Privacy Policy

Wisutwood Co., Ltd. (“the Company”, “we”) respects your privacy. This policy explains how we collect, use, disclose and protect personal data when you use wisutwood.com, submit a form, request a quotation, or chat with us via Facebook Messenger on the WisutWood Page or the chat on our website, in line with Thailand’s Personal Data Protection Act B.E. 2562 (PDPA).

1. Information we collect

Contact / quotation form data: name, phone number, province, type of work, and any details or files you attach.
Online price estimate data: the items, sizes, wood species and finishes you select.
Facebook Messenger messages and Page comments: message content, time, your Facebook display name and your Page-scoped ID (PSID — an ID Meta issues for our Page only, not your personal Facebook ID).
Messages you send to our LINE Official Account: message content, time, your LINE display name and the user ID LINE issues for our account only.
Customer care records: the status of your request, notes of calls/messages our staff exchanged with you, quotes, purchases and your marketing consent (if given).
Website chat (Nong Ngueak) messages: message content, time and a random, anonymous chat ID (kept in your browser’s sessionStorage and cleared when you close the tab).
Technical data: IP address (used for spam prevention and rate limiting), browser type, traffic source (e.g. ad links/UTM) and cookies strictly needed for the site to work.
Website usage statistics: how you reached us (e.g. Google, Facebook, TikTok, campaign/UTM links and the search term when the source passes it on), the pages you open, time spent reading each page, how far you scroll, device type (mobile/desktop) and the page where you opened the chat — tied to that visit's session only, with no IP address stored and no advertising cookies or third-party trackers.

We do not ask for sensitive data (such as religion, health or biometrics); please do not send it in chat.

2. How we use your information

To answer questions, contact you back, estimate prices, issue quotations, and build and deliver your order.
To run “Nong Ngueak”, our AI chat assistant on Messenger and the website, which answers general questions 24/7 and hands over to our staff when needed.
To analyse conversation topics and needs so we can improve our answers, product information and service.
To analyse website usage and how customers find us (including linking your visit, chat and quote request) so we can improve our content, search visibility and service.
To keep our services secure and prevent spam and abuse (forms may use Cloudflare Turnstile to check you are not a bot).
To send news, promotions and special offers only if you ticked the consent box — you can opt out at any time by telling us.
To comply with the law, such as tax and accounting obligations.

Legal bases: steps taken at your request before a contract / performance of a contract, our legitimate interests, and legal obligations. We do not make automated decisions that have legal effects on you.

3. AI processing by third-party providers

When you chat with Nong Ngueak, your message and part of the recent conversation history are sent to the Google Gemini API (Google LLC) to generate a reply.
If the primary service is unavailable, the same content is sent to a fallback model via OpenRouter (OpenRouter, Inc.) so we can still reply.
Only what is needed to reply is sent. Providers process it under their API terms, and it may be processed on servers outside Thailand.
AI replies are labelled “(AI)” and may contain mistakes; binding prices and terms are only confirmed by our staff. Staff can read conversations and take over at any time.
If you do not want AI to process your messages, please contact us by LINE or phone instead.

4. Disclosure

We do not sell, rent or trade your personal data.
We share only what is necessary with providers acting on our behalf: Meta Platforms (Messenger/Facebook), the AI providers in section 3, cloud hosting and file storage providers, messaging providers (such as LINE), and carriers delivering your order.
We disclose data to authorities when required by law, or to protect the Company’s legal rights.

5. Data retention

Chat messages (Messenger / website chat) and enquiry/contact details: kept only as long as needed to provide our services, look after our customers and pursue the Company’s legitimate business interests (for example, recalling the designs, sizes and prices we discussed when you contact us again). We review them periodically and delete them once they are no longer needed.
Customer order data, quotations and accounting/tax records: kept for the service and warranty period and no longer than the law requires (typically 5–10 years).
Technical data and system logs: kept only as long as needed for security and troubleshooting, and deleted or rotated out on a regular cycle.

When the data is no longer needed, or when you ask us to delete it, we delete it or make it anonymous (unless the law requires us to keep it).

6. Your rights

Access your data and obtain a copy.
Correct inaccurate or outdated data.
Request deletion, restriction of use, or object to processing.
Withdraw consent (without affecting earlier processing).
Data portability.
Lodge a complaint with Thailand’s Personal Data Protection Committee (PDPC).

Use the contact details in section 12 to exercise your rights. We respond within 30 days.

7. Requesting data deletion

You can ask us to delete your Messenger / website chat messages and any other personal data at any time. The full steps and channels are on our data deletion instructions page.

How to request data deletion →

8. Cookies

The website uses only strictly necessary cookies: a session cookie and a form-protection (CSRF) cookie, which also remember your chosen language.
The Nong Ngueak chat uses your browser’s sessionStorage, which is cleared when you close the tab.
We do not use advertising or cross-site tracking cookies. You can block cookies in your browser, but some forms may stop working.

9. Children under 18

Our services are intended for adults and businesses. We do not knowingly collect data from anyone under 18. If we learn that we have done so without parental consent, we will delete it promptly. Parents or guardians can request deletion as described in section 7.

10. Security

We use encrypted connections (HTTPS), limit access to staff who need it, and keep system keys and tokens separate from data. No system is 100% secure; if a breach poses a risk to you, we will notify as required by law.

11. Changes to this policy

We may update this policy from time to time. The latest version is always on this page with its update date, and we will post a notice on the website for significant changes.

12. Data controller and contact

Data controller: Wisutwood Co., Ltd.
Address: 18/16 หมู่ที่ 1 ตำบลขุนทะเล อำเภอเมืองสุราษฎร์ธานี จังหวัดสุราษฎร์ธานี 84100

LINE: @utt5170y
Facebook Messenger: Message the WisutWood Facebook Page
Phone: 062-905-5562
Email: privacy@wisutwood.com

Last updated: 17 September 2026