Privacy Policy

Last updated: July 21, 2026

This Privacy Policy explains how Peptheos collects, uses, shares, and protects your personal data, and your rights under the Personal Data Protection Act of Thailand, the PDPA. Peptheos operates from Bangkok, Thailand.

We collect the data you provide and the data needed to process your order: your name, contact details, delivery address, email, phone where given, order details, payment confirmation details, and any communications you send us. When you create an account, we hold your account details and order history. We never collect or store card data, because we do not accept card payments at all.

We collect data directly from you when you place an order, create an account, contact us, or subscribe to updates, and automatically through cookies and similar technologies as described in our Cookie Policy.

We use your data to process, confirm, and deliver orders, to provide customer support, to maintain your account, to meet legal and tax obligations, to prevent fraud and misuse, and, where you have consented, to send updates. Our legal bases under the PDPA include performance of a contract with you, compliance with legal obligations, our legitimate interests in operating and securing the business, and your consent where required, for example for marketing.

We do not use a payment processor and no payment gateway receives your data from us. Every payment method on this site is a transfer you make directly to an account we hold: a Thai bank account through PromptPay, a Wise account, a USDT wallet on the TRON network, or cash on delivery. Your bank, Wise, or the TRON network carries that transfer under its own terms. We never see or store card numbers or banking credentials. If you choose to give us a transaction hash for a USDT payment, it is stored with your order; a transaction hash is a public blockchain reference, not a credential, and it does not give anyone access to your wallet.

We share data only where necessary: with couriers to deliver your order, with service providers who support the site under confidentiality obligations, and where required by law or to protect our legal rights. We share nothing with a payment provider, because payment is not taken through one. We do not sell your personal data.

Some of our payment and service providers may process data outside Thailand. Where data is transferred internationally, we take reasonable steps to ensure it is protected in accordance with the PDPA.

We keep order, payment, and tax records for as long as Thai law requires. We keep other personal data only as long as needed for the purposes described, after which we delete or anonymise it.

Subject to the PDPA and its exceptions, you have the right to access your data, to request correction, to request deletion or destruction, to restrict or object to certain processing, to request data portability, and to withdraw consent where processing is based on consent. To exercise any of these rights, contact us using the details below. You also have the right to lodge a complaint with the Personal Data Protection Committee.

We take reasonable technical and organisational measures to protect your data against loss, misuse, and unauthorised access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We use cookies and similar technologies as described in our Cookie Policy.

The site and products are not directed to children. We do not knowingly collect data from anyone under the age required by law to consent.

We may update this policy from time to time. The current version is always the one published on this site, with the last updated date shown above.

For any privacy question or to exercise your rights, contact hello@peptheos.com, or LINE peptheos.