Privacy policy
This notice explains what personal data Spinelnook collects through this website, why, and who processes it. We handle personal data in line with Thailand’s Personal Data Protection Act (PDPA) and the laws of the countries our customers live in.
What we collect
- When you send an enquiry: your name, company (if any), country and city, email address, phone number, your budget, the stones you’re interested in, your preferred contact method and your message.
- To confirm you’re genuine: we send one-time codes to your email and phone and record that they were verified. We also record the approximate location your request came from (country and city, worked out from your internet address), the time, and your browser type.
- On your device: your enquiry list, wishlist and comparison list are stored in your browser so they’re there when you come back. We don’t use advertising trackers.
Why we use it
To answer your enquiry, check that requests are genuine before holding one-of-a-kind stones, arrange sales and shipping, and meet legal and accounting obligations. If you tick the box to hear about new stones, we also email you occasionally; you can unsubscribe at any time.
Who processes it
- Resend delivers our emails, including email verification codes.
- Twilio sends phone verification codes by SMS.
- Cloudflare protects our forms from automated abuse and handles our domain email.
- Vercel hosts this website.
- Couriers receive your shipping details to deliver an order.
How long we keep it
Enquiries that don’t lead to a sale are deleted within 24 months. Records of sales are kept for as long as tax and accounting law requires.
Your rights
You can ask to see, correct or delete the personal data we hold about you, or withdraw your consent, by emailing hello@spinelnook.com.