Privacy Policy
At Textile Gallery Co., Ltd. (“the Company,” “we,” or “our”), we truly value your privacy. We know how important it is to you that your personal information is kept safe and used responsibly. That’s why we are committed to protecting the information you share with us.
We use your information only to provide you with products and services that best match your needs, and to give you the best customer experience possible. You can trust that we will handle your personal data carefully and responsibly.
This Privacy Policy applies to all the ways we may collect your information—whether through our retail stores, websites, customer care centers, social media, online communication channels, or other places where your information is collected.
When we say “personal data,” we mean any information that can identify you as an individual.
We may update this Privacy Policy from time to time. Please check back regularly to see when it was last updated. Any changes will take effect as soon as we publish them on our website. If there are important changes, we’ll let you know. And if the changes affect your rights regarding sensitive data, we’ll always ask for your consent first—unless the law requires otherwise.
1. Personal Data We Collect and Process
We may collect or receive different types of personal data about you, either directly from you, from other sources, or from our affiliates within the Pasaya Group. The type of information we collect depends on how you interact with us, and the products or services you request. This information may include:
1.1 Personal details – such as title, full name, gender, age, occupation, job position, business type, company name, nationality, country of residence, date of birth, marital status, number of family members and children, children’s age, government-issued ID information (e.g., national ID number, ID photo, Laser ID, social security number, passport number, tax ID, driver’s license), signature, voice recordings, photographs, facial recognition data, CCTV images, workplace, education background, vehicle registration number, household income, salary, and personal income.
1.2 Contact information – such as mailing address, delivery address, billing address, home or workplace address, ID card address, phone number, fax number, email, LINE ID, Facebook account/ID, Google ID, Twitter ID, and other social media accounts, as well as contact persons (e.g., phone numbers or written correspondence with you).
1.3 Membership information – such as membership account details, membership card number, reward points, card issue/expiry dates, membership code, membership type, customer type, date of joining, duration of membership, bank account details, payment information, and application forms.
1.4 Financial information – such as credit/debit card or bank details, card number, card type, issue/expiry date, billing cycle, account details, PromptPay ID, and payment history.
1.5 Transaction information – such as payments made by or to you, payment dates/times, payment amounts, refunds, reward points, purchase date/location, order number, booking details, delivery/collection address, warranty information, complaints or claims, booking records, purchase history, transaction status, past sales, and purchasing behavior.
1.6 Technical information – such as IP address, cookies, MAC address, web beacons, log files, device ID (e.g., IMEI, ESN, MEID, serial number), device model and type, hardware/software details, device activation time, network, access logs, GPS data (latitude/longitude), login records, browsing history, search history, browser type and version, time zone, operating system, platform, plugins, apps installed, and other technical details.
1.7 Behavioral information – such as your purchasing behavior and product/service usage.
1.8 Profile information – such as your username and password, personal profile and images, order history, items purchased, interests, preferences, survey responses, loyalty program details, discount or promotion codes used, customer service records, and participation in trade shows or events.
2. Sources of Personal Data
2.1 Direct sources Textile Gallery Co., Ltd. may collect your personal data and/or sensitive personal data directly from you. This can happen when you: Register for membership or use our website, Accept cookies on your browser, Intentionally provide or consent to share your information with us via email or telephone, Participate in surveys, promotions, special activities, or programs organized by Textile Gallery Co., Ltd.
2.2 Indirect sources
We may also receive some of your personal data and/or sensitive personal data indirectly from third parties. These may include:
Recruitment agencies, Background check providers, Our employees, Other customers or service users of Textile Gallery Co., Ltd., Or by combining personal data with information from third-party sources or services to help us improve our services, as well as for marketing and advertising purposes.
Third-party data you provide
If you provide us with the personal data of others (for example, the name, address, and phone number of an emergency contact, or the income of family members), and if you consent, we may access and collect such information. This may include names, photos, and/or phone numbers of family members, friends, emergency contacts, referees, or persons recommended by you, including information accessible from your mobile device.
Please make sure those individuals are informed of this Privacy Policy and, where required, obtain their consent. We will only collect, use, or disclose sensitive personal data with your explicit consent, or when permitted by law.
3. Purposes of Processing Personal Data
We collect and process your personal data for the following purposes:
3.1 Providing products and services
To deliver products and services, enter into and manage contracts with you, support related activities, process orders, manage bookings, handle financial transactions, payments, refunds, returns, and exchanges. This also includes confirming or cancelling transactions, providing delivery updates, managing warehouse operations (receiving, organizing, labeling), verifying warranties, and providing after-sales services such as maintenance appointments and customer support.
3.2 Marketing and communications
To share special offers, promotions, discounts, advertising, updates, and news about our products and services from Textile Gallery Co., Ltd. and the Pasaya Group.
3.3 Promotions and loyalty programs
To manage loyalty programs, reward points, raffles, contests, and other promotional activities. This includes processing registrations, event participation, reward accumulation, redemption, voucher or gift issuance, and invoicing.
3.4 Registration and identity verification
To register, verify, confirm, and authenticate your identity.
3.5 Customer relationship management
To communicate with you regarding the products or services you use, and to handle customer service issues such as inquiries, feedback, complaints, claims, disputes, technical support, and problem-solving.
3.6 Personalization and data analytics
To personalize your experience, understand your preferences and behaviors, recommend products/services that may interest you, and improve our offerings. This includes profiling, data cleansing, surveys, market research, trend analysis, and evaluating marketing campaigns.
3.7 Business improvement and R&D
To improve our business operations, products, and services. This includes research and development, identifying and fixing issues, preparing anonymized reports, evaluating product performance (both physical and digital), and developing new business models.
3.8 Learning more about you
To better understand your needs, interests, and preferred communication channels, so we can offer more relevant services and improve customer experiences.
3.9 Website and platform operations
To operate, monitor, and secure our websites and platforms, ensuring smooth, efficient, and safe performance. This also includes updating and improving content and design.
3.10 IT management
To manage our IT systems and business operations, including communication systems, cybersecurity, safety audits, and compliance with internal policies and processes.
3.11 Legal and regulatory compliance
To comply with applicable laws, legal processes, court orders, or government regulations (including those outside Thailand). This may involve VAT refunds, tax invoices, audit records, and disclosures to tax authorities, regulators, or law enforcement agencies for investigations or crime prevention.
3.12 Protecting our interests
To safeguard the security and integrity of our business, exercise or defend legal rights, prevent fraud, intellectual property violations, or misconduct, protect company assets, enforce terms and conditions, monitor incidents (including CCTV), prevent or report crimes, and maintain business trust and security.
4. Disclosure of Personal Data
The individuals and organizations to whom Textile Gallery Co., Ltd. may disclose your personal data and/or sensitive personal data include:
4.1 The Customs Department
4.2 The Revenue Department
4.3 The Royal Thai Police
4.4 The Social Security Office, Ministry of Labour
4.5 The Department of Labour Protection and Welfare
4.6 The Department of Land Transport
4.7 Courts of competent jurisdiction
4.8 Public and/or private hospitals
4.9 Commercial banks and financial institutions
4.10 Insurance companies
4.11 Law firms
4.12 Auditors
4.13 Affiliates within the Pasaya Group
5. Transfer of Your Personal Data Abroad
When necessary, we may disclose or transfer your personal data to third parties or service providers located outside Thailand. Please note that the destination country may or may not have the same level of personal data protection as Thailand.
In such cases, we will take appropriate steps and measures to ensure that your personal data is transferred securely, and that the recipient has an adequate level of data protection, or as otherwise permitted by law. Where required by law, we will obtain your consent before transferring your personal data abroad.
6. Retention and Deletion of Personal Data
6.1 Textile Gallery Co., Ltd. will retain your personal data and/or sensitive personal data only for as long as necessary to fulfill the purposes for which it was collected, used, or disclosed. This includes the following types of information:
| Type of Data | Details | Retention Period | Storage Format |
| Finance & Accounting | Invoices, receipts, bank account details, financial history | 10 years | Electronic / Paper |
| IT – System Logs & Security Records | System usage and security logs (e.g., login/logout, system changes, access records, license checks) | Retained as long as necessary to fulfill contractual obligations and legal requirements | Electronic |
| IT/Security – Audit Logs | IP address, cookie ID, user/visitor records, security records such as login and logout records, permission changes, etc. | The Company will retain your information until the Company’s objectives are achieved in order to fulfill the contract and comply with the law. | Electronic |
| Security – CCTV | CCTV images of customers, staff, and visitors | Not more than 30 days | Electronic |
| Operations | Service operation logs, records related to internal operations and standard practices | Not more than 5 years | Electronic / Paper |
| Customers | Personal data such as name, address, national ID/passport, purchase history, credit card details, and contact information | 10 years after the latest purchase | Electronic / Paper |
| Suppliers / Vendors | Personal data such as name, address, ID card, tax details, and business documents | 10 years after contract termination | Electronic / Paper |
| Customer Service | Personal data such as name, address, contact details, complaints, service history | 5 years | Electronic / Paper |
6.2 Employees of Textile Gallery Co., Ltd. who handle personal data and/or sensitive personal data are fully trained and made aware of the specific retention periods that apply to each type of data. They are responsible for ensuring that such data is retained only for the designated retention period.
6.3 The retention and storage of records are subject to regular audits carried out under the guidance of management, to ensure that this Privacy Policy regarding data retention and protection remains effective and compliant with legal, regulatory, and contractual requirements. The results of such audits are also recorded and kept.
6.4 Where permitted, Textile Gallery Co., Ltd. will delete personal data and/or sensitive personal data upon request by the data subject. Information on how data subjects may exercise their right to request deletion is provided in Section 9 of this Privacy Policy.
6.5 The retention and deletion of personal data and/or sensitive personal data shall be carried out in accordance with the Company’s Data Retention and Deletion Policy.
7. Data Security
The Company recognizes the importance of keeping your personal data secure. We are committed to protecting your information by implementing appropriate security measures that maintain the confidentiality of your personal data and prevent unauthorized or unlawful loss, access, destruction, use, alteration, or disclosure.
We regularly review how personal data is collected, stored, and processed, and ensure that both technical and physical security measures are in place. These measures are carried out in accordance with the Company’s policies and practices on information security to safeguard your personal data at all times.
8. Cookies and How We Use Them
When you visit our website, certain information is automatically collected from you through the use of cookies.
What are cookies?
Cookies are small pieces of data or text files that are placed on your computer when you visit a website. They are used to store or track information about how you use the website and help us analyze trends, manage our website, monitor user activity, and remember your preferences.
Some cookies are strictly necessary—without them, parts of the website may not function properly. Other cookies allow us to improve your browsing experience, personalize content to your needs, and make your interaction with the website more convenient. For example, cookies can remember your username (in a secure way) and your language preferences.
Managing cookies
Most internet browsers allow you to decide whether to accept cookies. If you refuse, delete, or block cookies, your user experience may be affected, and some features or sections of the website may not be available.
Third-party cookies
In addition, third parties may place cookies through our website to deliver advertising that matches your interests based on your browsing activity. These third parties may collect your browsing history or other information to understand how you access our website and which pages you visit after leaving our site. Information collected through these automated tools may be linked to personal data you previously provided on our website.
9. Your Rights as a Data Subject
Under applicable laws and subject to certain exceptions, you may have the following rights:
9.1 Right of Access
You have the right to request access to, or a copy of, the personal data we collect, use, or disclose about you. For your privacy and security, we may require proof of identity before providing such information.
9.2 Right to Rectification
You have the right to request correction of your personal data so that it is accurate, current, complete, and not misleading.
9.3 Right to Data Portability
You have the right to request your personal data in a structured, commonly used, and machine-readable format, and to have that data transmitted to another data controller, where (a) the data was provided by you, and (b) the processing is based on your consent or a contract between you and us.
9.4 Right to Object
You have the right to object to the collection, use, or disclosure of your personal data, such as objecting to direct marketing.
9.5 Right to Restrict Processing
You have the right to request that we restrict the use of your personal data in certain circumstances.
9.6 Right to Withdraw Consent
Where you have given consent for the collection, use, or disclosure of your personal data, you have the right to withdraw your consent at any time.
9.7 Right to Erasure
You have the right to request that we delete, destroy, or anonymize your personal data that we collect, use, or disclose, except where we are required to retain such data to comply with legal obligations, establish legal claims, exercise rights, or defend legal claims.
9.8 Right to Lodge a Complaint
You have the right to lodge a complaint with the relevant supervisory authority if you believe that our collection, use, or disclosure of your personal data is unlawful or not in compliance with applicable data protection laws.
10. Contact Us
If you wish to exercise your rights relating to your personal data, or if you have any questions regarding your personal data under this Privacy Policy, please contact us or our Data Protection Officer at:
Textile Gallery Co., Ltd.
Data Protection Officer
77/191-192 Sinsathorn Tower, 42nd Floor, Krungthonburi Road,
Khlong Ton Sai, Khlong San,
Bangkok 10600, Thailand
Phone : +66 (0)2-440-0955
Email(Legal Department) : dpo@pasaya.com