⚡ PDPA Notice

Personal Data Protection Notice

Under Thailand's Personal Data Protection Act B.E. 2562 (2019)

Quick summary: This page tells you specifically how Flippie complies with Thailand's Personal Data Protection Act (PDPA). For our full Privacy Policy, see flippie.co/privacy.

Data Controller

The Data Controller for personal data collected via flippie.co is:

Greenstead Co., Ltd.
Bangkok, Thailand
Email: flippie.orders@gmail.com

Data Protection Contact

For PDPA-related requests, contact us at flippie.orders@gmail.com with the subject line "PDPA Request — [your order reference]".

Categories of personal data we process

Identity data: first and last name
Contact data: email address, phone number, shipping address
Order data: the video file you upload, your custom Page 1 message, payment slip image, order reference
Technical data: IP address, browser type, page visits (via Google Analytics)

Legal bases for processing

We process your data on the following legal bases under PDPA section 24:

Contract performance (s.24(3)) — to fulfil your flipbook order
Legitimate interest (s.24(5)) — to operate the website, prevent fraud, respond to support requests
Legal obligation (s.24(6)) — to keep tax records as required by Thai law
Consent (s.19) — for any opt-in marketing (currently not used)

Your rights as a data subject

Under the PDPA you have the following rights. To exercise any of them, email flippie.orders@gmail.com.

Right to access (s.30) Request a copy of the personal data we hold about you.

Right to rectification (s.36) Ask us to correct inaccurate or incomplete data.

Right to erasure (s.33) Ask us to delete your data, subject to legal retention requirements.

Right to restrict processing (s.34) Ask us to pause certain uses of your data.

Right to data portability (s.31) Receive your personal data in a portable, machine-readable format.

Right to object (s.32) Object to processing for direct marketing or legitimate interest.

Right to withdraw consent (s.19) Where we process your data based on consent, withdraw it at any time.

Right to lodge a complaint File a complaint with the Personal Data Protection Committee (PDPC) at pdpc.or.th if you believe your rights are not respected.

Response time

We respond to PDPA requests within 30 days. We may extend this by up to 60 additional days for complex requests, and we will explain the reason if we do.

Data retention

We keep different categories of data for different periods:

Order records, customer details, payment slips: 3 years (Thai Revenue Code requirement)
Uploaded videos and print PDFs: 90 days after delivery
Website analytics: 14 months (Google default)

Data breach notification

If we experience a data breach that may risk your rights and freedoms, we will notify you and the Personal Data Protection Committee (PDPC) within 72 hours of becoming aware, as required by PDPA section 37(4).

International transfers

Some of our processors (Google, EmailJS) operate outside Thailand. We rely on standard contractual safeguards to ensure your data is protected when transferred internationally, in line with PDPA section 28.

About the PDPC The Personal Data Protection Committee is Thailand's data protection authority. If you believe Flippie has handled your data unlawfully, you have the right to file a complaint at pdpc.or.th. We always prefer to resolve issues directly first — please email us before escalating.

Updates to this notice

We may update this PDPA notice as the law evolves or our practices change. Check the date at the top of the page for the latest version.