PRIVACY POLICY

Privacy Policy

Effective from 7 October 2026

This English version is provided for convenience. If there is any inconsistency, the Thai version prevails.

1. Data Controller

13 STORE Co., Ltd. ("13 STORE", "we", "our") operates the DJI 13 Store website and is the data controller under the Personal Data Protection Act B.E. 2562 (2019) (PDPA).

Contact: 065-694-6155 · aidji13store@gmail.com · LINE @dji13store

2. Data We Collect

We collect only the data we need to serve you:

  • Member account — your email, name, profile picture and the user ID from LINE or Google when you sign in with them
  • Orders — recipient name, phone number, email, delivery address (or the branch you pick up from), items, amounts, coupons, notes, the transfer slip you attach, receipts/tax invoices, and the messages you exchange with the shop on your order page
  • Card payments— you enter your card details directly on 2C2P's payment page; we never see or store your full card number
  • Forms and contact — what you enter when you request a quotation, a trade-in, a rental or financing/installments, such as your name, phone number, email, company/organization, position, tax ID, budget, project details and photos of your current product, plus the messages you send us via website chat, LINE and Facebook
  • Drone registration documents — copies of your ID card, house registration or company documents and the serial number, which you send to our documents team for registration with the NBTC and CAAT
  • Affiliate partners — display name, email, phone number, social channels and the bank account for commission payouts (applicants only)
  • Technical and usage data— IP address (in our hosting provider's server logs), device/browser type, pages viewed, times and the site that referred you (our site statistics), plus your approximate country/city from your network · IPs used for spam protection in forms are stored only as a one-way hash · Only if you accept all cookies do we also keep your IP address in visit statistics, a persistent visitor ID and the ad campaign that brought you (e.g. utm, gclid, fbclid)
  • Cookies and browser storage — your cart, wishlist and comparison list are kept in your browser (cookie details in section 5)
  • Notifications and newsletter — your browser push subscription when you allow notifications, and your email when you sign up for news

3. How We Use Your Data

  • Fulfilling orders: verifying payment, delivery/pickup, issuing receipts/tax invoices and contacting you about your order
  • Registering drones as required by law, after-sales service and warranty claims
  • Answering questions, preparing quotations and serving corporate customers
  • Running member accounts, loyalty points and the affiliate program (including commission payouts)
  • Keeping our systems secure and preventing spam, fraud and abuse
  • Improving the website and our services from usage statistics
  • Measuring advertising and marketing, including sending purchase or quotation request data to ad platforms (only with your consent)
  • Sending news and promotions (only when you sign up or allow it)
  • Complying with the law, such as tax and accounting law

5. Cookie Policy

On your first visit you'll see a banner to choose "Accept all" or "Essential only". Until you choose, the site works as if you chose "Essential only", and you can change your choice any time with the "Cookie settings" button below or at the bottom of every page.

  • Essential cookies (always on) — sign-in, your language, your cookie choice and the affiliate partner code that referred you (kept 30 days). Your cart, wishlist and comparison list are kept in your browser.
  • Analytics cookies (with Accept all) — Google Analytics 4, Microsoft Clarity and Hotjar count visitors and analyze how the site is used, including heatmaps and session replay
  • Advertising cookies (with Accept all) — Google Ads, Meta Pixel and OpenAI (ChatGPT Ads) measure ads and power remarketing, plus our own campaign cookies (_djia_first / _djia_last, kept 90 days)

With "Essential only", Meta Pixel, OpenAI, Microsoft Clarity and Hotjar are not loaded, and Google Analytics and Google Ads run in Consent Mode without cookies (sending only cookieless signals for aggregate measurement). We also delete analytics/advertising cookies previously set in this browser.

Videos or maps embedded from other providers (e.g. YouTube, Google Maps) and Builk's quotation forms may set that provider's own cookies under their policies. You can also block or delete cookies in your browser settings.

6. Disclosure to Third Parties

We share only what is needed with service providers working on our behalf and with relevant authorities:

  • Website infrastructure — Vercel Inc. (hosting and server logs) and Supabase Inc. (database, member accounts and files such as slips and receipts)
  • Payment and delivery — 2C2P (for card payments) and couriers (recipient name, phone number and address)
  • Communication — LY Corporation (LINE) and Meta (Facebook Messenger) when you contact us there, plus internal team alerts via LINE
  • Customer forms — Builk (quotation forms on some pages)
  • Automated chat assistant — Anthropic (Claude) processes website chat messages to reply automatically, when the shop turns this feature on
  • 13 STORE Member program — your LINE user ID, points and order number, to credit points if you are a member
  • SubLnw × 13 Store (video editing tool) — when you choose to open SubLnw (www.sublnw.com) with your 13 STORE account and confirm, we pass your member ID, display name and email address, with whether that address has been verified, to SubLnw so it can confirm who you are and link your credits. This happens only when you press confirm, and your password is never passed on
  • Analytics and advertising (only with Accept all) — Google (Analytics, Tag Manager, Ads), Meta, OpenAI, Microsoft (Clarity) and Hotjar · When an order is paid, we may send the order number, items and value to Google and Meta, with a one-way hash of your email/phone number to Meta · When you submit a quotation request, we may send a hash of your email/phone number, with your IP address and browser details at that moment, to Meta — to measure our ads · an IP network lookup provider, to identify the network/organization name of a visit
  • Authorities and other parties — the NBTC and CAAT (drone registration), the Revenue Department and other authorities as required by law, the DJI service center (warranty claims), and banks, leasing or insurance companies only when you ask us to help with financing, hire purchase or insurance

Some providers may store or process data outside Thailand; we use providers with internationally recognized data protection measures · We do not sell your personal data to any third party.

7. Data Retention

  • Member accounts: for as long as you have an account, or until you ask us to delete it
  • Orders, payment evidence and tax documents: at least 5 years, as tax and accounting law require
  • Contact details and quotations: 5 years
  • Drone registration documents: as long as needed for registration and as the law requires
  • Website usage statistics: as long as needed for analysis and security, then deleted or anonymized
  • Our cookies: 12 months at most (third-party cookies follow their provider's policy)

8. Data Subject Rights

Under the PDPA, you have the following rights:

  • Request access to and a copy of your data (Right to Access)
  • Request that your data be corrected (Right to Rectification)
  • Request that your data be deleted (Right to Erasure)
  • Request that the use of your data be restricted (Right to Restrict Processing)
  • Request that your data be transferred (Right to Data Portability)
  • Withdraw your consent (Right to Withdraw Consent)
  • Object to processing (Right to Object)
  • Lodge a complaint with the Office of the Personal Data Protection Committee (PDPC)

You can withdraw cookie consent right away with the "Cookie settings" button. For your other rights, contact LINE @dji13store, email aidji13store@gmail.com or call 065-694-6155. We will act within the time the law requires.

9. Data Security

We use appropriate measures to protect your data, including HTTPS encryption, authentication-based access control for back-end systems, access limited to the staff who need it, and standard data backups.

10. Changes to This Policy

We may update this policy from time to time. The latest version shows its effective date at the top. If there are significant changes, we will notify you through the website.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights under the PDPA, please contact:

13 STORE Co., Ltd.
Lat Pla Khao branch: 616/6 Lat Pla Khao Road, Chorakhe Bua, Lat Phrao, Bangkok 10230
Tel: 065-694-6155
Email: aidji13store@gmail.com
LINE: @dji13store