Privacy Policy
Effective 1 January 2026 · Last updated: 2026
Nitecore Thailand Shop, operated by Event Running Co., Ltd. ("we"), respects your privacy. This policy explains how we collect, use, disclose, and protect your personal data in accordance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA).
1. Data Controller
Event Running Co., Ltd.
Address: 70/1 Moo 12, Mae Tho Subdistrict, Mueang Tak District, Tak 63000, Thailand
Tax ID: 0635567000086
Email: admin@nitecorethailandshop.com · Phone: 084-349-4229
2. Data We Collect
- Account: name, email, phone, password (encrypted)
- Shipping: address, province, postal code
- Payment: we do not store card numbers on our servers; payments are processed and stored by Opn Payments (Omise), PCI-DSS Level 1 certified
- Usage: order history, wishlist, reviews, loyalty points
- Social login: name, email, profile picture from Google / Facebook / LINE
- Technical: IP address in security logs
3. Legal Basis for Processing
- Contract: fulfilling orders, delivery, after-sales service
- Consent: marketing/promotional emails (withdrawable anytime)
- Legitimate interest: fraud prevention, system security, service improvement
- Legal obligation: tax invoicing and record retention
4. Purposes
- Process orders, payments, and deliveries
- Manage accounts and customer service
- Send transactional emails (confirmation, shipping, refunds)
- Manage loyalty points and member benefits
- Improve service and website security
5. Disclosure & Sharing
We never sell your data and disclose only as necessary to:
- Opn Payments (Omise) — payment processing
- Couriers (Kerry, Flash, J&T) — delivery
- Email provider — transactional emails
- Government authorities — when legally required
6. International Transfers
Some providers (payment processing, cloud/email) may process or store data on servers outside Thailand. We require them to maintain adequate protection consistent with international standards and the PDPA.
7. Data Retention
- Account data: for the duration of membership, deleted on account closure request
- Order and tax records: at least 5 years as required by tax law
- After the period, data is deleted or anonymized
8. Security
- Passwords hashed with bcrypt (hash + salt)
- All connections over HTTPS/TLS
- JWT authentication with logout blacklist and rate limiting
- No card numbers stored on our servers
9. Your Rights (PDPA)
You may: access/obtain a copy, rectify, erase, restrict, object to processing, request portability, and withdraw consent — by contacting admin@nitecorethailandshop.com. We respond within 30 days.
10. Minors
This site is intended for users aged 20 or older, or minors with guardian consent. If we discover data collected from a minor without valid consent, we will delete it promptly.
11. Cookies & Tracking
We use localStorage for authentication tokens and the cart. We do not use third-party advertising/tracking cookies.
12. Complaints
If you believe our processing is unlawful, you may lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.
13. Policy Changes
We may update this policy from time to time. Changes take effect when posted on the website with a revised date.
14. Contact
Event Running Co., Ltd.
Email: admin@nitecorethailandshop.com · Phone: 084-349-4229 · LINE: @Nitecoreth
