Last updated: June 19, 2026
This Privacy Policy explains how ArtisanThai.com collects, processes, stores, and protects your personal data when you visit our website, make a purchase, or communicate with us. It is designed to comply with UK GDPR and the Data Protection Act 2018.
1. Data Controller
THAITEAS LTD is the data controller responsible for your personal data.
- Company Number: 16870792
- Registered Office: 9 Bourne Road, Bexley, England, DA5 1LW
- Email: service@artisanthai.com
- Information Commissioner's Office (ICO) Registration: Pending
2. Personal Data We Collect & Lawful Bases
We collect and process personal data only when we have a lawful basis to do so under the UK GDPR.
| Purpose of Processing | Categories of Data | Lawful Basis for Processing |
|---|---|---|
| Order Fulfilment: Processing payments, arranging shipping, and sending order updates. | Name, email address, phone number, shipping address, billing address, order details. | Performance of a Contract (processing is necessary to complete your order). |
| Customer Support: Responding to enquiries, resolving issues, and answering questions. | Name, email address, message history, communication preferences. | Legitimate Interests (to provide effective customer service). |
| Marketing: Sending newsletters, product updates, and promotional offers (via Omnisend). | Name, email address, marketing consent preferences. | Consent (you must opt-in to receive marketing communications). |
| Website Optimization: Analyzing usage patterns and ensuring secure website operation. | IP address, browser type, device information, cookie identifiers. | Legitimate Interests (to run and secure our site) and Consent (for non-essential cookies). |
3. Data Retention Periods
We keep your personal data only for as long as necessary to fulfil the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements.
- Order Records & Financial Transactions: Retained for 6 years from the end of the financial year in which the transaction occurred, to comply with UK tax laws and Companies Act requirements.
- Customer Support Enquiries: Retained for 2 years from the date of the last communication, to ensure continuity of service and resolve any follow-up questions.
- Marketing Subscriptions: Retained until you withdraw your consent (unsubscribe). If you unsubscribe, we retain your email address on a suppression list indefinitely to ensure we do not send you further marketing.
- Cookies & Analytics Logs: IP and analytics data are retained for up to 14 months before automatic deletion.
4. Your Rights (UK GDPR)
Under the UK GDPR, you have the following rights in relation to your personal data:
- Right of Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can ask us to correct inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten"): You can request that we delete your personal data under certain conditions.
- Right to Restrict or Object to Processing: You can object to us processing your data (e.g. for direct marketing) or ask us to restrict how we use it.
- Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
- Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.
To exercise any of these rights, please contact us at service@artisanthai.com.
5. How to Complain
If you have any concerns about our use of your personal data, you can make a complaint to us at service@artisanthai.com.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.
- ICO Website: https://ico.org.uk
- ICO Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF