Privacy Policy

This Policy explains how VRPA Company Limited (“Company”, “PackKUB”, “we”, “us”) collects, uses, discloses, retains and protects personal data when you use packkub.com, PackKUB accounts, ERP services, online-order management, marketplace integrations and related support services.

It applies to PackKUB users, merchant representatives, contacts, prospects and individuals who interact with us directly. Personal data that a Merchant imports or processes through PackKUB is also addressed under the Merchant Data section and the Data Processing Agreement.

• Account and contact information such as name, email, telephone number, company, role and profile information supplied by an authentication provider you choose.
• Subscription, billing, invoice and transaction information. Certain payment-card or regulated payment data may be processed directly by the payment provider.
• Usage and security data such as IP address, device/browser information, timestamps, audit/security events and information needed to detect fraud or unauthorized access.
• Support and form submissions, including request content, attachments and communication history.
• Business data a Merchant imports, connects or creates in PackKUB, including customers, buyers, orders, delivery addresses, products, inventory, returns, accounting records and operational data that may contain personal data.

• Create and administer accounts, authenticate users and provide PackKUB under the contract.
• Process orders, products, stock, fulfillment, returns, finance and ERP workflows on the Merchant’s instructions.
• Operate user-directed integrations such as Shopee, Lazada, TikTok Shop, LINE and other supported services.
• Bill for subscriptions, issue accounting documents and administer credits or add-on services.
• Provide support, troubleshoot issues, send service communications and maintain service continuity.
• Protect accounts and infrastructure, detect abuse or fraud and comply with law.
• Analyze and improve service performance and user experience using data appropriate to that purpose.
• Send PackKUB marketing where an appropriate legal basis or consent exists; recipients can opt out.

For account administration, billing, security, fraud prevention, support and legal compliance, PackKUB may act as a Controller for those purposes.

For personal data relating to a Merchant’s customers, buyers, recipients or other individuals that the Merchant submits to PackKUB for ERP, order management, fulfillment, returns or related processing, the Merchant normally acts as Controller and PackKUB acts as Processor on the Merchant’s instructions under the Data Processing Agreement (DPA).

PackKUB may disclose data to service providers necessary to operate the service, subject to appropriate scope and safeguards. These may include infrastructure, network/security, email/authentication and payment providers. Our current Subprocessor List is published separately.

When a Merchant directs PackKUB to connect to a marketplace or other third-party service, PackKUB may transmit or receive data from that service as required by the Merchant’s configuration. Third-party services may apply their own privacy policies and terms.

Some service providers or user-directed marketplaces may process data outside Thailand. Where applicable, PackKUB considers appropriate legal mechanisms and safeguards and limits transfers to what is required for the service purpose.

We retain personal data only for as long as necessary for service delivery, contractual obligations, security, dispute handling and legal requirements. Retention periods vary by data category.

When data is no longer required, or when a valid request applies, we will delete, destroy or anonymize it as appropriate. Backup copies may remain until removed through the applicable backup-retention cycle.

PackKUB applies organizational and technical measures appropriate to risk, including access controls, authentication, scope separation, event logging and network/system protections. No transmission or storage method can be guaranteed to be completely secure.

Where a request concerns personal data that PackKUB processes on behalf of a Merchant, we may route or coordinate the request with that Merchant as the relevant Controller.

• Access and obtain a copy of personal data.
• Correct inaccurate or incomplete data.
• Request deletion, destruction or anonymization where legally applicable.
• Request restriction of processing.
• Object to processing where the law provides that right.
• Withdraw consent without affecting processing lawfully carried out before withdrawal.
• Request portability where applicable.
• Object to direct marketing at any time.

Our website may use cookies required for login, security and core website operation, and may use analytics or marketing cookies where enabled and supported by an appropriate legal basis. See the Cookie Policy for details.

We may update this Policy when our services, applicable law or practices change. The current version and effective date will be posted here, and material changes will be communicated through an appropriate channel.

VRPA Company Limited / PackKUB, 12 Soi Ramintra 93, Khanna Yao Subdistrict, Khanna Yao District, Bangkok 10230, Thailand. Telephone: 083-528-4496. Privacy contact: [email protected].

You may start a privacy-rights request at packkub.com/privacy-request.