Privacy Policy
Last Updated: December 15, 2025
Welcome to Weedza (hereinafter referred to as “the Site”). To protect your personal data and comply with Thailand’s Personal Data Protection Act (PDPA) and the EU General Data Protection Regulation (GDPR), this policy explains how we collect, process, and protect your personal data and your rights.
1. Controller Identity and Contact Information
The Site is operated by the Weedza management team. For any questions regarding your personal data, please contact us through our official support channels.
2. Scope and Methods of Collection
We collect personal data such as name, email, address, phone number, payment details, IP address, device information, and cookies. Data is collected through member registration, order placement, website interaction, and automated tracking technologies.
3. Purpose and Legal Basis
- Providing & Managing Services: Processing orders and membership management (Contractual necessity).
- Customer Service & Marketing: Responding to inquiries and sending promotional information (Based on consent).
- Legal Compliance: Complying with relevant Thai laws and regulations.
- Service Improvement: Analyzing data to enhance user experience and website security (Legitimate interest).
4. Consent and Withdrawal
Data collection is based on your free, specific, and clear consent. You may withdraw your consent at any time; however, this will not affect the legality of any processing carried out prior to the withdrawal.
5. Cookie and Tracking Technologies
The Site uses cookies to enable essential functions (e.g., login, shopping cart), analyze traffic, and run marketing campaigns.
- Essential Cookies: Necessary for website operation; no consent required.
- Non-essential Cookies: Used for analytics and advertising; require your explicit consent.
You can manage your cookie preferences through the Site settings or your browser options.
6. Data Protection and Retention
We employ encryption and strict access controls to safeguard your data. Data retention is limited to the period required by law or necessary to fulfill the stated purposes, after which data will be deleted or anonymized.
7. Data Subject Rights
Under Thailand’s PDPA and the EU GDPR, you have the right to access, rectify, erase, restrict processing, object, request data portability, and remain free from solely automated decision-making.
8. Data Sharing and Cross-border Transfers
We only share data with partners essential for providing our services (e.g., payment and logistics providers). For cross-border transfers, we ensure adequate protection measures or standard contractual clauses are in place.
9. Policy Updates
Any changes to this Privacy Policy will be posted on the Site. For significant updates, we may notify you via the contact information provided.