1. Data Controller
SALT.MAGIC CO., LTD.
45/57 Moo 3, Maret
Koh Samui, Suratthani 84310
Thailand
Tax ID: 0845567024315
Email: info@salt-magic.com
Phone: +66 82 602 0486
Website: https://salt-magic.com
Director: Kawin Tanomsat
2. Applicable Law
We process personal data in accordance with the Thai Personal Data Protection Act B.E. 2562 (2019) (“PDPA”). Our company is registered in Thailand and our services are not directed at the European Union market.
3. Personal Data We Collect
Depending on how you use our website, we may process the following categories of personal data:
- Technical access data: IP address, browser type, operating system, referrer URL, time of access
- Contact / inquiry form data: when you submit our contact or partner inquiry form, or contact us via email (name, email address, company, role, content of your message)
- Newsletter data: email address, and optionally first name, if you subscribe to our newsletter — see Section 8
- Cookie and tracking data (see Section 7)
We do not process booking or reservation data, and we do not process payment data — product purchases are fulfilled externally via Lazada (see Section 9).
4. Purposes and Legal Bases under PDPA
5. Server Log Files
When you visit our website, our hosting provider (Vercel Inc.) automatically collects the following data transmitted by your browser:
- Browser type and version
- Operating system
- Referrer URL
- Hostname of the accessing device
- Time of the server request
- IP address
These data are not combined with other data sources and are used to ensure the secure and stable operation of our website.
Retention: typically 7 to 30 days; thereafter deleted or anonymized, unless retention is required for security reasons. Statutory logging requirements under the Thai Computer Crime Act (up to 90 days) remain unaffected.
6. Contact
You can contact us either directly via email at leo@salt-magic.com, or by submitting the contact / partner inquiry form on our website. In both cases, we process the information you provide (name, email address, company, role, content of your message) in order to respond to your inquiry and to handle any follow-up questions.
Email delivery provider: form submissions from our website are transmitted to us via Resend (Resend, Inc., operated out of the United States — https://resend.com). Resend acts as our transactional email service provider and processes form content and email metadata solely for the purpose of delivering the message to us.
- Legal basis: Sec. 24(3) PDPA (pre-contractual / contractual) or Sec. 24(5) PDPA (legitimate interest).
- Retention: until the purpose ceases to apply, at the latest 36 months, unless statutory retention obligations apply.
- Cross-border transfer: data transmitted via the form leaves Thailand and is processed on servers of Resend in the United States. Appropriate safeguards under Sec. 28 PDPA apply (see Section 10).
9. External Purchase Redirects
Product purchases are fulfilled externally via Lazada (www.lazada.co.th). When you click a “Buy” or “Shop” link on our website, you leave our domain and are bound by Lazada's own privacy policy and terms. We do not receive or store your payment data, credit card details or shipping information for Lazada orders.
10. Disclosure to Third Parties and Cross-Border Transfers
We disclose personal data only where legally permitted or required — for example to:
- IT and hosting providers — Vercel Inc. (United States; with Singapore and other global edge locations) provides the hosting infrastructure for our website
- Transactional email / contact-form delivery — Resend, Inc. (United States; https://resend.com) delivers messages you submit via our contact and partner inquiry form to us
- Newsletter platform — Intuit Mailchimp (Intuit Inc., United States; https://mailchimp.com) stores and distributes newsletter subscriber data
- External order fulfilment — Lazada (regional e-commerce platform; you are redirected to their platform to complete purchases)
- Authorities and courts, where legally required
Additional providers will be listed here once they are integrated.
Some of our service providers are located outside Thailand (e.g. in Singapore or the United States). For such cross-border transfers, we ensure appropriate safeguards in accordance with Sec. 28 PDPA — through suitable contractual arrangements, recognized certifications of the recipient, or, where required, your consent.
11. Retention Periods
We retain personal data only for as long as necessary for the purposes described above or as required to comply with applicable statutory retention obligations (e.g. under the Thai Revenue Code and other tax and accounting regulations — typically 5 to 10 years).
12. Your Rights under PDPA
Subject to the applicable legal requirements, you have the following rights:
- Right of access to your personal data held by us (Sec. 30 PDPA)
- Right to data portability (Sec. 31 PDPA)
- Right to object to processing (Sec. 32 PDPA)
- Right to erasure (Sec. 33 PDPA)
- Right to restriction of processing (Sec. 34 PDPA)
- Right to rectification of inaccurate data (Sec. 35, 36 PDPA)
- Right to withdraw consent with effect for the future (Sec. 19 PDPA)
- Right to lodge a complaint with the Thai supervisory authority, the Personal Data Protection Committee (PDPC) — https://www.pdpc.or.th
To exercise your rights, please contact us at: leo@salt-magic.com. We respond to requests without undue delay, generally within 30 days.
13. No Automated Decision-Making
We do not engage in automated decision-making or profiling with legal effect.
14. Data Security
We implement appropriate technical and organizational measures to protect your personal data against loss, misuse and unauthorized access. Data transmission via our website is encrypted using SSL/TLS.
In the event of a reportable personal data breach, we will notify the PDPC in accordance with Sec. 37(4) PDPA within 72 hours of becoming aware of the breach, where required.
15. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy to reflect legal or operational changes — in particular when new services (analytics, email marketing, contact-form backends, embedded maps or videos) are integrated into the website. The version published on our website at the time of your visit applies.
16. Contact
For any questions about data protection or to exercise your rights, please contact:
SALT.MAGIC CO., LTD.
45/57 Moo 3, Maret
Koh Samui, Suratthani 84310
Thailand
Email: info@salt-magic.com