Privacy Policy

• Account data — name, email, encrypted password, profile photo (if you upload one)
• Order data — recipient name, phone number, delivery address, the items ordered, and any proof of payment you upload
• Tax invoice data — only when you request a tax invoice
• Messages — what you write to shops and to the AI assistant in our system
• Usage data — pages viewed and how often an item has been opened, counted through a random id stored in a cookie. It is not tied to your IP address.

• Creating and maintaining your account
• Processing orders, delivery, paperwork and after-sales service
• Telling you about order status and answering your questions
• Preventing fraud, investigating disputes, and keeping the system secure
• Improving the service by looking at usage in aggregate (not at individuals)

We process data on the basis of performance of a contract (completing your order), legitimate interest (security and fraud prevention), legal obligation (tax records), and consent where consent must be asked for specifically.

• The shop you ordered from — receives your name, phone number, delivery address and the items, in order to deliver to you
• Delivery carriers — receive only what is needed to deliver
• Service providers — such as our database, email and AI assistant providers, which process data only on our instructions
• Government authorities — where we are legally required to disclose

We do not sell your personal data to third parties.

Account data is kept while your account remains active. When you delete your account, access is closed immediately.

Personal data inside orders (recipient name, shipping address, phone number, contact email) is kept for a further 5 years from the order date — the period Thai accounting and tax law requires sellers to retain commercial records. After that period, this personal data is deleted automatically.

What remains after deletion is the order number, amount, item list and date: accounting figures that can no longer identify you.

Payment slips and evidence photos are kept for the lifetime of the related order. If you want your data removed sooner, please contact us and we will comply as far as our legal obligations allow.

Under the PDPA you have the following rights, and can exercise them by contacting us through the channels at the end of this page.

• Access your data and request a copy
• Have your data corrected and kept up to date
• Have your data erased or destroyed
• Ask us to suspend use of your data temporarily
• Object to certain processing
• Ask for your data to be transferred to another data controller
• Withdraw consent you previously gave
• Lodge a complaint with the Personal Data Protection Committee

You can delete your account yourself from the account settings page. Once you confirm, your name, email address, phone number, delivery addresses, cart and chat messages with shops are removed immediately and cannot be restored.

Your order history and any reviews you wrote stay in the system but are no longer linked to your identity, because shops are required to keep them for accounting and tax purposes. They are retained and deleted on the timetable described in section 5.

The full steps are on our account deletion page at store.camera/account-deletion

We use only the cookies needed for the site to work. Each one is listed in our Cookie Policy.

Data is transmitted over encrypted HTTPS, passwords are stored using one-way hashing, and back-office access is restricted to authorised people only. No system is one hundred percent secure, however — if you notice anything unusual about your account, please tell us immediately.

Email [email protected] · other channels are on our Contact page