
| Newsletter | Email address, open/click events | You / mail provider |
We do not knowingly collect sensitive personal data (race, religion, health, biometric, etc.) as defined under PDPA §26, and we will refuse it if sent to us.
How we use it
- To respond to enquiries, prepare quotes, and deliver packaging design and production work.
- To manage accounts, samples, prototypes, freight, and customs documentation.
- To invoice you and meet Thai Revenue Department record-keeping obligations.
- To send project status updates, sample tracking, and our quarterly newsletter (only if you've opted in).
- To improve the studio site (aggregated analytics, never tied to identifiable visitors).
- To prevent fraud, debug errors, and protect the security of our systems.
Legal basis
We rely on the following lawful bases under PDPA §24 and GDPR Art. 6:
- Contract — performing a contract you've entered with us, or taking steps before entering one.
- Legal obligation — Thai accounting, tax, and labour law require us to keep certain records.
- Legitimate interest — operating, securing, and improving our studio practice.
- Consent — for our newsletter and any optional marketing communications. You can withdraw consent at any time.
Retention
- Project files & briefs — kept for 7 years after the last invoice, then archived offline or deleted.
- Invoices & accounting records — 10 years (Revenue Code §87).
- Marketing list — until you unsubscribe; we re-verify consent every 24 months.
- Site analytics — aggregated, 26 months.
- Contact form messages — 12 months from last reply, unless a project begins.
Your rights
Under PDPA and GDPR you have the right to:
- Access a copy of the personal data we hold about you.
- Correct inaccurate or incomplete records.
- Request deletion ("right to be forgotten"), subject to legal hold periods.
- Restrict or object to certain processing.
- Withdraw consent for marketing at any time.
- Receive your data in a portable, machine-readable format.
- Lodge a complaint with the Personal Data Protection Committee of Thailand or your local supervisory authority.
To exercise any of these rights, email privacy@packapack.studio. We respond within 30 days.
Security
We protect your data with administrative, technical, and physical safeguards: TLS in transit, encryption at rest for cloud storage, role-based access, signed processor agreements, locked file cabinets for physical samples, and a written incident response plan. In the unlikely event of a personal data breach affecting your rights, we will notify the PDPC within 72 hours and you without undue delay.
Children
Our services are directed to businesses. We do not knowingly collect personal data from anyone under 16. If you believe a minor has provided us with personal data, please contact us and we will delete it.
Changes to this notice
We update this notice as our practice evolves. Material changes will be announced at the top of this page and, where appropriate, by email. The version number and "last updated" date at the top always reflect the current revision.
Contact us
For any privacy questions, requests, or complaints:
PackaPack Studio Co., Ltd.
42/3 Charoenkrung Soi 32, Bang Rak, Bangkok 10500, Thailand
Email: privacy@packapack.studio
Phone: +66 2 123 4567 (Mon–Fri · 10:00–18:00 ICT)