Privacy Policy

This Privacy Policy explains how SIAM ART MARBLE CO., LTD., trading as LAVAREDO (“we”, “us”, “our”), collects, uses, discloses, and protects your personal data when you visit our online store and websites, place an order, or otherwise interact with us. We handle personal data in accordance with the Personal Data Protection Act B.E. 2562 (2019) of Thailand (“PDPA”).

By using our website and services, you acknowledge that you have read and understood this Privacy Policy.

1. Who we are (Data Controller)

2. What personal data we collect

Depending on how you interact with us, we may collect:

• Identity and contact data — name, billing and delivery address, email address, telephone number.
• Order and account data — products ordered, order history, account login details, communications with our team.
• Project and installation data — site address, measurements, design preferences, and other details you provide for a custom quotation or installation.
• Payment data — we use a third-party payment processor (Omise / Opn Payments) to handle card and online payments. Your full card number is entered directly with the processor and is not stored on our servers. We may retain limited transaction records (e.g. amount, date, last four digits, payment status).
• Technical and usage data — IP address, browser type, device information, and cookies (see Section 8).

3. How and why we use your data

We use your personal data for the following purposes and on the following legal bases under the PDPA:

• To process and fulfil your orders, including manufacturing, delivery, and installation — necessary for performance of a contract with you.
• To communicate with you about quotations, orders, scheduling, warranty, and support — contractual necessity / legitimate interest.
• To process payments and prevent fraud — contractual necessity / legal obligation.
• To comply with legal and tax obligations (e.g. issuing tax invoices, accounting records) — legal obligation.
• To improve our website and services and for analytics — legitimate interest.
• To send marketing communications about products and promotions, where you have given consent — consent (you may withdraw at any time).

4. Disclosure of your data

We do not sell your personal data. We may share it with:

• Payment processors (Omise / Opn Payments) to complete transactions.
• Logistics and delivery partners and our installation teams to deliver and install your order.
• IT and platform service providers (e.g. our website / e-commerce platform host) who process data on our behalf under confidentiality obligations.
• Government authorities or regulators where required by law.

Where third parties act as our data processors, we require them to protect your data and use it only for the agreed purposes.

5. International data transfers

Some of our service providers may store or process data outside Thailand. Where this occurs, we take reasonable steps to ensure your data receives an adequate standard of protection consistent with the PDPA.

6. Data retention

We retain personal data only for as long as necessary to fulfil the purposes described above, including to satisfy legal, accounting, warranty, or reporting requirements. Order and tax records are generally kept for the period required by Thai law. When no longer required, data is securely deleted or anonymised.

7. Your rights under the PDPA

Subject to the conditions in the PDPA, you have the right to:

• access and obtain a copy of your personal data;
• request correction of inaccurate or incomplete data;
• request deletion or destruction of your data;
• object to or restrict certain processing;
• request data portability;
• withdraw consent at any time (where processing is based on consent); and
• lodge a complaint with the Personal Data Protection Committee (PDPC).

To exercise any of these rights, contact us using the details in Section 1 or Section 10. We may need to verify your identity before responding.

8. Cookies

Our website uses cookies and similar technologies to enable core functionality (such as your shopping cart and login), remember your preferences, and analyse traffic. You can manage or disable cookies through your browser settings, though some features may not work correctly without them.

9. Data security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Payment card data is handled by our PCI-DSS–compliant payment processor and is not stored on our systems.

10. Contact us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact:

11. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with a revised “Last updated” date.