PRIVACY · PDPA

Privacy & cookies

Last updated: 9 October 2026

This notice explains what personal data stashbkk.co collects, why, and your rights under Thailand's Personal Data Protection Act B.E. 2562 (PDPA). The short version: we collect very little. There are no accounts, no online orders and no delivery — every purchase happens in person at a store.

Who is responsible

Stash BKK Co., Ltd., Bangkok, is the data controller for this website. Contact hello@stashbkk.cofor anything in this notice.

What we collect and why

• Cookie choice. If you switch analytics cookies off (or back on) below, that choice and its timestamp are saved in your own browser (local storage) so it is remembered on every visit, with no expiry. Older records may also contain the previous age confirmation, which is no longer used.
• Site analytics. Google Tag Manager and Google Analytics 4 run by default and use analytics cookies to measure visits, pages viewed, approximate location, device and browser type, and how you arrived. We use these measurements only to understand how visitors use the site. You can switch analytics cookies off below at any time; after that, Google may still receive limited cookieless signals, such as page views and your consent state, without reading or writing analytics cookies.
• Job applications. Your name, phone or LINE, optional email and CV link, and the message you write. Used only for recruitment, stored in a private spreadsheet, and kept for 12 months unless you ask us to delete it sooner. Your IP address is not stored with the application.
• Hosting and security logs. Our hosting provider keeps standard server logs (IP address, user agent, timestamp) for a short period to keep the site running and to detect abuse.
• Services you choose to open. Links to LINE, Instagram, Facebook, X and Google Maps take you to those providers, whose own privacy policies apply from that point.

Legal bases

Legitimate interest, for site analytics — with the right to object at any time using the switch below. Steps taken at your request before a contract, and our legitimate interest, for recruitment. Legitimate interest, for security logs.

Cookies and local storage

• stash_consent — local storage, kept until you change it, essential. Your cookie choice and the time it was saved.
• _ga, _ga_* — cookies set by Google Analytics through Google Tag Manager, up to 24 months, analytics. Set by default; removed if you choose "essential only" below.

We set no advertising cookies, and no social-network cookies unless you click through to those networks.

Change or withdraw your choice

Use the choices below. You can return here using the privacy or cookie settings links at the bottom of the site. Visiting this page does not change your current choice. Choose "Essential only" to turn analytics cookies off immediately — this also removes this site's Google Analytics cookies, though limited cookieless signals may still be sent. Choose "Accept analytics" to turn them back on. Your choice applies on every page and does not expire.

Your rights under the PDPA

You can ask to access or receive a copy of your personal data, correct it, delete it, restrict or object to its use, receive it in a portable format, and withdraw consent you have given. You can also complain to the Office of the Personal Data Protection Committee (PDPC). Emailhello@stashbkk.co; we respond within 30 days and do not charge for reasonable requests.

Where data is processed

Google services process analytics and recruitment data on servers that may be outside Thailand. Those transfers rely on Google's standard contractual safeguards.

Under 20

This website and our stores are for adults aged 20 and over. We do not knowingly collect personal data from anyone younger.

Changes

Updates are posted on this page with a new date at the top.