WeedeN

Privacy Notice

Last updated: October 2026

This notice explains what personal data we collect when you pre-register a visit to a WeedeN shop on this website, why we collect it, and what rights you have. It is provided in line with the Personal Data Protection Act B.E. 2562 (2019) of Thailand (“PDPA”).

In short: we collect your name and phone number to recognise your visit when you come to a WeedeN shop and to measure how well our advertising works. Your email is collected only if you tick the box for news.

This site is for adults aged 20 and over. By submitting the form you confirm that you are 20 or older.

Who is responsible for your data

The data controller is MH & Mood Co., Ltd., registration number 0845565011321, 162/51 Moo 2, Bo Phut, Ko Samui, Surat Thani, Thailand, which operates the WeedeN shop network. For any question about your data, or to exercise the rights below, write to digitalmarketing@weeden.club.

What we collect

Name	So the shop can recognise your visit.
Phone number	So the counter can find your pre-registration when you visit.
Planned visit time	Your answer to “When are you planning to come?”.
Advertising click identifier	If you arrived from an online ad, a technical identifier of that click. Together with your pre-registration it relates to you, so we treat it as personal data.
Visit record	If you visit a shop after pre-registering: the shop, the date and time, and the receipt total. We do not receive the list of items bought.
Email address (optional)	Only if you tick the box to receive news about new shop openings and opening hours.
Technical logs	Your IP address and browser data in the server logs, kept for security for up to 30 days.

This website does not collect health data and does not ask about medical conditions or product preferences.

Why we use it and on what legal basis

To recognise your visit — the shop finds your pre-registration by your phone number. Legal basis: steps taken at your request before entering into a contract (Section 24(3) PDPA).
To measure advertising — to understand which ads actually bring visitors to our shops. For this we report the fact of a visit to Google using the click identifier above; your name and phone number are not passed to Google. Legal basis: our legitimate interest in measuring our advertising (Section 24(5) PDPA). You can object at any time.
News, only if you agreed — emails about new shop openings and opening hours. No products, prices or promotions. Legal basis: your consent (Section 19 PDPA), given with a separate tick box that is not pre-ticked. You can withdraw it at any time with the unsubscribe link in every email.

Who receives it and where it is processed

Our shop system — finds your pre-registration at the counter by your phone number.
Exponenta Marketing (PE Hnylytska Anna, Ukraine) — our marketing agency, operates this website and the advertising measurement on our behalf under a data processing agreement. Your data is stored on its server in Finland (European Union) and accessed by its staff from Ukraine.
Hetzner Online GmbH — hosting provider; the website runs on a server in Singapore, the database on a server in Finland.
Google (United States) — receives only the click identifier, the time of the visit and the receipt total, to measure advertising.
SendPulse (United States) — our email provider, receives your email address only if you subscribed to news; it stores data in data centres in the European Union.

Transfers outside Thailand. Your data is therefore transferred to Finland, Ukraine, Singapore and the United States. Some of these countries may not be considered to have adequate data protection standards under Thai law. We protect these transfers with data processing agreements that require the recipients to keep your data secure and use it only for the purposes above (Section 29 PDPA). You can ask us for details at the address above.

We do not sell your data.

How long we keep it

Name, phone number and visit records are kept for up to 24 months from your last visit or pre-registration, then deleted automatically. Advertising click identifiers are kept for up to 90 days. Your email is kept until you unsubscribe. If you ask for deletion, we act sooner.

Your rights

Under the PDPA you may ask us to:

give you access to and a copy of your data (Section 30);
give you your data in a commonly used machine-readable format or send it to another organisation (data portability, Section 31);
object to the use of your data (Section 32);
delete or anonymise your data (Section 33);
restrict the use of your data (Section 34);
correct your data (Section 35);
withdraw a consent you gave earlier (Section 19). Withdrawing consent does not affect what was lawfully done before.

Write to digitalmarketing@weeden.club and we will answer within 30 days. If you believe your rights were breached, you may complain to the Personal Data Protection Committee of Thailand.

Cookies and similar technology

This website does not use cookies, the Google tag or any other tracking or analytics tools. If you arrived from an ad, the page keeps the click identifier in your browser's session storage only until you close the tab, so that the form can pass it on. Fonts are served from our own server.

← Back to the site