This Privacy Policy explains how A New Day collects and uses customers’ personal data under the Personal Data Protection Act B.E. 2562 (2019).
Version 2.0 · Effective 19 October 2026 · If the Thai and English versions differ, the Thai version prevails.
A New Day Co., Ltd. (“the Company”, “we”) explains here how we collect, use and disclose personal data when you use anewday.co.th, place an order, register a warranty or contact us. For our mosquito trap rental service, also see the Rental Service Privacy Notice (Thai).
1. Data controller
A New Day Co., Ltd., company registration no. 0105561098020
634/4 Soi Ramkhamhaeng 39 (Thepleela 1), Pracha Uthit Rd., Wang Thonglang, Bangkok 10310, Thailand
Email online@anewday.co.th · Tel. 02-725-0800 ext. 441 or 601
2. Data we collect
| Type | Examples |
|---|---|
| Contact and delivery | Name, address, phone, email, company name and tax ID (when you request a tax invoice) |
| Order | Products, amount, date, status, tracking number, notes |
| Payment | Transfer slip, bank, transfer date and time, bank account for refunds. For card payments, the payment provider processes your card; we do not store full card numbers. |
| Account | Username, password (stored encrypted), reward points, order history, social account data if you choose to log in with it |
| Warranty and after-sales | Model, serial number, proof of purchase, product photos, problem description |
| Communications | Contact form messages, email, LINE chat and contact records |
| Technical | IP address, device and browser type, pages visited, referral source (e.g. UTM campaign codes) and cookies |
| Marketing consent | Subscribing to or unsubscribing from news and offers |
We do not intend to collect sensitive data (such as religion, health or biometrics). If we need it, we will ask for your explicit consent first. This website is not intended for minors; if you are a minor, please ask a parent or guardian to place the order.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Processing orders, verifying payment, delivery, refunds and order communications | Contract |
| Warranty, repairs and after-sales support | Contract |
| Managing user accounts and reward points | Contract |
| Issuing receipts and tax invoices, accounting | Legal obligation |
| Fraud prevention and system security | Legitimate interests |
| Website analytics and campaign performance | Consent (analytics and marketing cookies) |
| Sending news and offers | Consent (withdrawable at any time) |
| Running prize draws and delivering prizes | Contract (campaign rules) and tax law obligations |
| Establishing or defending legal claims | Legitimate interests |
Fields marked as required at checkout are needed to deliver your order and issue documents. Without them we may be unable to process your order.
4. Who we share data with
We do not sell personal data. We share it only as necessary with:
- Delivery providers (e.g. Shopee Xpress), banks and payment providers
- Website, hosting, email, accounting, analytics and advertising service providers (e.g. Google and Meta)
- Companies in the Winnergy Medical Public Company Limited group, as needed for management, accounting and internal audit
- Auditors, legal advisers and government authorities as required by law, such as the Revenue Department or courts
Some providers store data on cloud systems outside Thailand. We will ensure safeguards required by law are in place.
5. Retention
| Data | Period |
|---|---|
| Orders, slips, tax invoices | As required by accounting and tax laws |
| Warranty data | Warranty period plus 2 years |
| User account | Until you ask us to close the account |
| Contact form messages | 2 years from your last contact |
| Marketing data | Until you withdraw consent |
| Cookie data | See the Cookie Policy |
After these periods, we delete, destroy or anonymise the data.
6. Cookies
We use cookies as described in the Cookie Policy. You can switch each cookie category on or off from the cookie banner.
7. Security
We use encrypted connections (HTTPS), a web application firewall, and limit access to staff who need it. If a personal data breach occurs, we will notify the Personal Data Protection Committee Office (PDPC) within 72 hours of becoming aware of it, unless it is unlikely to affect your rights, and will notify you without delay if the breach poses a high risk.
8. Your rights
- Access and obtain a copy of your data
- Receive or transfer your data in a machine-readable format
- Object to collection, use or disclosure
- Request deletion, destruction or anonymisation
- Request restriction of use
- Request correction
- Withdraw consent at any time, without affecting processing done before withdrawal
- Complain to the Personal Data Protection Committee Office
Contact us using the details in section 1, free of charge. We will respond within 30 days of receiving your request. Some rights may be limited by law, for example where we must keep accounting records.
9. Changes
We may update this policy and will show the latest version and effective date on this page. Significant changes will be announced on the website or by email. See other channels at Contact us.