Privacy Policy

Last updated: 25 September 2026

Who we are

Big T's Bakery is a home-based bakery in Bangkok, Thailand. We decide how the personal data described here is used, which makes us the data controller under Thailand's Personal Data Protection Act B.E. 2562 (PDPA). Contact: contact@bigtsbakery.com

What we collect

When you order: your name, phone number or LINE ID, email address (optional), delivery address (for delivery orders), any notes or icing requests you add, what you ordered, the order date, and the language you used on the site.
When you pay: the amount and time of your PromptPay transfer, taken from our bank's payment alert so we can match it to your order. We never see or store your bank account or card details.
When you contact us by LINE or email: whatever you choose to send us.
When you visit the site: your IP address, briefly, to protect the order form from spam and abuse. If you accept analytics cookies, Google Analytics also collects how you use the site (pages viewed, device and browser type, approximate location) linked to a random ID stored in your browser.

Why we use it, and our legal basis

To take, bake, deliver and support your order, including sending your order confirmation: performance of our contract with you.
To keep order records for accounting and tax: legal obligation.
To protect the site and order form from spam and abuse: our legitimate interest in running the site safely.
To understand how the site is used, only if you accept analytics cookies: your consent.

We do not sell your data, use it for advertising, or make automated decisions about you.

Who we share it with

Only the service providers that help us run the bakery, each bound by its own data protection terms:

Vercel: hosts this website (servers in Singapore).
Neon: stores order records (servers in Singapore).
Resend: sends order-confirmation emails (United States).
Google Workspace: our email inbox, which receives order notifications and your emails.
Cloudflare: processes our bank's payment alert emails to match payments to orders.
Google Analytics: only if you accept analytics cookies (United States).
LINE: only if you choose to message us on LINE; LINE's own privacy policy applies.

We may also disclose data when Thai law requires us to.

Sending data outside Thailand

Some of these providers store or process data outside Thailand, mainly in Singapore and the United States. We use them because they are needed to take and fulfil your order and to run this website, and each protects the data under its own contractual safeguards.

How long we keep it

Order records: 3 years from the order date, for accounting. After that we remove your name, contact details, address and notes automatically, and keep only anonymous order totals.
Orders we cancel and delete: permanently erased 30 days after deletion.
IP addresses used for abuse protection: erased automatically within about 2 days.
Order emails in our inbox and LINE chats: deleted when no longer needed, and no later than 3 years.
Google Analytics data: no more than 14 months, then deleted by Google.
Your cookie choice: saved in your browser until you change it or clear your browser data.

Cookies

Necessary: your cookie choice is saved in your browser's local storage. This needs no consent.
Analytics (optional): Google Analytics cookies (_ga, _ga_*) are set only after you press Accept.

You can change your choice at any time with (also at the bottom of every page). Choosing Decline stops analytics and deletes its cookies. We do not use advertising or social-media trackers.

Your rights

Under the PDPA you have the right to:

access your data and get a copy of it;
have inaccurate data corrected;
have your data deleted, destroyed or anonymised;
restrict how we use it, or object to our using it;
receive your data in a common electronic format, or have it sent to another organisation;
withdraw consent at any time (for analytics, use );
complain to the Office of the Personal Data Protection Committee (PDPC): pdpc.or.th.

Some rights have legal limits. For example, we may need to keep an order record for accounting even if you ask us to delete it; if so, we will tell you why.

To make a request, email contact@bigtsbakery.com with your name and the phone number or LINE ID you ordered with. We reply within 30 days, free of charge.

Security

The site uses HTTPS, order records are stored encrypted by our database provider, and only our own staff can open them, after signing in to a restricted staff account. If a data breach is likely to put your rights at risk, we will report it to the PDPC within 72 hours of finding out and tell you without undue delay.

Children

Orders are placed by adults. A parent or guardian is welcome to order for a child. We do not knowingly collect data from children.

Changes

When we change this policy we update the date at the top of this page.

Terms & Conditions

Last updated: 25 September 2026

1. About us

Big T's Bakery is a home-based baking business operating in Bangkok, Thailand. By placing an order you agree to these terms.

2. Orders

Orders are placed through our website and confirmed via LINE once payment is received.
Our current order days and cut-off times are shown on our Contact page. The delivery or pickup date shown when you place your order is the date we work to.
We reserve the right to cancel any order we cannot safely fulfil. You will be notified and a full refund arranged.

3. Payment

We accept payment by PromptPay only. We will never ask you to pay a different account.
Baking begins only once payment is confirmed.
Prices are in Thai Baht (฿) and are inclusive of any applicable taxes.

4. Delivery

We deliver within the area listed on our Contact page. The delivery fee is shown in your order total before you pay.
Delivery timings are agreed at the time of order. We are not liable for delays caused by traffic, weather, or events outside our control.

5. Cancellations & refunds

Canceled before payment confirmed: no charge.
Canceled after payment but before baking starts: full refund.
Canceled after baking has started: no refund (ingredients used).
Wrong or damaged order: contact us within 24 hours and we will make it right.

6. Allergens

Our products are baked in a home kitchen that also handles nuts, dairy, eggs, and wheat. We cannot guarantee a completely allergen-free environment. It is your responsibility to check allergen information before ordering if you have a food allergy or intolerance.

7. Food safety

Cookies are made fresh to order. Consume within 3 days of collection and store in a cool, dry place.

8. Photos & social media

We love when customers share photos! By tagging @bigtsbakery on social media you grant us permission to repost your content with credit.

9. Your personal data

How we collect and use your details is explained in our Privacy Policy.

10. Limitation of liability

Our total liability in connection with any order shall not exceed the value of that order. We are not liable for indirect or consequential losses. Nothing in these terms limits rights you have under Thai consumer protection law.

11. Governing law

These terms are governed by the laws of Thailand. Any disputes shall be subject to the jurisdiction of the courts of Bangkok.

12. Changes

We may update these terms from time to time and will post the new version here with an updated date. The terms that apply to your order are the ones shown when you placed it.