Privacy Policy (PDPA)
Last updated: 27 July 2026
Data controller
CD Ascend Co., Ltd. is the data controller for the Goose Hours store (shop.goosehours.com). You can reach us about your personal data via the Goose Hours LINE Official Account chat.
Information we collect
When you use the in-LINE app (LIFF) or place an order, we collect: (1) your LINE profile — display name, profile picture, and your LINE User ID, verified by LINE; (2) order data — items, quantities, prices, discounts, and any gift-card message; (3) shipping address data — recipient name, phone number, and address (sub-district/district/province/postcode); (4) tax invoice data (only if requested) — tax ID, name/company, address, and branch; and (5) payment status via PromptPay (we never store your bank account or card details ourselves — those are processed directly by the payment gateway).
Purpose of use
We use your data to: fulfil and ship your order; verify your identity via LINE to prevent order fraud; process payment; notify you of order status via LINE messages; issue a tax invoice (on request); provide customer support; and comply with applicable law (e.g. tax law). We do not use your data for third-party marketing, and we never sell your personal data.
Legal basis for processing
We process your data on the basis of: (1) consent you give at checkout; (2) contractual necessity, to fulfil the order you placed with us; and (3) legal obligation, e.g. keeping accounting records as required by the Revenue Code.
Checkout drafts on your device
While you fill in checkout, this browser tab temporarily keeps your contact details, delivery address and optional invoice details for up to 12 hours so they survive a return from another app or an error. The draft is not sent to the shop until you submit your order. Closing the tab removes this session data. The cart remains in this browser until you clear it or complete a purchase.
Retention period
Order and accounting/tax records (e.g. tax invoices) are kept for at least 5 years as required by law (the Revenue Code and Accounting Act). Consent records are kept for as long as your account is active, or until you request deletion. Deletion requests are processed within 30 days, except for data the law requires us to keep (e.g. accounting documents), which is deleted once the legal retention period has elapsed.
Sharing with third parties
We disclose your data, only as necessary, to: (1) Opn Payments (Omise), our PromptPay payment gateway, to process your payment; (2) Oasys (Packhai), our warehouse and fulfilment provider, which receives the recipient name, phone number, shipping address, and order items to pack and ship your order; (3) LINE Corporation, as the platform this app runs inside (LIFF) and through which order-status messages are sent; and (4) government authorities, where required by law or a lawful order. We do not sell or rent your personal data to third parties for marketing purposes.
Cookies
This site uses cookies that are necessary for it to function, plus optional analytics cookies (Google Analytics) that only run after you grant consent. Full details are on the Cookie Policy page.
Your rights as a data subject
Under the Personal Data Protection Act B.E. 2562 (2019), you have the right to: access and request a copy of your data; request correction; request deletion or destruction; request restriction of processing; object to processing; withdraw consent at any time; and request data portability. You can exercise these rights via the "Request data deletion" button on the My Orders page, or by chatting with our admin on LINE. We will respond within 30 days.
Contact us
For any question about your personal data, or to exercise your data-subject rights, please chat with our admin via the Goose Hours LINE Official Account — we're happy to help.