PRIVACY NOTICE
Privacy notice
Version of 11 November 2026
1. Who collects your data
The website superray.co and the LINE Official Account @superray ("SUPER RAY", "we") are run by Surapat Tangsawaddumrong, who is the data controller under Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA").
Address: 14/1 Soi Sathon 2, Si Lom, Bang Rak, Bangkok 10500, Thailand
Privacy contact: LINE @superray (https://lin.ee/r6TLF3G). Please start your message with "Personal data".
2. What we collect
What you give us when you book: the recipient's name, phone number, delivery address (house line, subdistrict, district, province, postcode), any note, and a map location if you choose to drop a pin; and the items and amounts in the booking.
From LINE, when you sign in with LINE: your LINE user ID and LINE display name. We never receive your LINE password.
Payment details: the amount, date, time and reference our team records from the slip you send in LINE. A slip may show the payer's account name and part of the account number. We do not collect card details or banking passwords.
Messages you send us in LINE, including attached images and files.
When you use the website: the cookies and data the site needs to work and, only if you agree, how you use the site: pages viewed, clicks, recordings of on-screen activity (what you type is masked), device and browser type, and IP address (see section 9).
We do not ask for sensitive personal data under Section 26 of the PDPA (such as health, religion or biometrics). Please do not send it to us.
3. Why we use it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Taking your booking, confirming payment, delivering, updating you and contacting you about it | Performance of a contract (Section 24(3)) |
| After-sales service, warranty and product registration | Performance of a contract (Section 24(3)) |
| Signing you in, remembering your last address for next time, keeping the site secure and preventing fraud or duplicate bookings | Legitimate interest (Section 24(5)) |
| Accounting, tax, and complying with orders of authorities or courts | Legal obligation (Section 24(6)) |
| Usage statistics to improve the site (analytics cookies) | Consent (Section 19) |
| News, promotions and new products in LINE | Consent (Section 19), only if you tick the box |
4. If you do not give us the data
Without a name, phone number and delivery address we cannot take a booking or deliver. The map pin, analytics cookies and promotions are optional: you can say no and still use the site and book.
5. Who receives your data
We do not sell your personal data. We share only what is needed with:
- the SUPER RAY team handling bookings and delivery, including new-booking alerts in the team's internal LINE group;
- LY Corporation (LINE), for LINE sign-in and booking messages;
- our hosting and database providers (SV Cloud and Cloudflare);
- PostHog Inc., for usage statistics, only if you accept analytics cookies;
- Google (Google Maps), only if you open the map to drop a pin;
- delivery companies, who receive the name, phone, address and pin (if any) to deliver;
- authorities, courts or others with legal power, when the law requires it, and our legal or accounting advisers as needed.
These providers process data under their own terms of service and privacy policies.
6. Transfers outside Thailand
Some providers may store or process data on servers outside Thailand, such as PostHog (United States) and the global networks of Cloudflare and LINE. We transfer data abroad only as needed to fulfil your booking (Section 28(3)) or, for analytics cookies, with your consent (Section 28(2)), and we use providers with internationally recognised data protection measures.
7. How long we keep it
- Bookings, customer, address and payment records: until the product warranty ends, plus 2 years, for warranty and legal claims. A cancelled booking with no payment: no more than 2 years from when it was made.
- Accounting and tax records: as long as the law requires, which may be longer.
- Consent to promotions: until you withdraw it.
- Your cookie choice: kept in your browser for 12 months; we keep a record of consents given or withdrawn as evidence.
- Analytics data in PostHog: for PostHog's retention period.
After that we delete, destroy or anonymise the data, unless it is needed to establish, exercise or defend legal claims.
8. Your rights
Under the PDPA you may ask to access and get a copy of your data, to receive or transfer it, to object to processing, to have it deleted or destroyed, to restrict its use, and to correct it; and you may withdraw consent at any time (this does not affect what was lawfully done before).
Contact us in LINE @superray. We may ask you to confirm who you are, and we reply within 30 days of receiving the request. Some requests may be refused where the law allows, for example when we must keep data to comply with the law; we will tell you why.
If you believe we have not complied with the law, you may complain to the Personal Data Protection Committee (PDPC): www.pdpc.or.th.
9. Cookies and similar technology
| Type | What it does | Consent needed |
|---|---|---|
| Strictly necessary | Sign-in cookies (sr_line, 24 hours; sr_admin, staff only), your language, a booking form in progress, and your cookie choice | No: the site cannot work without them |
| Analytics | PostHog (ph_* cookies): visits, clicks and recordings of on-screen activity (typing masked); and a random browser id (sr-visitor) to count people viewing a product | Yes: they start only after you choose "Accept" |
Change your mind any time in cookie settings, or clear cookies in your browser. Saying no to analytics does not affect the site.
10. Security
We use appropriate security measures, such as encrypted connections (HTTPS), access limited to the team members who need it, and passwords on our back office. No system is completely secure. If a personal data breach occurs, we notify the PDPC within 72 hours where the law requires, and the people affected when the risk to them is high.
11. Minors, other services, and changes
If you are under 20, consent (such as to analytics cookies or promotions) also needs the consent of your parent or guardian.
LINE and Google Maps are third-party services and their use is governed by their own privacy policies.
We may update this notice and will show the latest date on this page. If a change needs new consent, we will ask before it applies.
If the Thai and English versions differ, the Thai version prevails.