PRIVACY · PDPA

Privacy & cookies

Last updated: 13 September 2026

This notice explains what personal data stashbkk.co collects, why, and your rights under Thailand's Personal Data Protection Act B.E. 2562 (PDPA). The short version: we collect very little. There are no accounts, no online orders and no delivery — every purchase happens in person at a store.

Who is responsible

Stash BKK Co., Ltd., Bangkok, is the data controller for this website. Contact hello@stashbkk.cofor anything in this notice.

What we collect and why

• Age and cookie choice. When you answer the 20+ prompt, your choice is saved in your own browser (local storage) for 12 months so you are not asked on every visit. It is never sent to us.
• Site analytics — only with your consent. If you accept cookies, Google Tag Manager loads Google Analytics 4, which records pages viewed, approximate location (Google truncates IP addresses), device and browser type, and how you arrived. We use it to see which guides actually help visitors. If you choose "essential only", no analytics cookies are set and Analytics receives no identifier.
• Job applications. Your name, phone or LINE, optional email and CV link, and the message you write. Used only for recruitment, stored in a private spreadsheet, and kept for 12 months unless you ask us to delete it sooner. Your IP address is not stored with the application.
• Hosting and security logs. Our hosting provider keeps standard server logs (IP address, user agent, timestamp) for a short period to keep the site running and to detect abuse.
• Services you choose to open. Links to LINE, Instagram, Facebook, X and Google Maps take you to those providers, whose own privacy policies apply from that point.

Legal bases

Consent, for analytics cookies — which you can withdraw at any time. Steps taken at your request before a contract, and our legitimate interest, for recruitment. Legitimate interest, for security logs. The 20+ prompt reflects the legal age for cannabis and kratom sales in Thailand.

Cookies and local storage

• stash_consent — local storage, 12 months, essential. Your age confirmation and cookie choice.
• _ga, _ga_* — cookies set by Google Analytics through Google Tag Manager, up to 24 months, analytics. Set only after you accept.

We set no advertising cookies, and no social-network cookies unless you click through to those networks.

Change or withdraw your choice

Withdrawing is as easy as accepting. Press the button below to clear your saved choice and see the prompt again on the next page load. Clearing this site's data in your browser settings does the same.

Reset my cookie choice

Your rights under the PDPA

You can ask to access or receive a copy of your personal data, correct it, delete it, restrict or object to its use, receive it in a portable format, and withdraw consent you have given. You can also complain to the Office of the Personal Data Protection Committee (PDPC). Emailhello@stashbkk.co; we respond within 30 days and do not charge for reasonable requests.

Where data is processed

Google services process analytics and recruitment data on servers that may be outside Thailand. Those transfers rely on Google's standard contractual safeguards.

Under 20

This website and our stores are for adults aged 20 and over. We do not knowingly collect personal data from anyone younger.

Changes

Updates are posted on this page with a new date at the top.