Privacy Policy

Last updated: July 21, 2026

This Privacy Policy explains how Peptheos collects, uses, shares, and protects your personal data, and your rights under the Personal Data Protection Act of Thailand, the PDPA. Peptheos operates from Bangkok, Thailand.

We collect the data you provide and the data needed to process your order: your name, contact details, delivery address, email, phone where given, order details, payment confirmation details, and any communications you send us. When you create an account, we hold your account details and order history. Payment card data, where applicable, is handled by our payment providers and is not collected or stored by us.

We collect data directly from you when you place an order, create an account, contact us, or subscribe to updates, and automatically through cookies and similar technologies as described in our Cookie Policy.

We use your data to process, confirm, and deliver orders, to provide customer support, to maintain your account, to meet legal and tax obligations, to prevent fraud and misuse, and, where you have consented, to send updates. Our legal bases under the PDPA include performance of a contract with you, compliance with legal obligations, our legitimate interests in operating and securing the business, and your consent where required, for example for marketing.

Payments are processed by third parties, including NOWPayments for cryptocurrency, Wise for bank transfer, and PromptPay banking rails. These providers process your payment data under their own privacy terms. We receive confirmation of payment, not full payment credentials.

We share data only where necessary: with couriers to deliver your order, with payment providers to process payment, with service providers who support the site under confidentiality obligations, and where required by law or to protect our legal rights. We do not sell your personal data.

Some of our payment and service providers may process data outside Thailand. Where data is transferred internationally, we take reasonable steps to ensure it is protected in accordance with the PDPA.

We keep order, payment, and tax records for as long as Thai law requires. We keep other personal data only as long as needed for the purposes described, after which we delete or anonymise it.

Subject to the PDPA and its exceptions, you have the right to access your data, to request correction, to request deletion or destruction, to restrict or object to certain processing, to request data portability, and to withdraw consent where processing is based on consent. To exercise any of these rights, contact us using the details below. You also have the right to lodge a complaint with the Personal Data Protection Committee.

We take reasonable technical and organisational measures to protect your data against loss, misuse, and unauthorised access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We use cookies and similar technologies as described in our Cookie Policy.

The site and products are not directed to children. We do not knowingly collect data from anyone under the age required by law to consent.

We may update this policy from time to time. The current version is always the one published on this site, with the last updated date shown above.

For any privacy question or to exercise your rights, contact hello@peptheos.com, or LINE peptheos.