Privacy policy
Luck Yourself Co., Ltd. (registration no. 0105563040339), operator of the Nicky Pimpz online store ("we"), respects your personal data. This policy explains what we collect, how we use it and how we protect it, in line with Thailand's Personal Data Protection Act B.E. 2562 (PDPA).
1. Data we collect
- When you order — name, phone number, delivery address, email (optional), items ordered and payment method
- Payment proof — bank transfer slips you upload
- When you sign in with Google — your Google account name, email and profile picture
- When you chat with us — phone number, name (optional), your messages and photos, and the page you were on
- Technical data — your IP address when ordering, and data used to prevent abuse
- On your device — a sign-in cookie and browser storage (localStorage) for your cart, language and chat connection
This website does not use advertising or third-party tracking cookies.
2. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Processing orders, verifying payment, delivery and status updates | Contract |
| Answering questions and support via chat | Contract / legitimate interest |
| Preventing fraud, spam and abuse | Legitimate interest |
| Accounting, tax and other legally required records | Legal obligation |
| News and promotions | Consent (only if you opt in) |
3. Sharing
We never sell your personal data. We share only what is necessary with:
- Couriers (e.g. Kerry Express, Flash Express, J&T Express, Thailand Post) — name, phone and address to deliver your order
- Our team — order and chat notifications via Telegram so we can reply quickly
- Service providers — cloud hosting, database and sign-in providers (e.g. MongoDB Atlas, Cloudflare, Google) processing data on our instructions
- Authorities — where required by law or a lawful order
Some providers may store data on servers outside Thailand; we only use providers with adequate data protection as required by the PDPA.
4. Retention
- Orders and payment records — for the period required by accounting and tax law (at least 5 years)
- Account data and chat history — while you use the service, or until you ask us to delete it
- Abuse-prevention data — kept briefly and deleted automatically
5. Your rights
You may request access to and a copy of your data, correction, deletion or anonymisation, restriction, objection to processing and data portability, and you may withdraw consent at any time. You may also complain to the Personal Data Protection Committee (PDPC) of Thailand.
6. Security
The site is served over HTTPS, payment slips are stored separately in private storage accessible only to administrators, and access to personal data is limited to staff who need it.
7. Minors
Our products are intended for adults (20 years or older). We do not knowingly collect data from minors.
8. Contact
To exercise your rights or ask about your data, contact Luck Yourself Co., Ltd. via the chat on this website or the contact details in the site footer. We respond within 30 days.
9. Changes
We may update this policy from time to time; the latest version is always on this page.
Effective 25 October 2026