PRIVACY POLICY

Last updated: 6 September 2026

This Privacy Policy explains how LAKARA CO., LTD. (“Lakara”, “we”, “us” or “our”) collects, uses, stores and shares personal data when you visit lakara.shop, create an account, join our membership programme, place an order, subscribe to communications, contact us, request a private order or use another Lakara service.

We process personal data in accordance with applicable law, including the Thailand Personal Data Protection Act B.E. 2562 (2019) (“PDPA”).

1. WHO IS RESPONSIBLE FOR YOUR DATA?

LAKARA CO., LTD.
Company Registration No. 0205569041441
29/1117 Moo 12, Nong Prue, Bang Lamung, Chon Buri 20150, Thailand
Email: info@lakara.shop

2. PERSONAL DATA WE MAY COLLECT

  • Identity and contact details, including name, email address, telephone number, billing and delivery addresses.
  • Account and membership information, including username, encrypted password credentials, membership number, preferences and date of birth where supplied for membership administration or benefits.
  • Order and transaction information, including products, selected variations and sizes, order value, payment status, delivery details, returns and customer-service history.
  • Payment-related information supplied to the payment provider selected at checkout. Lakara does not need to store complete card details when payment is processed by an independent payment provider.
  • Delivery and customs information reasonably required by couriers, postal operators, fulfilment partners or customs authorities.
  • Technical and usage information, including IP address, device and browser information, pages viewed, referring pages, approximate location, cookie identifiers, error logs and security events.
  • Marketing information, including subscription status, campaign engagement and communication preferences.
  • Communications and content you send to us, including enquiries, reviews, photographs, private-order instructions and product-assessment requests.
  • Salon, appointment or other service information where you choose to use those services.

3. HOW WE COLLECT DATA

We collect data directly from you, automatically through the website and cookies, and from service providers involved in payments, delivery, fraud prevention, website hosting, analytics, marketing or customer support. We may also receive updated delivery or transaction information from those providers.

4. WHY WE USE PERSONAL DATA

  • To create and administer accounts, memberships and member benefits.
  • To process payments, fulfil orders, arrange delivery, provide tracking and handle cancellations, returns, refunds and product assessments.
  • To respond to enquiries, private-order requests and customer-service communications.
  • To operate, secure, troubleshoot and improve our website, services and customer experience.
  • To prevent fraud, misuse, unauthorised transactions and other security incidents.
  • To send transactional messages about an account, order, payment, delivery or requested service.
  • To send newsletters or promotional communications where you have chosen to receive them, and to record or honour an unsubscribe request.
  • To measure website and campaign performance and personalise content where permitted by your cookie choices and applicable law.
  • To comply with accounting, tax, customs, consumer-protection, law-enforcement and other legal obligations, and to establish or defend legal claims.

5. LEGAL BASES

Depending on the activity and applicable law, we rely on performance of a contract, steps requested before entering a contract, compliance with a legal obligation, our legitimate interests, consent, or another lawful basis. Where processing is based on consent, you may withdraw it at any time without affecting earlier lawful processing. Transactional order messages are not marketing communications and may still be necessary to fulfil your order.

6. SERVICE PROVIDERS AND OTHER RECIPIENTS

We may share only the data reasonably necessary with providers in the following categories, where that provider or function is enabled:

  • E-commerce, website hosting, content delivery, security, backup and technical-support providers.
  • Payment gateways, banks, card networks, fraud-prevention and accounting providers.
  • Couriers, postal operators, fulfilment providers and customs authorities.
  • Email, newsletter, customer-relationship and customer-support providers.
  • Analytics, advertising, social-media and content-embedding providers, subject to applicable consent requirements.
  • Professional advisers, insurers, auditors, regulators, courts or public authorities where required or permitted by law.

Service providers may process data only for their authorised purposes and under their own legal obligations. We do not sell personal data for money. We will update this Policy when a material change to our providers or processing requires it.

7. INTERNATIONAL DATA TRANSFERS

Some providers may process data outside Thailand. Where required, we use appropriate contractual, organisational or legal safeguards and limit transferred data to what is reasonably necessary for the relevant service.

8. DATA RETENTION

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including fulfilment of orders, membership administration, warranty or dispute handling, security, accounting, tax and other legal requirements. Retention periods vary by record type. Data may be deleted or anonymised when it is no longer required, unless continued retention is permitted or required by law.

9. COOKIES AND SIMILAR TECHNOLOGIES

We use cookies and similar technologies for essential website functions and, where enabled and permitted, preferences, analytics, advertising and embedded services. Details and choices are explained in our Cookie Policy. Non-essential cookies should be controlled through the available consent settings where required.

10. MARKETING

Marketing subscription is optional. You may unsubscribe at any time using the link in a marketing email or the available account preference. Unsubscribing from marketing does not stop necessary transactional communications concerning your account, order or requested service.

11. YOUR RIGHTS

Subject to applicable law and any lawful exceptions, you may have the right to request access to or a copy of your personal data, correction, deletion, restriction, objection, portability, withdrawal of consent, or information about processing. You may also have the right to complain to the competent data-protection authority. To exercise a right, email info@lakara.shop. We may need to verify your identity before acting on a request.

12. SECURITY

We use reasonable technical and organisational measures intended to protect personal data. No internet transmission or storage system is completely secure, and you are responsible for keeping your account credentials confidential and notifying us of suspected unauthorised access.

13. CHILDREN AND LEGAL CAPACITY

Our online store is intended for customers who have legal capacity to enter into the relevant transaction. Where a person is below the age at which independent consent or contracting is permitted, a parent or legal guardian may be required to act or consent as required by law.

14. THIRD-PARTY LINKS AND SERVICES

Our website may link to or embed services operated by third parties. Their privacy practices are governed by their own notices. Please review those notices before providing data directly to them.

15. CHANGES TO THIS POLICY

We may update this Policy when our services, providers or legal obligations change. The current version and update date will be published on this page. Where required, we will provide additional notice or request renewed consent.

16. CONTACT

Questions or privacy requests may be sent to info@lakara.shop.