Privacy Policy

Effective date: 1 January 2026  ·  Last updated: 1 January 2026

Veglia Imports Co., Ltd. ("we", "us", "our", "Pawsitivet") respects your privacy. This Privacy Policy explains what personal data we collect when you visit pawsitivet.com or otherwise interact with us, how we use it, who we share it with, and the rights you have over it.

We aim to comply with the Personal Data Protection Act B.E. 2562 (2019) of Thailand ("PDPA") and, where applicable, to follow the principles of the EU General Data Protection Regulation ("GDPR"). If anything in this policy is inconsistent with mandatory local law that applies to you, the local law prevails.

1. Who we are

Data controller: Veglia Imports Co., Ltd.
Address: 4/98 Klong Thaweewattana Road, Bang Khae Nuea, Bang Khae, Bangkok 10160, Thailand.
Contact for privacy matters: privacy@pawsitivet.com

2. What personal data we collect

We try to collect as little as possible. The categories we may collect are:

  • Information you give us directly — name, email address, phone number, company name, message content, and shipping address when you fill in our contact form, subscribe to our newsletter, request wholesale or distributor information, or place an order in future e-commerce checkout.
  • Information collected automatically — IP address, approximate location (country/city level), device and browser type, operating system, referring URL, pages viewed, time spent, and similar technical data, captured via cookies and server logs.
  • Marketing preferences — your subscription status, the topics you have opted in to, and your engagement with our emails (open/click events) if you receive newsletters from us.
  • Customer-service records — copies of your correspondence with us, including emails, chat messages, and any feedback or complaint you submit.

We do not knowingly collect personal data from children under 13. If you believe a child has provided us personal data, contact us and we will delete it.

3. Why we collect it (legal bases under PDPA / GDPR)

  • To respond to enquiries — performance of a contract or steps prior to entering one, and our legitimate interest in answering people who contact us.
  • To send marketing emails — your consent, which you can withdraw at any time using the unsubscribe link in every email or by emailing us.
  • To operate, secure, and improve the website — our legitimate interest in running a fast, reliable, and reasonably-protected service.
  • To comply with law — for example tax records, regulatory queries from Thai FDA, or court orders.

4. Cookies and similar technologies

We use a small number of cookies and tracking technologies:

  • Strictly necessary cookies — required for the site to function (e.g. remembering whether you have dismissed our consent banner). These do not need consent under PDPA or GDPR.
  • Google Analytics 4 — measures how visitors find and use the site (page views, time on page, traffic sources). Loaded only after you click "Accept" on our consent banner. IP addresses are anonymised. Google's privacy policy.
  • Microsoft Clarity — records anonymous session replays and heatmaps that help us see where people get stuck on the site. Loaded only after you click "Accept". Microsoft's privacy policy.
  • Meta (Facebook) Pixel — measures the effectiveness of our advertising on Facebook and Instagram and may be used to show you our ads after you visit. Loaded only after you click "Accept". Meta's privacy policy.
  • Other marketing pixels — we may add additional advertising pixels in future (for example TikTok, LINE Tag). Any addition will be reflected in this policy and gated behind the same consent banner.

If your browser sends a "Do Not Track" signal, no analytics or marketing trackers are loaded at all, regardless of your consent banner choice. You can change your consent decision any time by clearing your browser's site data for pawsitivet.com — the banner will reappear on your next visit.

You can also disable cookies entirely in your browser settings; the site will still work but some features may not.

5. Who we share data with

We do not sell personal data. We may share data with carefully selected processors who help us run the business:

  • Hosting and content-delivery providers (e.g. Vercel) that store and serve the site.
  • Email-sending and marketing providers used to deliver newsletters and transactional emails.
  • Analytics providers that aggregate site usage data.
  • Payment processors (when checkout is launched) — we will never store your full card number on our own servers.
  • Shipping and logistics providers that need your address to deliver products.
  • Professional advisers (lawyers, accountants, auditors) under a duty of confidentiality.
  • Government, regulators, or law enforcement when required by law.

We use written data-processing agreements with processors and require them to keep your data secure.

6. International transfers

Some of our processors are located outside Thailand (for example, Vercel hosting in the US/EU). Where we transfer personal data out of Thailand we rely on safeguards permitted by PDPA, including processors who are bound by data-protection terms consistent with Thai law, and, where applicable, the GDPR's standard contractual clauses.

7. How long we keep it

  • Contact-form messages: up to 24 months after our last reply, then deleted or anonymised.
  • Newsletter subscriber data: until you unsubscribe, plus a short suppression record so we don't email you again by mistake.
  • Order and tax records (once e-commerce launches): as long as Thai accounting and tax law requires (currently a minimum of 5 years).
  • Server logs: typically 30 to 90 days.

8. How we protect your data

We use HTTPS everywhere, restrict admin access, keep software up to date, and choose vendors with credible security practices. No system on the internet is 100% secure, and we can't guarantee absolute security, but we work hard to reduce risk.

9. Your rights

Subject to the limits in local law, you have the right to:

  • Access the personal data we hold about you.
  • Correct data that is inaccurate or incomplete.
  • Delete data we no longer have a lawful reason to keep.
  • Object to or restrict certain types of processing, including direct marketing.
  • Withdraw consent at any time, without affecting the lawfulness of earlier processing.
  • Portability — receive your data in a portable format, where technically feasible.
  • Lodge a complaint with the Personal Data Protection Committee of Thailand or, if you are in the EU, with your national data-protection authority.

To exercise any of these rights, email privacy@pawsitivet.com. We will respond within 30 days. We may need to verify your identity before acting on the request.

10. Marketing emails

If you sign up for our newsletter or wholesale list, we will email you with product news, training content, and occasional offers. Every email has an unsubscribe link. We never share your email with unrelated third parties for their marketing.

11. Third-party links

Our site may link to third-party sites (e.g. veterinary references, scientific papers, social media). We are not responsible for their privacy practices. Check their own privacy policies before sharing data with them.

12. Changes to this policy

We may update this policy from time to time. We will post any new version here and update the "Last updated" date at the top. Material changes will be flagged on the homepage or by email where appropriate.

13. Contact

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at privacy@pawsitivet.com