Privacy Policy

1. Who we are

Friday, in partnership with Aera ("Friday", "we", "us") runs fridaybkk.com and checkout.fridaybkk.com from Bangkok, Thailand, and is the data controller for the personal data described here. We follow Thailand’s Personal Data Protection Act B.E. 2562 (2019) ("PDPA").

2. What we collect

• Order details: name, email, phone number, delivery address and the products you order.
• Payment: the bank-transfer slip you upload. We do not collect card details.
• Messages you send us on Telegram, WhatsApp, LINE, email or the contact form, with your name or handle on that app.
• Basic technical data: device and browser type, IP address, pages visited, and where you came from (for example an ad or link), collected through cookies and similar technology.

3. Why we use it

• To process, verify, pack and deliver your order (performance of a contract).
• To answer your questions and give customer support (performance of a contract / legitimate interests).
• To keep accounting and tax records (legal obligation).
• To prevent fraud and keep the site secure, and to understand which pages and ads work (legitimate interests).

We do not sell your personal data.

4. Who we share it with

Only service providers that help us run the shop, under contract and only for these purposes: website hosting, our checkout database and email delivery for sign-in codes; our customer-service inbox; courier companies that deliver your order; and AI service providers that help us draft chat replies. Some of these providers store data outside Thailand; where they do, we rely on the safeguards the PDPA allows. We may also disclose data where the law requires it.

5. Automated chat replies

Some replies in our chat channels are written or assisted by automated software. Your messages are processed to generate those replies. A member of our team can take over at any time; just ask.

6. How long we keep it

Order and payment records: as long as Thai accounting and tax law requires. Chat messages and contact-form messages: up to 2 years after your last message, unless you ask us to delete them sooner. Technical and analytics data: up to 2 years.

7. Cookies

We use cookies to keep you signed in, remember your cart and age confirmation, and measure site traffic and ad performance. You can block or delete cookies in your browser; some features may then stop working.

8. Your rights

Under the PDPA you can ask to access or get a copy of your data, correct it, delete it, restrict or object to its use, move it to another provider, and withdraw consent where we rely on consent. You can also complain to Thailand’s Personal Data Protection Committee. To use any of these rights, contact us below; we reply within 30 days.

9. Security

We use reasonable technical and organisational measures to protect your data. No system is completely secure, so we cannot guarantee absolute security.

10. Age

Our site and products are for people aged 20 and over. We do not knowingly collect data from anyone younger.

11. Changes

We may update this policy. The date at the top shows the latest version.

12. Contact

Message us on Telegram or WhatsApp, or use our contact form.