Privacy Policy

1. Who is responsible for your data

Axelis Co., Ltd., Bangkok 10030, Thailand, Thailand (“Axelis”, “we”), is the data controller for the personal data processed through this website. Company details are on the Legal Notice. For any privacy question or request, write to [email protected].

This policy is written to comply with Thailand's Personal Data Protection Act B.E. 2562 (PDPA). Where you are located in the United Arab Emirates or the European Economic Area, the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and the GDPR respectively also give you the rights described below.

2. What we collect and why

Activity	Data	Purpose and legal basis	Kept for
Placing an order (with or without an account)	Name, e-mail, phone, delivery address, items bought, amount paid, Stripe payment reference. Never your card number.	To deliver your order, send confirmations and handle returns (performance of a contract); to keep accounting records (legal obligation under Thai accounting and tax law).	5 years after the order (Thai accounting law), then anonymised.
Creating an account	E-mail, password (hashed), name, address, phone, order history, date you accepted the Terms.	To let you track orders and re-use your address (contract).	Until you delete the account; order records as above.
Community Market — posting a dress	Ad title, description, size, condition, asking price, meet-up location (a rink or area, never your home address), photos you upload (we remove hidden location data from photos), your first name shown on the ad.	To publish your ad to buyers in your country (contract).	Ads and photos are deleted 90 days after they expire, are sold or are removed.
Community Market — contacting a seller	Your message and your e-mail address, which is sent to the seller so they can reply to you. When the seller replies, their address becomes visible to you.	To put buyer and seller in touch, at your request (contract).	We do not store messages; the e-mail lives in the seller's mailbox.
Community Market — alerts and reports	Saved search criteria; reports you file about an ad (reason, comment).	To e-mail you matching ads (at your request); to moderate the board (legitimate interest in a safe marketplace).	Alerts until you delete them; reports 1 year after resolution.
Contact form and e-mails	Your e-mail, subject, message, optional order number.	To answer you (legitimate interest / contract).	Up to 2 years.
Security and abuse prevention	IP address, browser type, timestamps, rate-limiting counters, Cloudflare Turnstile anti-bot results.	To protect the site and other users (legitimate interest).	Server logs up to 90 days; rate-limit counters a few hours.

3. Who receives your data

Stripe, Inc. (United States) — payment processing. Stripe is an independent controller for card data; see Stripe's privacy policy.
Couriers (for example Aramex, DHL, FedEx, EMS) — name, address and phone number, to deliver your parcel.
Resend, Inc. (United States) — sends our e-mails.
Cloudflare, Inc. (global) — content delivery, security filtering, anti-bot checks and image storage (R2).
Our accounting firm and the Thai Revenue Department — transaction records, as required by law.
Other Community Market users — the content of your ad and, when you contact a seller, your e-mail address (see above).

We do not sell personal data and we do not use it for third-party advertising.

4. International transfers

Our servers are in Thailand. The service providers above process data in the United States and other countries. Such transfers are necessary to perform your contract with us (payment, e-mail delivery) and are covered by the providers' contractual data protection commitments. You can ask us for details at [email protected].

5. Cookies and local storage

We set only strictly necessary cookies: user_session (keeps you signed in, 30 days) and, for staff, admin_session. Your shopping cart is stored in your browser's local storage and never leaves your device until you check out. We do not use advertising or analytics cookies, so no cookie banner is shown. If that changes, we will ask for your consent first.

6. Your rights

You can, at any time:

access the personal data we hold about you and receive a copy;
correct inaccurate data (your address and name can be edited in My Account);
delete your account — we will erase your profile, ads, alerts and reports and anonymise your order history (amounts are kept for accounting, your identity is removed);
object to, or ask us to restrict, processing based on our legitimate interests;
withdraw consent where processing is based on consent (this does not affect what was done before);
stop alert e-mails using the link in every alert or from My Classifieds.

Write to [email protected]; we answer within 30 days. If you are unhappy with our answer you may complain to the Personal Data Protection Committee of Thailand (PDPC), to the UAE Data Office, or to your local supervisory authority in the EEA.

7. Children

Our services are for adults. We do not knowingly collect data from anyone under 18. Community Market users must not upload photos showing children's faces or other identifying details; please photograph the dress on a hanger or mannequin.

8. Security

Connections are encrypted (HTTPS), passwords are stored hashed, card data never touches our servers, and access to order data is restricted to staff who need it. If a data breach were to put your rights at risk, we would notify the PDPC within 72 hours and inform you without undue delay.

9. Changes

We will post any changes here with a new “last updated” date and, for material changes, notify account holders by e-mail.

1. Who is responsible for your data

2. What we collect and why

Activity	Data	Purpose and legal basis	Kept for
Placing an order (with or without an account)	Name, e-mail, phone, delivery address, items bought, amount paid, Stripe payment reference. Never your card number.	To deliver your order, send confirmations and handle returns (performance of a contract); to keep accounting records (legal obligation under Thai accounting and tax law).	5 years after the order (Thai accounting law), then anonymised.
Creating an account	E-mail, password (hashed), name, address, phone, order history, date you accepted the Terms.	To let you track orders and re-use your address (contract).	Until you delete the account; order records as above.
Community Market — posting a dress	Ad title, description, size, condition, asking price, meet-up location (a rink or area, never your home address), photos you upload (we remove hidden location data from photos), your first name shown on the ad.	To publish your ad to buyers in your country (contract).	Ads and photos are deleted 90 days after they expire, are sold or are removed.
Community Market — contacting a seller	Your message and your e-mail address, which is sent to the seller so they can reply to you. When the seller replies, their address becomes visible to you.	To put buyer and seller in touch, at your request (contract).	We do not store messages; the e-mail lives in the seller's mailbox.
Community Market — alerts and reports	Saved search criteria; reports you file about an ad (reason, comment).	To e-mail you matching ads (at your request); to moderate the board (legitimate interest in a safe marketplace).	Alerts until you delete them; reports 1 year after resolution.
Contact form and e-mails	Your e-mail, subject, message, optional order number.	To answer you (legitimate interest / contract).	Up to 2 years.
Security and abuse prevention	IP address, browser type, timestamps, rate-limiting counters, Cloudflare Turnstile anti-bot results.	To protect the site and other users (legitimate interest).	Server logs up to 90 days; rate-limit counters a few hours.

3. Who receives your data

Stripe, Inc. (United States) — payment processing. Stripe is an independent controller for card data; see Stripe's privacy policy.

Couriers (for example Aramex, DHL, FedEx, EMS) — name, address and phone number, to deliver your parcel.

Resend, Inc. (United States) — sends our e-mails.

Cloudflare, Inc. (global) — content delivery, security filtering, anti-bot checks and image storage (R2).

Our accounting firm and the Thai Revenue Department — transaction records, as required by law.

Other Community Market users — the content of your ad and, when you contact a seller, your e-mail address (see above).

We do not sell personal data and we do not use it for third-party advertising.

4. International transfers

5. Cookies and local storage

6. Your rights

You can, at any time:

access the personal data we hold about you and receive a copy;

correct inaccurate data (your address and name can be edited in My Account);

delete your account — we will erase your profile, ads, alerts and reports and anonymise your order history (amounts are kept for accounting, your identity is removed);

object to, or ask us to restrict, processing based on our legitimate interests;

withdraw consent where processing is based on consent (this does not affect what was done before);

stop alert e-mails using the link in every alert or from My Classifieds.