Personal Data Protection Policy (PDPA)

KEDEL Jewelry Co., Ltd. (“KEDEL”, “Company”, “we”, “our”, or “us”) recognizes the importance of protecting personal data and is committed to complying with the Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) of Thailand and other applicable laws.

This Personal Data Protection Policy explains how we collect, use, disclose, store, and protect your personal data when you visit our website, purchase our products, contact us, subscribe to our communications, or otherwise interact with our services.

1. Data Controller

KEDEL Jewelry Co., Ltd. acts as the Data Controller for the personal data collected and processed under this Policy.

Contact Information

KEDEL Jewelry Co., Ltd.

Email: contact@thekedel.com

Website: www.thekedel.com

2. Personal Data We Collect

We may collect the following personal data directly from you or through your interactions with our services:

Identity Information

Full name
Date of birth
Nationality (where required)
Government-issued identification details (where legally required)

Contact Information

Email address
Telephone number
Shipping address
Billing address

Account Information

Username and password
Account preferences
Wishlist information

Transaction Information

Purchase history
Order details
Payment information
Refund and return records

Technical Information

IP address
Browser type
Device information
Website usage information
Cookies and tracking data

Marketing Information

Subscription preferences
Survey responses
Participation in promotions and campaigns

3. Purposes of Processing Personal Data

We may collect, use, and disclose personal data for the following purposes:

Processing and fulfilling orders
Delivering products and services
Managing customer accounts
Processing payments and refunds
Providing customer support
Communicating regarding purchases and services
Verifying identity where necessary
Improving website performance and user experience
Conducting analytics and business operations
Preventing fraud and ensuring security
Complying with legal obligations
Sending marketing communications, promotions, and special offers (subject to your consent where required)

4. Legal Bases for Processing

Under the PDPA, we may process personal data based on one or more of the following legal bases:

Contractual Necessity

To fulfill our contractual obligations relating to your purchases and use of our services.

Legal Obligation

To comply with applicable laws, regulations, court orders, and governmental requirements.

Legitimate Interests

For business operations, fraud prevention, network security, customer service improvement, and business development, provided such interests do not override your fundamental rights.

Consent

Where required by law, we will obtain your consent before processing personal data for specific purposes such as marketing communications.

Vital Interests

Where necessary to protect life, health, or safety.

5. Cookies and Similar Technologies

Our website uses cookies and similar technologies to:

Enable website functionality
Improve website performance
Remember user preferences
Analyze traffic and user behavior
Deliver personalized content and advertisements

You may manage cookie preferences through your browser settings. Certain website features may not function properly if cookies are disabled.

6. Disclosure of Personal Data

We may disclose personal data to:

Payment processors
Banks and financial institutions
Shipping and logistics providers
IT service providers
Website hosting providers
Marketing and advertising partners
Professional advisors
Auditors
Government authorities or regulators where legally required

All third parties receiving personal data are required to implement appropriate security measures and process personal data in accordance with applicable laws.

7. International Transfer of Personal Data

In certain circumstances, personal data may be transferred to and processed in countries outside Thailand.

Where such transfers occur, KEDEL Jewelry Co., Ltd. will implement appropriate safeguards and protection measures as required by the PDPA.

8. Data Retention

We retain personal data only for as long as necessary to:

Fulfill the purposes described in this Policy
Comply with legal obligations
Resolve disputes
Enforce contractual agreements

When retention is no longer necessary, personal data will be securely deleted, destroyed, or anonymized.

9. Security Measures

We implement reasonable administrative, technical, and physical safeguards to protect personal data from:

Unauthorized access
Disclosure
Alteration
Loss
Destruction
Misuse

Security measures include access controls, encryption, secure servers, monitoring systems, and staff training where appropriate.

10. Rights of Data Subjects

Under the PDPA, you may have the right to:

Right of Access

Request access to your personal data and obtain a copy.

Right to Data Portability

Request transfer of personal data in a machine-readable format where applicable.

Right to Object

Object to certain processing activities.

Right to Restrict Processing

Request temporary suspension of processing under certain circumstances.

Right to Rectification

Request correction of inaccurate or incomplete personal data.

Right to Erasure

Request deletion, destruction, or anonymization of personal data where permitted by law.

Right to Withdraw Consent

Withdraw consent at any time where processing is based on consent.

Right to Lodge a Complaint

File a complaint with the relevant Thai data protection authority if you believe your rights have been violated.

11. Marketing Communications

Where you have provided consent, we may send promotional materials, newsletters, product updates, and special offers via email, SMS, social media, or other channels.

You may withdraw your consent and unsubscribe at any time by:

Clicking the unsubscribe link in emails
Adjusting account settings
Contacting us directly

12. Children’s Personal Data

Our products and services are not intended for children without the consent of a parent or legal guardian where required by law.

We do not knowingly collect personal data from children in violation of applicable laws.

13. Changes to this Policy

We may update this Personal Data Protection Policy from time to time to reflect changes in our business operations, legal requirements, or data processing practices.

Any updated version will be published on our website and become effective immediately upon publication unless otherwise stated.

14. Contact Us

If you have questions regarding this Policy or wish to exercise your rights under the PDPA, please contact:

KEDEL Jewelry Co., Ltd.

Email: contact@thekedel.com

Website: www.thekedel.com

Effective Date: 01.07.2025

Last Updated: 01.06.2026