Version 2026-09-27 · Applies to buyers who choose delivery to Thailand.
1. Data controller
GreenLoop Co., Ltd. (주식회사 그린루프), 4F, 222 Ojeong-ro, Bucheon-si, Gyeonggi-do, Republic of Korea — business registration 823-86-03248. Contact: greenloop@greenloop.co.kr.
Because GreenLoop offers goods to buyers in Thailand, the Personal Data Protection Act B.E. 2562 (2019) (PDPA) applies to that processing (Section 5).
2. Personal data we collect
- Delivery details: recipient name, phone number, postal address, postcode, delivery note.
- Contact email for order notifications.
- Screenshots of live broadcasts you upload to place an order, and the item details read from them.
- Payment result from our payment provider (we never receive your full card number).
- Language and country you selected.
3. Purposes and lawful basis
- To take, ship and support your order — contract (Section 24(3)).
- To send order notifications by email — contract.
- To keep accounting and tax records — legal obligation (Section 24(6)).
- To produce country-level sales statistics with no buyer identity — legitimate interest (Section 24(5)).
We do not use your data for marketing and do not sell it.
4. Recipients
- Toss Payments (Korea) — payment processing.
- Cloudflare R2 — storage of uploaded screenshots.
- Resend — delivery of notification emails.
- The international courier for your parcel — name, phone and address only.
5. Cross-border transfer
Your data is sent to and processed in the Republic of Korea. We transfer it because it is necessary to perform our contract with you (Section 28(3)), and we protect it with encryption and access control equivalent to Korean personal information law.
6. Retention
- Order and delivery details: 5 years after the order.
- Notification email: until you order again with domestic delivery or ask us to delete it, and at most 5 years.
- Screenshots: kept with the order record (5 years).
7. Your rights
You may request access, a copy, correction, deletion, restriction, portability, and object to processing, and withdraw consent at any time, by writing to greenloop@greenloop.co.kr. We answer within 30 days. You may also complain to the Personal Data Protection Committee of Thailand (www.pdpc.or.th).
Personal data is stored encrypted (AES-256-GCM) and access is limited to GreenLoop staff who handle orders.