Legal
Privacy Policy
Last updated: 23 June 2026
This policy explains how To Be Kind Co., Ltd. (“Roongfah”, “we”) collects, uses, shares, and protects your personal data when you visit roongfah.com or buy from us. We follow Thailand’s Personal Data Protection Act B.E. 2562 (PDPA).
Who we are
To Be Kind Co., Ltd., 95/5 Moo 12 Boromrajchonnee Rd., Sala Thammasop, Thawi Watthana, Bangkok 10170, Thailand. For any privacy request, contact roongfah.info@gmail.com or +66 85 548 8466.
What we collect
- Order details: name, shipping address, email, phone number.
- Payment: processed securely by Stripe — we do not store your full card number.
- Messages you send us (email, LINE, contact forms).
- Technical & usage data via cookies (see “Cookies” below) — only with your consent.
Why we use it (legal basis)
- To process and deliver your orders and provide customer support (contractual necessity).
- To send service messages about your order (contractual necessity).
- To send marketing or run analytics/advertising — only with your consent, which you can withdraw any time.
- To meet legal, tax, and accounting obligations.
Cookies
We use necessary cookies to run the site, cart, and checkout. Analytics and marketing cookies are used only if you opt in via our cookie banner. You can change or withdraw your choices any time using the “Cookie settings” link in the footer.
Who we share it with
We share data only with service providers that help us run the business: payment (Stripe), shipping carriers (e.g. Thailand Post, Flash, Kerry), email/messaging tools, and our website hosting. We do not sell your personal data.
How long we keep it
We keep order records as required by Thai tax and accounting law, and other data only as long as needed for the purpose it was collected.
Your rights under the PDPA
You may request to access, correct, delete, or port your data, object to or restrict certain processing, and withdraw consent. To exercise any right, email roongfah.info@gmail.com. You also have the right to complain to Thailand’s Personal Data Protection Committee (PDPC).
Security
We use reasonable technical and organisational measures to protect your data, including secure payment processing and encrypted connections.
Changes
We may update this policy. The “Last updated” date above shows the latest version.