HARABI Privacy Notice

Data controller and contact

The data controller is Thai Nutra Co., Ltd. For privacy questions or requests, contact

Website and preview forms

The current website forms are interface previews only. When submitted, they do not transmit or persist submitted values on a server or in a database.

Public-page measurement with Google Analytics

With your analytics-cookie consent, the website uses Google Analytics 4 to understand public-page visits, product views, and clicked purchase channels. Google processes public page paths, public product identifiers, channels, and technical information such as device, browser, and cookie identifiers, potentially outside Thailand. We remove URL queries and fragments and do not send form values, member, order, cart, or pet information to Analytics. Personalized advertising is disabled, and a click is not a completed purchase. You can refuse or withdraw consent on the cookies page without affecting normal website use. Information sent before withdrawal remains subject to the Google Analytics retention settings.

Manage analytics cookiesHow Google uses information from websites

LINE OA customer service

When Smart FAQ is active on LINE OA, it reads a message and selects an answer from HARABI FAQs approved by an authorized HARABI Owner. If it cannot find a suitable answer, it asks authorized staff to review and respond. While FAQ is paused, staff handle messages through the existing channel.

Membership and limited Order pilot

Member sign-in through the website or LINE MINI App uses a verified LINE account. HARABI processes the LINE user identifier, name, contact details supplied by the member, Customer ID, Member ID, acknowledgement of the existing Member notice version 2026-09-01, and a separate marketing choice. Order access is limited to HARABI-approved pilot accounts, not all members. Order notice version 2026-09-27-order-v1 is acknowledged separately from the existing Member notice.

Direct-channel orders and payment evidence

For orders through LINE OA, Facebook, Instagram, the website, or another direct channel, authorized staff record products, prices, contact and shipping details from the conversation, store transfer slips privately for staff review, and record fulfilment status. A slip alone does not prove that funds reached HARABI. Orders from fee-charging marketplaces such as TikTok are not included in this member history. Linking a guest order requires a one-time code from the member account and a check in the original chat; link proof has restricted access. Staff and verified owner-members see only information permitted for their role. Purchase history shows paid purchases without points or discount calculations.

Information involved

• The customer-service message you send and technical identifiers needed to receive the event and reply through LINE
• The FAQ decision and limited operational logs needed for security and troubleshooting
• The wording of an unanswered question may be stored after basic contact details detected by the service are masked so HARABI can improve its FAQ; this record remains subject to the retention period below
• Account details and conversation history shown in LINE OA may be visible to authorized HARABI staff under LINE platform operations and terms

Purposes

• Answer product and customer-service questions
• Hand an unanswered question to authorized staff
• Improve the approved FAQ
• Maintain security, troubleshoot errors, and prevent duplicate replies

Lawful bases

• Answering questions and handing them to staff: taking steps at your request before entering a contract, or HARABI’s legitimate interests in providing customer service, as applicable
• Improving the FAQ, maintaining security, and troubleshooting: HARABI’s legitimate interests, balanced against your rights and the effect on you
• Keeping, using, or disclosing information when required: compliance with a legal obligation
• Marketing communications: consent where required by law, which you may withdraw

Service providers and authorized access

HARABI uses LINE, Facebook, and Instagram for messaging on the channel chosen by the customer; Render for the website and some services; and Supabase for member accounts, Order records, slips in private storage, and FAQ data. Access is limited to authorized staff and providers needed for the service.

Retention

Unanswered FAQ wording is kept for no more than 12 months after last seen, unless a longer period is necessary. An Order slip is scheduled for deletion on the later of six years after upload and five years after the relevant 31 December accounting close; deletion may be held for a legal or dispute need. Member-link code proof follows a separate reviewed deletion schedule. Due records are deleted through a verifiable process. Conversation history on external platforms follows each platform’s terms.

Your rights

Subject to applicable law, you may use the email above to request access or a copy, correction, deletion or restriction, object to processing, or withdraw consent. Withdrawing consent does not affect processing that occurred before withdrawal.

Marketing communications

HARABI will not use customer-service messages for marketing without an applicable legal basis or separate consent where required.