Policies

Privacy policy

Last updated: 5 October 2026

1. Who is responsible for your data

The controller of your personal data is Icebrook Co., Ltd., trading as Thai Herb House, 99/47 Moo 13, Nong Prue, Bang Lamung, Chonburi 20150, Thailand, company registration no. 0205552005579. Contact for all privacy questions: info@thaiherbhouse.com. This policy follows the EU General Data Protection Regulation (GDPR) and the Thai Personal Data Protection Act B.E. 2562 (2019) (PDPA).

2. What data we collect

  • Order data: name, delivery and billing address, e-mail address, phone number (if you give it), products ordered, order value.
  • Payment data: processed by our payment providers. We receive only confirmation of payment and limited details (for example the last digits of the card), not your full card number.
  • Communication: messages you send us by e-mail or contact form.
  • Account data (if you create an account): e-mail, password (encrypted), order history.
  • Technical data: IP address, browser and device type, pages visited, referring site, collected through cookies and similar technologies.
  • Newsletter data: e-mail address and consent, if you sign up.
  • Discount data: discount codes used with your order (including welcome codes and codes from our business partners) and the discounts applied.

3. Why we use your data and on what legal basis

  • To process and deliver your order, handle returns and customer service - performance of the contract (GDPR Art. 6(1)(b)).
  • To manage your customer account and apply discount codes - performance of the contract (Art. 6(1)(b)). To send you a welcome code and marketing e-mails when you sign up for our newsletter - your consent (Art. 6(1)(a)).
  • To comply with accounting, tax and consumer law - legal obligation (Art. 6(1)(c)).
  • To prevent fraud, keep the website secure and improve our shop - our legitimate interests (Art. 6(1)(f)).
  • To send marketing e-mails and use marketing and analytics cookies - your consent (Art. 6(1)(a)). You can withdraw consent at any time.

4. Who receives your data

We share data only where needed: with Shopify (our store platform), payment providers, shipping and logistics companies and customs authorities (your name, address, phone number and the contents and value of the parcel are shown on the customs declaration, as required by law), our e-mail and IT service providers, accounting and legal advisers, and, only if you consent to cookies, analytics and advertising providers (for example Google or Meta). These providers may process data only on our instructions or under their own privacy terms. We do not sell your personal data.

Partner codes: if you use a discount code from one of our business partners, we record the code with your order so that we can report the sales made with that code to the partner. We give the partner only totals (for example the number of orders and the sales value), not your name, address or other personal details.

5. Transfers outside your country

We are based in Thailand and ship from Thailand, so your order data is processed in Thailand; our service providers may be located in the EU, the USA, Canada and other countries. Where required by law, we use appropriate safeguards for such transfers, for example standard contractual clauses.

6. How long we keep your data

We keep order data for as long as required by applicable accounting and tax law. Data for customer service is kept as long as needed to handle your request and any claims. Newsletter data is kept until you unsubscribe. Cookie data is kept for the periods stated by the respective cookie.

7. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to receive your data in a portable format, and to withdraw consent at any time. To use your rights, write to info@thaiherbhouse.com. You also have the right to complain to your local data protection authority (in Thailand: the Personal Data Protection Committee).

8. Cookies

We use cookies and similar technologies. Necessary cookies make the shop work (shopping cart, checkout, security) and cannot be switched off. With your consent we also use analytics cookies (to understand how the shop is used) and marketing cookies (to show relevant advertising). When you first visit our website you can accept or reject non-necessary cookies in the cookie banner. You can change your choice at any time using the privacy settings link in the footer, and you can delete cookies in your browser settings.

9. Security

We use technical and organisational measures to protect your data, including encrypted connections (HTTPS). No online transmission is completely secure, but we work to keep your data safe.

10. Children

Our shop is intended for adults. We do not knowingly collect data from persons under 18.

11. Changes

We may update this policy. The current version is always available on this page, with the date of the last update.

12. Contact

Icebrook Co., Ltd., 99/47 Moo 13, Nong Prue, Bang Lamung, Chonburi 20150, Thailand, e-mail info@thaiherbhouse.com.