Privacy Notice
Little Lion Children's Bookshop — Personal Data Protection Act (PDPA). Last updated 7 July 2026.
This notice explains how we handle your personal data under Thailand's Personal Data Protection Act B.E. 2562 (2019).
1. Who we are (Data Controller)
Little Lion Children's Bookshop, the official brand of KAANDUU Co., Ltd. ("Little Lion", "we", "us"), 1/130-1/131 Moo 5, Nong Khwai, Hang Dong, Chiang Mai 50230, Thailand. For any privacy question or to exercise your rights, contact us at care@littlelionbookshop.com.
2. The personal data we collect
When you browse, register a member account, place an order, or join our rewards program, we may collect:
- Identity & contact: name, email address, phone number.
- Delivery & billing: shipping and billing address.
- Account: login credentials, order history, wishlist, member/rewards status and points.
- Communications: messages you send us and your marketing preferences.
- Technical: IP address, device/browser information and cookies (see section 9).
- Payment: card/e-payment is processed by our third-party payment provider (Stripe). We do not collect or store your full card number — it goes directly to the provider.
3. Why we use it, and our legal basis (PDPA)
| Purpose | Legal basis |
|---|---|
| Create and manage your member account | Performance of a contract / your request |
| Process, fulfil, and deliver your orders | Performance of a contract |
| Take payment via our payment provider | Performance of a contract |
| Operate the Little Lion rewards program | Contract (membership) / consent |
| Send order and account notifications | Contract / legitimate interest |
| Send marketing (offers, news) — only if you opt in | Consent |
| Prevent fraud, keep the site secure, comply with law | Legitimate interest / legal obligation |
4. Rewards program & marketing consent
Creating a member account to check out enrols you in the Little Lion rewards program as part of your membership. Marketing messages (promotions, newsletters) are sent only if you opt in, and you can withdraw that consent at any time — via the unsubscribe link in any email or by contacting care@littlelionbookshop.com. Withdrawing marketing consent does not affect order or account notifications you need to receive as a customer.
5. Who we share it with
We share personal data only as needed to run the shop:
- Delivery courier — name, address, phone, to deliver orders to you.
- Payment provider (Stripe) — to process your payment securely.
- Technology providers — our online store and hosting run on Odoo (Odoo S.A.), our email on Google Workspace, and related service providers who process data on our behalf under confidentiality obligations.
We do not sell your personal data.
6. International transfer
Some providers above (e.g. our store/hosting and payment provider) may process data on servers outside Thailand. Where they do, we take reasonable steps so your data receives an adequate standard of protection consistent with the PDPA.
7. How long we keep it
We keep your data for as long as your account is active and as needed to provide the service, then for the period required to meet legal, tax, and accounting obligations (up to 5 years for transaction records), after which it is deleted or anonymised.
8. Your rights under the PDPA
Subject to the law, you may: access a copy of your data; ask us to correct it; request erasure; withdraw consent; object to or ask us to restrict certain processing; and request data portability. To exercise any right, email care@littlelionbookshop.com. You also have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.
9. Cookies
We use cookies to keep you logged in, remember your cart, and understand how the site is used so we can improve it. You can control cookies in your browser settings; some features may not work without them.
10. Changes to this notice
We may update this notice from time to time. The current version and its date are always shown on this page.