Privacy Policy

Pixie.wholesale (“we”, “us”) runs pixiewholesale.com, a wholesale vintage and Y2K clothing shop based in Thailand that ships worldwide. This policy explains what personal data we collect, why, who helps us process it, and the choices you have. It is written to meet Thailand’s Personal Data Protection Act (PDPA) and the EU/UK General Data Protection Regulation (GDPR).

Questions or requests: email hello@pixiewholesale.com.

What we collect

• Account details — your name, email address and password. Passwords are stored only as a one-way scrambled value (hash); we cannot see them.
• Email confirmation and password reset — whether your email is confirmed, and short-lived one-time codes sent to your inbox.
• Orders — order number, summary, amount, status and any shipping tracking number that we add when you order with us.
• Reviews — the display name, rating and comment you submit. Reviews are published only after we approve them.
• Restock alerts — your email and the collection you asked to hear about.
• Technical data — your IP address and basic request details, used for security (for example to slow down repeated wrong passwords) and kept only briefly.

We do not take payments on this website and we do not collect card or bank details here.

Why we use it

• To create and secure your account and let you sign in — to provide the service you asked for (contract).
• To show you your orders and their shipping status — contract.
• To send emails you need: email confirmation, password reset codes, order updates and the restock alerts you requested — contract, or your consent for restock alerts.
• To protect the shop from abuse and fraud — our legitimate interest in keeping the service safe.

We do not sell your data, we do not use it for advertising, and we do not send marketing emails unless you clearly ask for them.

Cookies

We use only cookies that are necessary for the site to work: a sign-in cookie that keeps you logged in (it expires after 8 hours), and security cookies set by our hosting provider, Cloudflare, to block automated attacks. We do not use analytics, advertising or tracking cookies.

Who helps us

We share data only with service providers that process it on our behalf and under their own security and privacy commitments:

• Cloudflare — hosts the website, database and images.
• Brevo — sends our emails (confirmation, password reset, order and restock emails).
• Google Workspace — our shop mailbox, when you email us.
• 17TRACK — if we track your parcel automatically, we share the tracking number and carrier only.

When you contact us through Instagram, TikTok or WhatsApp, those platforms handle your messages under their own privacy policies.

International transfers

Our providers may process data outside your country, including outside Thailand and the EU. Where required, they use recognised safeguards such as standard contractual clauses.

How long we keep it

• Account details: until you ask us to delete your account.
• Orders: for as long as needed to serve you and to meet accounting and legal duties.
• Sign-in sessions: up to 8 hours. Password reset codes: minutes. Security records of failed sign-ins: about 15 minutes.
• Restock alerts: until the alert is sent or you cancel it.

Your rights

You can ask us to access, correct or delete your personal data, to restrict or object to how we use it, or to receive a copy of it. You can withdraw consent (for example, cancel restock alerts) at any time. Email hello@pixiewholesale.com from the address on your account; we reply within 30 days. You may also complain to a data protection authority — in Thailand, the Personal Data Protection Committee (PDPC); in the EU or UK, your local authority.

Children

This is a wholesale service for businesses and adults. It is not intended for children under 16, and we do not knowingly collect their data.

Changes

If we change this policy, we will update the date at the top of this page.