Privacy Policy

Wisutwood Co., Ltd. (“the Company”, “we”) respects your privacy. This policy explains how we collect, use, disclose and protect personal data when you use wisutwood.com, submit a form, request a quotation, or chat with us via Facebook Messenger on the WisutWood Page, our LINE Official Account, WhatsApp or the chat on our website, in line with Thailand’s Personal Data Protection Act B.E. 2562 (PDPA).

1. Information we collect

Contact / quotation form data: name, phone number, province, type of work, and any details or files you attach.
Online price estimate data: the items, sizes, wood species and finishes you select.
Photos of furniture or woodwork you send us for a price estimate (web chat, LINE, WhatsApp, Messenger, Instagram or the “price from a photo” form) together with the sizes and details you give — the original photo is kept only for our team to work out the piece and is never public.
A resized copy of that photo (with all embedded file metadata such as GPS coordinates removed) and the 3D model picture our system generates may be shown as an example in the gallery on our website, never with your name, phone number, LINE ID or the channel you contacted us on — you can untick this when you submit, and ask us to remove it at any time.
Facebook Messenger messages and Page comments: message content, time, your Facebook display name and your Page-scoped ID (PSID — an ID Meta issues for our Page only, not your personal Facebook ID).
Messages you send to our LINE Official Account: message content, time, your LINE display name and the user ID LINE issues for our account only.
Messages you send to our WhatsApp Business account: message content, time, the profile name you set in WhatsApp and your phone number (WhatsApp uses the phone number as the user ID, so we receive it with your message), plus the delivery/read status of the replies we send.
Customer care records: the status of your request, notes of calls/messages our staff exchanged with you, quotes, purchases and your marketing consent (if given).
Website chat (Nong Ngueak) messages: message content, time and a random, anonymous chat ID (kept in your browser’s sessionStorage and cleared when you close the tab).
Technical visit data: IP address, browser and operating-system type/version, device type (mobile/tablet/desktop), and traffic source (e.g. Google, Facebook, Instagram, TikTok, campaign/UTM links, and the search term if the source provides it).
Ad click identifiers (e.g. Facebook/Instagram fbclid, Google gclid, TikTok ttclid) and Meta Pixel cookies (_fbp, _fbc), used to measure and improve ad performance.
A visitor cookie (ww_vid), not tied to your identity, stored in your browser for about 2 years to recognise returning visitors and combine visit statistics from the same device.
Website usage statistics: pages opened, time spent reading each page, scroll depth, and the page where you opened the chat — used to analyse and improve our website and marketing.

We do not ask for sensitive data (such as religion, health or biometrics); please do not send it in chat.

2. How we use your information

To answer questions, contact you back, estimate prices, issue quotations, and build and deliver your order.
To run “Nong Ngueak”, our AI chat assistant on Messenger, Instagram, LINE, WhatsApp and the website, which answers general questions 24/7 and hands over to our staff when needed.
To analyse conversation topics and needs so we can improve our answers, product information and service.
To analyse website usage and how customers find us (including linking your visit, chat and quote request) so we can improve our content, search visibility and service.
To keep our services secure and prevent spam and abuse (forms may use Cloudflare Turnstile to check you are not a bot).
To send news, new projects and special offers only if you ticked the consent box — you can opt out at any time by telling us.
Measure and improve Facebook/Instagram ad performance via the Meta Pixel and Conversions API — we send web event data (e.g. page views, price-estimate requests, quote requests, closed deals) together with technical identifiers (_fbp/_fbc cookies, IP, browser) and one-way hashed contact data (a hash of phone/email that Meta uses only to match users and cannot reverse) to Meta, to measure conversions and help the ad system find customers similar to real ones.
To comply with the law, such as tax and accounting obligations.

Legal basis: steps taken at your request before entering a contract / performance of a contract, the company's legitimate interests (including analytics to improve our services), your consent for advertising/measurement cookies and marketing messages, and legal obligations. We do not use your data for automated decisions that produce legal effects on you.

3. AI processing by third-party providers

When you chat with Nong Ngueak, your message and part of the recent conversation history are sent to the Google Gemini API (Google LLC) to generate a reply.
If the primary service is unavailable, the same content is sent to a fallback model via OpenRouter (OpenRouter, Inc.) so we can still reply.
Only what is needed to reply is sent. Providers process it under their API terms, and it may be processed on servers outside Thailand.
AI replies are labelled “(AI)” and may contain mistakes; binding prices and terms are only confirmed by our staff. Staff can read conversations and take over at any time.
If you do not want AI to process your messages, please call us instead and tell our staff you do not want AI to read your messages.

4. Disclosure

We do not sell, rent or trade your personal data.
We disclose only what is necessary to service providers acting on our behalf: Meta Platforms (Facebook/Instagram/Messenger — including the Meta Pixel and Conversions API for measurement and advertising), the AI providers in section 3, cloud and file-storage providers, messaging providers (e.g. LINE, and WhatsApp which is a Meta service), and the carriers that deliver your order.
Web event data and one-way hashed contact data may be sent to Meta and processed on servers outside Thailand, for ad measurement and improvement.
We disclose data to authorities when required by law, or to protect the Company’s legal rights.

5. Data retention

Chat messages (Messenger / website chat) and enquiry/contact details: kept only as long as needed to provide our services, look after our customers and pursue the Company’s legitimate business interests (for example, recalling the designs, sizes and prices we discussed when you contact us again). We review them periodically and delete them once they are no longer needed.
Customer order data, quotations and accounting/tax records: kept for the service and warranty period and no longer than the law requires (typically 5–10 years).
Technical data and system logs: kept only as long as needed for security and troubleshooting, and deleted or rotated out on a regular cycle.

When the data is no longer needed, or when you ask us to delete it, we delete it or make it anonymous (unless the law requires us to keep it).

6. Your rights

Access your data and obtain a copy.
Correct inaccurate or outdated data.
Request deletion, restriction of use, or object to processing.
Withdraw consent (without affecting earlier processing).
Data portability.
Lodge a complaint with Thailand’s Personal Data Protection Committee (PDPC).

Use the contact details in section 12 to exercise your rights. We respond within 30 days.

7. Requesting data deletion

You can ask us to delete your Messenger / website chat messages and any other personal data at any time. The full steps and channels are on our data deletion instructions page.

How to request data deletion →

8. Cookies

Essential cookies: session and anti-forgery (CSRF) cookies, which also remember your chosen language.
Visitor-statistics cookie: ww_vid (about 2 years) to recognise returning visitors and combine visit statistics.
Meta Pixel advertising cookies: _fbp and _fbc, to measure and improve Facebook/Instagram ad performance.
The website chat (Nong Ngueak) uses your browser's sessionStorage, cleared when you close the tab.
You can set your browser to refuse or delete cookies at any time (some forms may not work), and adjust ad settings in your Facebook/Instagram account settings.

9. Children under 18

Our services are intended for adults and businesses. We do not knowingly collect data from anyone under 18. If we learn that we have done so without parental consent, we will delete it promptly. Parents or guardians can request deletion as described in section 7.

10. Security

We use encrypted connections (HTTPS), limit access to staff who need it, and keep system keys and tokens separate from data. No system is 100% secure; if a breach poses a risk to you, we will notify as required by law.

11. Changes to this policy

We may update this policy from time to time. The latest version is always on this page with its update date, and we will post a notice on the website for significant changes.

12. Data controller and contact

Data controller: Wisutwood Co., Ltd.
Address: 18/16 Moo 1, Khun Thale Subdistrict, Mueang Surat Thani District, Surat Thani 84100, Thailand

LINE: @utt5170y
Facebook Messenger: Message the WisutWood Facebook Page
Phone: 062-905-5562
Email: privacy [at] wisutwood.com

Last updated: 30 October 2026