Privacy Policy
Controller, information collected and purposes of use
Unpublished draft | Prepared on 17 October 2026. Includes information that is being verified or has not yet been determined.
1. Controller and contact
The controller of personal information on this website is FREE BIRD CHIANGMAI CO., LTD., a Thai company. We handle information in accordance with Thailand’s Personal Data Protection Act (PDPA) and other applicable laws.
Address: Being verified. Contact for enquiries and exercising your rights: freebirdchiangmai2025@gmail.com.
2. Information we receive
We handle the name, email address, telephone number, message and details of performance, media or product enquiries sent to us through the contact form or by email. Where a transaction occurs, this also includes order details, delivery information, correspondence and other information needed to handle it.
When you use the website or embedded videos, Wix, Google and other providers may handle IP addresses, device and browser information, cookies and access records. Please do not send passwords, verification codes, card numbers, passport details or similar information through forms or email.
3. Purposes of use and legal bases
We use information to answer enquiries; discuss performances, media coverage and use of materials; check stock, delivery and returns; take necessary pre-contractual steps and perform contracts; maintain records; prevent misuse; and address legal obligations and disputes.
Depending on the processing involved, we rely on performance of a contract or pre-contractual steps requested by you, legal obligations, our or third parties’ legitimate interests, or consent where required. Where we rely on legitimate interests, we consider the balance with your rights and interests. If use for another purpose, such as advertising, becomes necessary, we will explain the purpose and legal basis in advance.
If you do not provide the reply details or information needed to answer an enquiry, we may be unable to respond or assist. You do not need to provide more optional information than necessary.
Retention, external services and cookies
4. Retention period
We retain enquiry and order information without setting a retention deadline.
If you wish to check, correct or delete your information, or stop its use, please contact the above contact point. After confirming your identity and request, we will explain how we will respond.
5. Service providers, external services and overseas processing
We use Wix for the website and forms, and Google services for email. These providers process information to the extent necessary for our operations and may store or process it on facilities outside Thailand. Where a transaction actually occurs, we may provide necessary information to delivery companies, relevant contractors, professional advisers or recipients of legally required disclosures.
Where outsourcing or overseas transfers are necessary, we will check appropriate contracts, safeguards and other required legal bases in accordance with applicable law. For details, please see Wix’s Privacy Policy and Google’s Privacy Policy. External providers’ information does not replace our own responsibilities.
6. Cookies and embedded videos
Wix website functions and videos from YouTube or other providers may use cookies and similar technologies. For cookies, analytics and external content requiring consent, we will provide an opportunity to make choices as required by applicable law. You can also manage cookies in your browser, although some functions may then stop working.
After opening an external link, please also check that website’s handling of information.
Your rights and contact
7. Your rights
Subject to the conditions of applicable law, you may request access to or a copy of your information, correction, deletion or anonymisation, restriction of use, objection to processing, data portability, or withdrawal of consent. Withdrawal of consent does not affect processing lawfully carried out before withdrawal. You also have the right to lodge a complaint with Thailand’s Personal Data Protection Committee (PDPC).
To make a request, please contact the above contact point with details of the information and your request. We will verify your identity to the extent necessary and respond in accordance with the law. You do not need to attach identity documents or confidential information unnecessary for verification to your initial message. If we cannot fulfil a request, for example because of a statutory retention requirement, we will explain the reason.
8. Security and minors
We limit access to personal information to what is necessary for our operations and use the administrative functions of our service providers and other measures to prevent unauthorised access, leakage and loss. If a leak or similar incident occurs, we will take the necessary steps under applicable law.
Where a parent’s or guardian’s involvement is required for consent or other procedures concerning a minor, we will act in accordance with applicable law.
9. Revisions
If our handling of information changes, we will update the content and revision date and provide any necessary notices or obtain any necessary consent. This draft was prepared on 17 October 2026. The effective date has not been decided.