PDPA
Privacy policy
Last updated 5 November 2026
This policy explains how Littlemoresalt collects, uses and protects your personal data when you visit littlemoresalt.com, order bread from us or talk to us on LINE. It follows Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA").
Who we are
Littlemoresalt is a home sourdough bakery in Srinakarin–Bangna, Bangkok, run by Roham and Prae. We are the data controller for the personal data described here.
Contact us about privacy on LINE at @littlemoresalt.
What we collect
| Data | Where it comes from |
|---|---|
| LINE user ID, LINE display name and profile picture | LINE, when you sign in with LINE to order |
| Name, phone number, delivery address | You, on the order form |
| Your order: breads, quantities, bake day, pickup or delivery, notes | You, on the order form |
| Allergy or dietary notes you choose to tell us | You, in the order note or on LINE |
| Payment slips and messages you send us | You, in our LINE chat |
We do not collect card details. You pay by bank transfer or PromptPay after we confirm your order.
Why we use it
- To take and deliver your order: confirm it, prepare your bread, arrange pickup or delivery, confirm payment and send you updates on LINE. We need this to fulfil our agreement with you (PDPA Section 24(3)).
- To keep you safe: if you tell us about allergies, we use that only to prepare your order carefully. This is sensitive data, so we only use it because you give it to us for this purpose, with your explicit consent (PDPA Section 26).
- To keep business records that Thai accounting and tax law require (PDPA Section 24(6)).
- To answer your questions when you message us.
We only send you news and offers on LINE if you have added Littlemoresalt as a friend, and you can block or mute us at any time.
Who we share it with
- LINE (LY Corporation), which runs sign-in and our chat.
- Vercel (website hosting) and Neon (our order database), which store data for us under contract and may keep it on servers outside Thailand, such as in Singapore or the United States. They protect it with encryption and access controls.
- Delivery riders, who receive only your name, phone number and address for a delivery.
- Authorities, only when the law requires it.
We never sell your personal data.
How long we keep it
- Order records: up to 5 years, as Thai accounting and tax law may require, then deleted.
- Your LINE sign-in profile and phone number: while you keep ordering from us. If you haven't ordered for 2 years, we delete them.
- Payment slips in our LINE chat: up to 1 year.
Cookies
We use one essential cookie to keep you signed in to the order page, and a short-lived one during LINE sign-in. We don't use advertising or tracking cookies.
Your rights
Under the PDPA you can ask us to:
- see or get a copy of your personal data,
- correct data that is wrong or incomplete,
- delete it, or stop or limit how we use it,
- move it to another service,
- withdraw your consent at any time (this doesn't affect what we did before).
Message us on LINE at @littlemoresalt. We'll reply within 30 days. If you're not happy with our answer, you can complain to the Office of the Personal Data Protection Committee (PDPC), Thailand.
Keeping it safe
Only Roham and Prae can see orders in our owner system, which needs a LINE sign-in. The website uses an encrypted connection (https).
Changes
If we change this policy, we'll update the date at the top of this page.