1. Data Controller

Kobka Co., Ltd. ("Kobka", "we") at 353 Moo 7, Khamthalesoo, Nakhon Ratchasima 30280, Thailand. DPO: dpo@kobka.co

2. Data We Collect

• Name, email, phone
• Company name and role
• Shipping/billing address
• Inquiry, quote, order data
• Payment data (via Payment Gateway — we don't store card details)
• IP address, browser, cookies (analytics)

3. Purposes of Processing

• Respond to inquiries and provide quotes
• Process orders and deliveries
• Issue tax invoices (legal requirement)
• After-sales support
• Newsletter (opt-in only)
• Website improvement (analytics)
• Legal compliance (AML, tax)

4. Legal Basis

• Contract — to fulfill orders
• Consent — for marketing and cookies
• Legal obligation — tax, export, AML
• Legitimate interest — fraud prevention, security

5. Data Sharing

We may share with: Payment Gateways (Stripe, PayPal, 2C2P, Omise), Freight Forwarders, Customs Brokers, Thai government agencies (Customs, Revenue, DBD), and cloud providers (Hostinger, Google Workspace).

6. Data Retention

• Inquiry data: 2 years
• Orders + tax invoices: 7 years (Thai tax law)
• Cookies: 12 months
• Newsletter: until unsubscribe

7. Your Rights (PDPA + GDPR)

• Access — request a copy of your data
• Rectification — correct inaccurate data
• Erasure — request deletion (right to be forgotten)
• Object — object to certain processing
• Portability — receive data in a portable format
• Lodge a complaint — with the Thai PDPA Commission

Send requests to dpo@kobka.co — we respond within 30 days.

8. Cookies & Tracking

See Cookies Policy

9. Security

We use industry-standard measures: HTTPS encryption, access control, regular security audits, encrypted storage.

10. Changes

We may update this policy — 30-day advance notice via website + email.

11. Contact

📧 dpo@kobka.co · 📞 +66 95 810 7126