Legal
Privacy policy
How we handle your personal data under Thailand's Personal Data Protection Act (PDPA).
Last updated:
Amrita Peptides is the data controller for the personal data described in this notice. This notice explains how we collect, use, disclose, retain, and protect personal data when you visit the website, contact us, or place an order.
How this static site works
This is a static website with no customer accounts and no website checkout form. Your cart, and
your confirmation that you are 18 or older and understand our research-use-only terms, are
stored in your browser's localStorage and remain on your device unless you clear it.
Cart details reach us only if you choose to send the generated message through one of the available
contact channels.
Data we collect
- Information you provide through messaging or email, such as your name, phone number, username, email address, and message history.
- Order, payment, and delivery information, such as products and options, amount paid, payment reference, recipient name, phone number, delivery address, and courier tracking details.
- Support and claim information, including order correspondence, photographs, and claim or unboxing videos you submit.
- Limited technical and security information processed when the site is requested, such as IP address, browser or device data, request time, and security logs.
Why we process data
- To respond to pre-order inquiries and fulfil a confirmed contract, including confirming stock and payment, dispatching an order, and managing delivery or a claim.
- To meet tax, accounting, consumer-protection, and other legal obligations.
- To provide support, secure our communications, prevent fraud or misuse, and establish, exercise, or defend legal claims where those legitimate interests are not overridden by your rights.
- For another specific purpose where you have consented and consent is the applicable basis. You may withdraw that consent at any time.
Sharing and overseas processing
We do not sell personal data. Depending on how you use the site and place an order, personal data may be processed by or disclosed to Cloudflare for website hosting and security; the messaging or email service you select; payment providers or financial institutions; couriers; and professional advisers, regulators, courts, or authorities where necessary. These recipients receive only the data reasonably needed for their role.
Some providers may process data outside Thailand. Where cross-border transfer requirements apply, we will use an available lawful transfer mechanism and appropriate safeguards as required by applicable law. Your chosen messaging or payment provider also handles data under its own privacy terms.
Retention
- Unsuccessful inquiries that do not result in an order are retained for up to 12 months after the last communication.
- Completed order, payment, delivery, support, and claim records are retained for up to five years after completion.
We keep data longer only where a legal requirement applies or while an active dispute or legal claim requires it. We then delete or securely anonymize data when it is no longer needed.
Your rights under the PDPA
Subject to the conditions and exceptions in applicable law, you may request access to or a copy of your personal data, correction of inaccurate data, deletion, restriction of processing, data portability, or object to processing. Where processing relies on consent, you may withdraw that consent without affecting processing already carried out lawfully. You may also complain to Thailand's Personal Data Protection Committee (PDPC).
To exercise a right, contact us. We may need to verify your identity and may retain information where the law requires or permits it.
Cookies and browser storage
We do not use advertising cookies, and we do not track you across other websites. The site uses browser storage for features such as your cart and to remember that you confirmed our age and research-use terms, so we do not ask again on every visit. Hosting and security providers may use strictly necessary cookies or similar technical measures to deliver and protect the site.
We use Umami, a privacy-friendly analytics tool, to count visits and understand which pages and products are useful. It sets no cookies, does not follow you across other websites, and does not collect personal data or a persistent identifier for you. It records aggregate information such as page visited, referring site, country, and device type, and whether actions such as adding an item to a cart or opening an order channel took place. We cannot use this data to identify you.
Contact the data controller
You can contact Amrita Peptides about this notice or your personal data through: