Last updated: 31 August 2026
Fonraya is an online store operated by Genext Information Systems. This Privacy Policy explains how we collect, use, disclose, protect, and retain personal data when you visit fonraya.com, create an account, place an order, or contact us. We handle personal data in accordance with Thailand’s Personal Data Protection Act B.E. 2562 (2019) (PDPA) and other applicable Thai laws.
Who controls your data
Genext Information Systems is the data controller for personal data collected through Fonraya. You can contact us through our Contact page, by telephone on 064-282-9965, or through the LINE link shown on this website.
Personal data we collect
- Order and delivery information: your name, billing and delivery address, telephone number, email address, products ordered, order value, delivery instructions, and order history.
- Account information: login details, account preferences, saved addresses, and account activity. Passwords are protected by WordPress and are not visible to us in plain text.
- Payment information: payment method, payment status, and transaction references. If an electronic payment provider is offered, that provider processes the payment details under its own privacy terms. Fonraya does not intentionally store complete payment-card details.
- Communications: messages and information you send through the website, email, telephone, or LINE, including enquiries, delivery questions, returns, and customer-service requests.
- Technical and security information: IP address, browser and device information, server logs, cookie or session identifiers, and information used to operate, secure, and troubleshoot the website.
Please do not send medical records or other sensitive health information through the website or LINE. Fonraya sells dietary supplements but does not provide medical diagnosis or treatment and does not need your medical history to process an order.
Why we use personal data
- To provide product information, operate the shopping cart, process and deliver orders, accept payments, send order notices, and provide customer service.
- To create and manage customer accounts and respond to requests.
- To prevent fraud, misuse, and security incidents and to maintain reliable website operations.
- To keep accounting, tax, transaction, and consumer-protection records required by Thai law.
- To establish, exercise, or defend legal claims and resolve complaints.
- To send marketing messages only where you have chosen to receive them and to allow you to withdraw that choice.
Depending on the activity, our legal basis is performance of a contract or steps requested before a contract, compliance with a legal obligation, our legitimate interests in operating and securing the store, or your consent where Thai law requires it. You may withdraw consent at any time without affecting processing that was lawful before withdrawal.
When we share personal data
We do not sell or rent personal data. We share only what is reasonably necessary with service providers that help us operate the store, including website hosting and technical providers, WooCommerce and WordPress services, couriers and delivery partners, payment providers where enabled, professional advisers, and LINE when you choose to contact us through LINE. We may also disclose information to regulators, courts, law-enforcement bodies, or other authorities when required or permitted by Thai law.
International processing
Some technology or communications providers may process information outside Thailand. Where a cross-border transfer occurs, we use providers and arrangements intended to provide appropriate protection in accordance with the PDPA and applicable Thai requirements.
How long we retain data
We retain personal data only for as long as necessary for the purposes described above. Order, payment, invoice, tax, and accounting records may be retained for the period required by Thai law. Account information is generally retained while the account remains active and for a reasonable period afterwards. Customer-service records and technical logs are retained only as long as reasonably needed for service, security, dispute resolution, and legal compliance. When information is no longer required, we delete, anonymise, or securely dispose of it.
Cookies
Fonraya uses cookies and similar technologies that are necessary for the shopping cart, checkout, account login, security, and website performance. We do not currently use advertising or third-party analytics cookies. Please read our Cookie Policy and Cookie Settings page for details.
Security
We use reasonable administrative, technical, and organisational safeguards designed to protect personal data. No internet service can guarantee absolute security, so customers should also protect their account credentials and contact us promptly if they believe an account or order has been misused.
Your rights under Thailand’s PDPA
Subject to the conditions and exceptions in Thai law, you may have the right to request access to or a copy of your personal data, correction, deletion, restriction of use, objection to processing, data portability where applicable, and withdrawal of consent. You may also lodge a complaint with Thailand’s Personal Data Protection Committee if you believe your personal data has been handled unlawfully.
To make a request, contact us through the Contact page, call 064-282-9965, or use the LINE contact shown on the website. We may need to verify your identity before completing a request. Some information may need to be retained where Thai law requires it or where it is necessary for legal claims, fraud prevention, or the rights of other people.
Children
This store is intended for adults purchasing products for lawful personal use. Children should not create accounts or place orders without the involvement of a parent or legal guardian.
Changes to this policy
We may update this Privacy Policy when the store, our service providers, or Thai law changes. The current version and its update date will always appear on this page.