Privacy Policy

This service is operated by Thaibettafish Co., Ltd., registered in Thailand at 27/1 Moo 6, Nong Hong Subdistrict, Phan Thong District, Chon Buri, tax ID 0205566059005 (“we”, “us”). We are the data controller for the personal data described in this policy. Contact: info@siamtranship.com.

What you give us when you book:

• Your name, email, and phone, WhatsApp or LINE
• Your delivery address in the USA
• The name and contact details of your seller in Thailand
• What you are shipping, from the booking form

We never see or store card numbers. Payment is handled entirely by PayPal or Tazapay.

Collected automatically:

• Your IP address and browser type, recorded when you accept our terms at checkout, as evidence of that acceptance
• Aggregate page-view counts through Vercel Analytics, which uses no cookies and builds no profile of you

If you write to us through the contact form or sign up for updates, we also hold what you sent and your email address.

• To carry out your booking — arranging the shipment, contacting you about it, and delivering it. Basis: performance of our contract with you (PDPA s.24(3)).
• Export, import and customs paperwork; accounting and tax records. Basis: legal obligation (s.24(6)).
• Keeping a record of what you accepted — the time, your IP address, your browser and the version of the policies — so the agreement can be shown if it is ever disputed. Basis: legitimate interest (s.24(5)).
• Protecting the site and its admin system from abuse. Basis: legitimate interest.
• Marketing email, only if you sign up for it yourself. Basis: your consent (s.19), which you can withdraw at any time from the link in every email.

• Airlines, freight and delivery companies that carry the shipment
• Customs and other authorities, where the law requires it
• PayPal and Tazapay, to process payment
• Your seller in Thailand — the order reference, what is being shipped, the shipment date and the destination state. Not your name, address, email or phone.
• Service providers who run the site for us: Supabase (database), Vercel (hosting), Resend (email) and Google (address suggestions — the address you type is sent to Google Places to suggest matches)

We never sell your data or share it for advertising.

Your data is stored and processed on servers in the United States: Supabase (database, AWS us-east-1), Vercel (hosting, Virginia), Resend (email), Google (address suggestions), and our payment providers.

The United States has not been recognised by Thailand’s Personal Data Protection Committee as providing an adequate level of protection. We rely on PDPA s.28(3): the transfer is necessary to perform our contract with you. The service is shipping fish from Thailand to an address in the United States, which cannot be done unless the information travels with them.

• Booking records and their supporting documents: 5 years from the booking, as accounting and tax law requires
• The record of your acceptance of our terms: as long as the booking it belongs to
• Newsletter email address: until you unsubscribe
• Contact-form messages: in our mailbox for as long as the conversation needs them
• Security logs of sign-in attempts and request counts, which can include an IP address: about one day

You can ask to access your data or receive a copy, correct it, delete it, restrict or object to how it is used, have it transferred to you, or withdraw any consent you gave. Write to info@siamtranship.com — we respond within 30 days.

When we delete your data we remove it from the systems we use and from our backups, except what accounting and tax law requires us to keep. If anything has to stay, we will tell you what and why.

If you are not satisfied with how we handle your request, you can complain to Thailand’s Office of the Personal Data Protection Committee (PDPC).

This site sets one cookie: the sign-in session for our own staff, which visitors never receive. Visitor statistics come from Vercel Analytics, which uses no cookies. That is why there is no cookie banner — there is nothing to ask permission for.

Staff passwords are stored with a salted, memory-hard hash. The site connects to its database with only the permissions it needs. Order history cannot be edited after it is written. Sign-in attempts are rate limited, every connection is encrypted, and card details never reach us.

If a breach of personal data occurs, we will notify the PDPC within 72 hours, and tell those affected where it is likely to put their rights at high risk.

The date at the top of this page shows when it last changed. The version of our terms you accepted is recorded with your booking, so it is always possible to tell which wording you agreed to.

Questions about this policy or your data: info@siamtranship.com