Privacy Notice (PDPA)

Collective Group (Thailand), operator of getpack, is the controller of your personal data. Contact us about personal data through the contact page.

Account data (name, mobile number, email, customer type), tax-invoice details and delivery addresses, order data, payment data (we never store full card numbers; the payment provider processes them), artwork and designs you create, messages you exchange with the team, and site usage data according to your cookie choice.

To perform the contract: taking orders, production, delivery, tax documents and after-sales service. To comply with the law: accounting, tax and record keeping. Legitimate interest: system security, fraud prevention and service improvement. With your consent: news and offers by email, LINE or SMS, and analytics cookies — withdrawable at any time under Account › Privacy.

Only as needed: the partner factory producing your order (recipient name, delivery address, artwork), carriers, payment providers, cloud and messaging providers, and public authorities where the law requires. We do not sell your personal data.

Some service providers may store data outside Thailand. We select providers with adequate safeguards and data-processing agreements as the law requires.

Account data is kept for the life of the account and for a period after closure for claims and disputes. Accounting and tax records are kept for the statutory period. Artwork and designs are kept so you can reorder, until you delete them.

You may access, copy, correct, delete, restrict, object, port and withdraw consent. Exercise them under Account › Privacy or by contacting us, and you may complain to the Personal Data Protection Committee office.

We use encryption in transit, role-based access control and access logging. Staff and partners see only the data their work needs.

We may update this notice. For significant changes we tell you in the system and ask for consent again where the law requires.