Privacy Policy

Last updated 28 October 2026

This policy explains what personal data Cannaburi collects through cannaburi.com and in our store, why we collect it, and your rights under Thailand’s Personal Data Protection Act B.E. 2562 (2019) (the PDPA).

1. Who we are

The data controller is Cannaburi Co., Ltd. (บริษัท แคนนาบุรี จำกัด), company registration number 0205566011142.

Address: 394/131-132 Moo 9, Pattaya 3rd Road, Nong Prue, Bang Lamung, Chon Buri 20150, Thailand
Email: info@cannaburi.com
Phone: 083 920 1318 (+66 83 920 1318)

2. What we collect and why

Contact form

When you send a message through the form on our Contact page, we collect your first and last name, email address, phone number (if you give it) and your message. We use these to reply to you.

Customer accounts and orders

If you create an account or place an order on our website, we collect your name, email address, phone number, billing and delivery address, order details and payment status. We use these to process your order, issue invoices, manage your account and answer questions about your order. Orders on our website are paid by bank transfer or in cash, so we do not collect or store card details on the website.

In store

When you buy in our store, our point-of-sale system records the order, the items, the amount and the payment method. If you give us your name or phone number, we link it to the order.

Prescriptions

Cannabis flower is supplied only with a prescription or medical certificate. If we arrange a prescription for you in store, the details needed for it, which may include health information, are shared with the telemedicine service or doctor who issues it. We keep the records that our licence and Thai law require.

Cookies and analytics

Our website uses cookies to keep the site working, for example for your basket and login. We also use Google Tag Manager and Google Analytics 4 (through Google Site Kit) to understand how visitors use the site. These collect information such as the pages you view, your approximate location, your device and browser type, and how you arrived at the site. See section 7 for more on cookies.

Emails the website sends

Our website keeps a record of the emails it sends, such as order confirmations and replies to forms, so that we can check they were delivered.

We only collect what we need for these purposes. We do not sell your personal data.

3. Legal basis under the PDPA

  • Contract: to process your orders and manage your account.
  • Legal obligation: to keep the sales, tax and licence records that Thai law requires.
  • Legitimate interests: to answer your messages, keep the website secure, understand how the website is used and keep business records, where this does not override your rights.
  • Consent: where the PDPA requires it, for example for health information or marketing messages. You can withdraw your consent at any time.

4. Who we share it with

We share personal data only with organisations that help us run the website and the business, and only as far as needed:

  • Website hosting: Hostinger, which hosts our website and its content delivery network.
  • Email: Google (Gmail), through which our website sends its emails.
  • Analytics: Google, for Google Tag Manager, Google Analytics 4 and Search Console.
  • Prescriptions: the telemedicine service or doctor who issues a prescription you ask us to arrange.
  • Government authorities: where Thai law requires it.

Some of these providers may store data outside Thailand. Where they do, we rely on the safeguards they provide, as the PDPA requires.

5. How long we keep it

  • Orders, invoices, payment and licence records: for as long as Thai accounting, tax and licensing rules require.
  • Customer accounts: until you ask us to close your account.
  • Contact form messages and the website email log: for as long as we need them to deal with your enquiry or order.
  • Analytics data: for the period set in our Google Analytics account.

When we no longer need personal data, we delete it or make it anonymous.

6. Your rights under the PDPA

You have the right to:

  • ask for access to, or a copy of, your personal data;
  • ask us to correct data that is wrong or incomplete;
  • ask us to delete your data, or to stop using it, in the cases the PDPA allows;
  • object to how we use your data;
  • ask us to send your data to another organisation, where the PDPA allows;
  • withdraw your consent at any time, without affecting what we did before you withdrew it;
  • complain to the Office of the Personal Data Protection Committee (PDPC) if you think we have not handled your data correctly.

To use any of these rights, email info@cannaburi.com. We will reply within 30 days and may need to confirm your identity first. Some data we must keep by law, even if you ask us to delete it.

7. Cookies

Cookies are small files stored in your browser. We use:

  • Essential cookies: needed for the basket, checkout, login and security.
  • Analytics cookies: Google Analytics, to see how the site is used.

You can block or delete cookies in your browser settings, and you can stop Google Analytics from collecting data with Google’s browser add-on at tools.google.com/dlpage/gaoptout. Blocking essential cookies may stop parts of the site from working.

8. Changes to this policy

We may update this policy when our website or services change. The date at the top shows when it was last updated.

9. Contact

Cannaburi Co., Ltd.
394/131-132 Moo 9, Pattaya 3rd Road, Nong Prue, Bang Lamung, Chon Buri 20150, Thailand
Email: info@cannaburi.com
Phone: 083 920 1318 (+66 83 920 1318)