Privacy policy

Effective date: 1 January 2026

Slightly Nation Company Limited ("we", "us", "our"), the operator of the Slightly online store at https://slightly.co (the "Website"), values the protection of your personal data. This Privacy Policy explains how we collect, use, and disclose your personal data, and your rights as a data owner under the Personal Data Protection Act B.E. 2562 (2019) ("PDPA") and other applicable data protection laws.

Collection of Personal Data

We collect personal data directly from you when you:

  • Browse, register, or create an account on our Website;
  • Place an order, make a payment, or request a return;
  • Contact us by email, telephone, contact form, or social media;
  • Subscribe to our newsletter or take part in promotions and surveys.

We may also collect personal data from other sources, such as our payment provider, delivery partners, analytics and advertising platforms, and publicly available sources, where permitted by law.

Types of Personal Data We Collect

  • Identity and contact information — name, surname, email address, telephone number, and shipping and billing address.
  • Account information — username, password, and order history.
  • Transaction and payment information — products purchased, order value, and payment confirmation. Card payments are processed securely by our payment provider (Omise); we do not store your full card number on our systems.
  • Technical data — IP address, device and browser type, Cookie IDs, and website usage history (activity log).
  • Communications — messages, enquiries, reviews, and feedback you send us.
  • Other information you voluntarily provide, such as skin type or skin concerns shared to receive product recommendations.

We collect, use, or disclose sensitive personal data (for example, health-related information you may share about your skin) only with your explicit consent, unless otherwise permitted by law.

Purposes of Processing

We collect, use, or disclose your personal data for the following purposes:

  • To create and manage your customer account;
  • To process, fulfil, and deliver your orders and to process payments and refunds;
  • To provide customer service, after-sales support, and to respond to your enquiries;
  • To send order updates and service-related communications;
  • To send marketing communications, newsletters, and promotions (where you have consented);
  • To improve our products, services, and Website experience;
  • To prevent fraud and maintain the security of our Website;
  • To comply with applicable laws and the requirements of government authorities.

Disclosure of Personal Data

We may disclose your personal data, with your consent or as permitted by law, to:

  • Service providers who support our operations — including our e-commerce platform (Shopify), our payment provider (Omise), delivery and logistics partners, and email, analytics, and advertising providers (such as Google and Meta). These providers operate under their own privacy policies.
  • Business partners where necessary to provide products or services you have requested.
  • Legal and regulatory authorities, where required by law.
  • Successors in a business transfer, such as a merger, reorganisation, or sale of assets, in which case the recipient must handle your data consistently with this Policy.

Transfer of Personal Data Abroad

Some of our service providers (for example, Shopify) store data on servers located outside Thailand. Where we transfer your personal data abroad, we take steps to ensure that the destination provides adequate protection or that another lawful basis under the PDPA applies.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this Policy, for as long as you maintain a relationship with us, and for any further period required by law (for example, tax and accounting records). When your data is no longer needed, we will delete, destroy, or anonymise it.

Your Rights

Under the PDPA, you have the right to: withdraw consent; access and obtain a copy of your personal data; request data portability; object to processing; request deletion or destruction; request restriction of processing; request rectification of inaccurate data; and lodge a complaint with the competent authority.

To exercise any of these rights, please contact us using the details below. We will respond within 30 days of receiving your request. If we decline a request, we will explain the reason.

Advertising and Marketing

We may use your data to analyse and improve our products and to deliver relevant marketing through platforms such as Google and Meta. We may send you newsletters and offers by email; you can opt out at any time by clicking "unsubscribe" in any marketing email or by contacting us. We do not use solely automated decision-making that significantly affects you without human oversight.

Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Website, remember your preferences, analyse traffic, and deliver relevant advertising. You can set your browser to refuse cookies, and you can opt out of analytics tracking (such as Google Analytics) via the cookie banner on our Website or your browser settings. Disabling cookies may affect how parts of the Website function.

Data Security

We maintain administrative, technical, and physical safeguards designed to protect your personal data against loss and unauthorised access, use, alteration, or disclosure, consistent with the principles of confidentiality, integrity, and availability.

Data Breach Notification

In the event of a personal data breach, we will notify the Office of the Personal Data Protection Committee without undue delay and, where feasible, within 72 hours of becoming aware of it. Where the breach poses a high risk to your rights and freedoms, we will also notify you together with guidance on remedial steps.

Changes to This Policy

We may update this Policy from time to time. The current version will always be available on our Website, and the effective date above will be updated accordingly.

Contact Us

If you have questions about this Policy or wish to exercise your rights, please contact us or our Data Protection Officer:

  • Slightly Nation Company Limited
  • Address: 

    2/161 Soi Prasertmanukit 29 Yaek 4, Prasertmanukit Road, Ladprao, Ladprao, Bangkok 10230 Thailand

  • Email: ops@slightly.co
  • Website: https://slightly.co
  • Telephone: 02-004-4639