Privacy policy
Last updated 13 Oct 2026
This notice explains how iChoice Co., Ltd., the company behind the NICH TEC shop, collects, uses and shares your personal data, under the Personal Data Protection Act B.E. 2562 (2019) (PDPA). It applies to visitors to the website, members, buyers (including buyers who order without an account), people who contact the shop, and people who sell used goods to the shop.
Last updated 12 October 2026 (version 2026-10).
1. Who is responsible and how to reach us
| Item | Details |
|---|---|
| Data controller | iChoice Co., Ltd. (head office), operator of the NICH TEC shop |
| Address | 422/29 Chiang Mai Land Road, Chang Khlan, Mueang Chiang Mai, Chiang Mai 50100 |
| Phone | 052-005-034 |
| info@nichtec.com (subject line "Personal data") | |
| LINE | @nichtec |
| Rights request form | Personal data request |
The shop is open Monday to Saturday, 9:00 to 18:00. Send any personal data matter to one of the channels above.
2. What data we collect
| Type | Examples | When we collect it |
|---|---|---|
| Account | Name, email, phone, password (we keep only a one-way encrypted value), the reference ID and name from a linked Google or LINE account, your choices about news and offers | You sign up or sign in |
| Orders | Items, prices, discounts, points used and earned, payment method, status, history, serial numbers of the goods we sell you | You order |
| Delivery | Recipient name, phone, address, courier name, tracking number, cash-on-delivery amount | You order and we deliver |
| Tax invoice | Name, address, 13-digit tax ID, branch, purchase order number | You ask for a full tax invoice |
| Payment | Method, amount, time, the 2C2P reference, a masked card number (for example 411111XXXXXX1111). For bank transfers, the slip image and what you type: date, time, amount and bank | You pay |
| Contact | Messages in the contact and business forms, warranty claims and the photos or videos you attach, reviews, rights requests, the emails and SMS we send you | You contact us |
| Device and use | IP address, browser and device type (when you sign in, send a form or record a consent choice), cookies, search terms typed into the site (not linked to you), site usage through Google Analytics if you consent | You visit and use the site |
| People selling used goods to us | Name, address, phone, type and number of an identity document (for example an ID card), the items, serial numbers, the price we pay | We buy used goods |
We record that you acknowledged this notice, confirmed a used item's condition, and chose to receive news or cookies or not, with the date and time, the version of this notice and your IP address, as proof of what you chose.
We never see or keep your full card number, expiry date or CVV. You type card details on the 2C2P payment page.
We do not seek sensitive data such as religion, race or health. If an ID card you show carries such details, we use it only to check your name and photo, and we do not keep a copy unless the law requires it.
3. Why we use your data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Create and run your account, sign you in, verify you by email or SMS code | Contract (providing what you asked for) |
| Take and handle orders, accept payment, deliver, issue documents | Contract |
| Tell you the order status by email, and by SMS or LINE when the shop offers it | Contract |
| Exchanges, returns, warranty claims, refunds | Contract and legal obligation |
| Points and member tiers | Contract (member benefits) |
| Answer messages, prepare quotations | Contract (steps you ask for before a contract) |
| Issue tax invoices, keep accounting and tax records | Legal obligation (Revenue Code, accounting law) |
| Record purchases of used goods from sellers | Legal obligation (second-hand goods trade law) |
| Answer PDPA rights requests and record data breaches | Legal obligation |
| Prevent fraud, check slips and unusual payments, secure the site, limit abnormal use, log staff actions | Our legitimate interest |
| Improve search and products from anonymous search terms | Our legitimate interest |
| Show the review you write, under your first name and the first letter of your surname | Consent (when you submit the review) |
| Send news and offers by email, SMS or LINE, each channel separately | Consent, which you can withdraw at any time |
| Measure site use with Google Analytics | Consent (analytics cookies) |
| Establish or defend legal claims, obey orders of public authorities | Our legitimate interest, and legal obligation |
You do not need to consent to place an order. The tick at checkout confirms you have read this notice. The box for offers is not ticked in advance and is optional. Saying no does not affect your order.
Data needed for the contract and the law, such as your name, delivery address and phone, is required. Without it we cannot deliver or issue documents.
4. Who receives your data
We do not sell your data. We share it only as needed for the purposes above.
| Recipient | What they receive and why |
|---|---|
| 2C2P (payment provider) | The amount and order number, to open the payment page and report the result. The card details you type go straight to 2C2P |
| Couriers (Flash Express, KEX, J&T Express, Thailand Post, SPX Express, Best Express, Ninja Van, DHL eCommerce, Lalamove, whichever we use for a parcel) | Name, phone, address, parcel details and any cash-on-delivery amount, to deliver |
| SMS provider | Phone number and message text, to send verification codes and status messages |
| If you sign in with Google, the sign-in data between you and Google. If you accept analytics cookies, site usage data sent to Google Analytics | |
| LINE | If you sign in with LINE, the sign-in data between you and LINE. When the shop offers it and you sign in with LINE, order status messages through the shop's LINE account |
| The shop's web hosting and email provider | Stores all the site's data and sends the emails we send you |
| Makers, distributors and service centres | Product details, serial number, the fault, and your name and contact details where needed, when you make a warranty claim |
| Banks | Account name and number when we refund you by transfer |
| The shop's accounting, tax and legal advisers | Tax documents and related data, only as needed and under a duty of confidentiality |
| Public authorities, courts, police | When the law or a lawful order requires it |
5. Sending data abroad
Some providers are based or process data outside Thailand: Google (sign-in and Google Analytics), LINE and its group companies, and 2C2P, which is part of an international group. Our hosting and email provider may also store data outside Thailand. We send only what is needed, and only where the destination country or the recipient has adequate data protection, the transfer is necessary to perform our contract with you, or you have consented, as with analytics cookies.
6. How long we keep data
| Data | How long |
|---|---|
| Account, addresses, tax details saved in the account | While the account exists. When you ask us to delete it, we delete or anonymise it after checking the request, except data the law requires us to keep |
| Tax and accounting records (receipts, tax invoices, credit notes, related order and payment data, transfer slip images) | 5 years, or longer if the law requires |
| Serial numbers, warranty and claim records | The product's warranty period plus 1 year |
| Contact form messages, quotations, and the emails and SMS we send you | 2 years from the last contact |
| Logs of staff actions and security logs | 2 years |
| Records of used goods bought from sellers | At least 5 years from the purchase, or as the second-hand goods trade law requires |
| Records of consent and of acknowledging this notice | While the consent is valid, and 2 years after withdrawal, as proof |
| Rights requests and data breach records | 3 years after the matter is closed |
| Sign-in data (IP address and device type of a session) | For the life of the session, 30 days for customers |
| Verification codes and one-time links | Deleted within 1 day after they expire or are used |
| Google Analytics data | As set in Google Analytics, no more than 14 months |
| Cookies | See section 7 |
When the period ends, we delete the data or make it impossible to identify you.
7. Cookies and similar technology
When you first visit, a cookie bar lets you choose. The accept and reject buttons are the same size, or press "Choose" to pick by type. Google Analytics does not run until you accept. We remember your choice for 6 months. You can change it at any time under "Cookie settings" at the bottom of any page.
| Cookie | What it does | Lifetime |
|---|---|---|
nt_session | Necessary. Remembers that you are signed in | Up to 30 days |
nt_cart | Necessary. Remembers your cart | 60 days |
nt_consent | Necessary. Remembers your cookie choice | 6 months |
NEXT_LOCALE | Necessary. Remembers the language you chose | Until you close the browser |
_ga and _ga_ followed by an ID | Analytics (needs consent). Google Analytics shows which pages are used and which are hard to use | Up to 2 years |
The site also keeps your compare list, recently viewed items and any PC build you have not saved in your browser's own storage. That data stays on your device and is not sent to us. You can clear it in your browser settings.
8. How we protect your data
- Passwords are stored as one-way encrypted values. Neither the shop nor staff can see your password.
- We do not store card numbers. Card payments take place on the 2C2P page.
- The site uses encrypted connections (HTTPS).
- Transfer slips and files attached to claims are kept in private storage, which only the owner of the order and authorised staff can open.
- The identity document numbers of people who sell used goods to us are stored encrypted.
- Staff access is split by role, such as orders, products, customers and reports. Staff accounts can use two-step sign-in, and important actions are logged so they can be reviewed later.
- The system limits sign-in attempts and form submissions, to stop abuse.
No system is perfectly secure. We keep a register of data breaches. If a breach puts your rights at risk, we notify the Personal Data Protection Committee Office within 72 hours of learning of it, and we tell you without delay when the risk is high.
9. Your rights
You have these rights under the law:
- to access and get a copy of your data
- to have inaccurate data corrected
- to have data deleted, destroyed or made unidentifiable
- to have the use of your data restricted
- to object to the collection, use or disclosure of your data
- to receive your data, or have it sent, in a reusable format
- to withdraw consent you have given
How to use your rights
Fill in the rights request form, or when signed in open the "Privacy" page of your account, or email info@nichtec.com. We answer within 30 days of receiving your request, free of charge. We may ask you to prove who you are first, so that your data does not reach someone else.
We cannot always do everything you ask. For example, if you ask us to delete data but the law requires us to keep tax invoices for 5 years, we keep only that part and tell you why.
Withdrawing consent
- Offers: switch off email, SMS or LINE on the "Privacy" page of your account, or use the unsubscribe link at the bottom of an email.
- Analytics cookies: change your choice under "Cookie settings" at the bottom of any page.
- Withdrawing does not affect use of your data before you withdrew.
Complaints
If you believe we are not following the law, you have the right to complain to the Personal Data Protection Committee (PDPC) Office. We would be glad to hear from you first, so we can put it right as fast as we can.
10. Children
This website is not made for children. Minors should order with a parent's permission. If we learn that we hold data of a child under 10 without a parent's consent, we delete it.
11. Changes to this notice
We update this notice when the way we work or the law changes. The version and date are at the end. If a change is material, we tell you on the website or by email, and ask for your consent again where the law requires it.
Version 2026-10, last updated 12 October 2026.