Skip to content
PebbleCrete
EN
Tiếng ViệtภาษาไทยРусскийالعربيةEspañolPortuguêsFrançais
Request samples
Menu

Privacy Notice

Effective date: 1 November 2026

This Privacy Notice explains how we collect, use, store and protect personal data when you visit pebblecrete.com, send us an enquiry, or contact us by email, LINE or WhatsApp. We are a business-to-business (B2B) manufacturer of cement-based exposed-aggregate pool finishes. Our primary privacy law is the Thailand Personal Data Protection Act B.E. 2562 (2019) (PDPA). Section 8 explains what also applies to visitors from the EU and EEA.

1. Data controller and contact details

The data controller responsible for your personal data is:

We have not appointed a Data Protection Officer. All privacy requests and questions about this notice go to info@pebblecrete.com. You may also contact us through our LINE Official Account or WhatsApp.

2. Website enquiry form and spam protection

Enquiry form (/contact-us/)

When you send us an enquiry through our form at /contact-us/, we collect the details you provide:

Your name and email address are required so that we can reply. Without them, we cannot answer your enquiry. The other fields are optional, and no law requires you to give us any of this information.

We use this information to reply to your request, send samples and quotes, and keep a record of the business conversation. Our legal basis is taking steps at your request before a contract, performing a contract with you, and our legitimate interest in keeping business records. Enquiries are stored in a restricted inbox inside the website, which is visible only to authorised administrators. A notification email also goes to info@pebblecrete.com.

Spam and abuse protection

To protect the form from spam and abuse, it uses a hidden honeypot field and a rate limit. The rate limit keeps one-way hashed forms of your IP address and email address for a short time. They are not linked to your enquiry and are deleted automatically. Our legal basis is our legitimate interest in keeping the form secure.

3. Email, LINE and WhatsApp messages

When you send an email to our addresses or a message to our LINE Official Accounts or WhatsApp number, we keep the messages, photos and files you send us in our company records. We use them to reply to you and to keep business records. Our legal basis is the same as for the enquiry form: taking steps at your request before a contract, performing a contract with you, and our legitimate interest in keeping business records.

If you send a voice message on LINE, it may be converted to text so that our team can read it. The audio file is then deleted, and the text is kept with the conversation. When you use LINE, LINE also processes your data under its own privacy policy (LY Corporation). When you use WhatsApp, WhatsApp also processes your data under its own privacy policy (Meta).

4. Cookies, server logs and external links

Cookies and analytics

Our public website does not set cookies for visitors. We use no analytics, advertising or tracking tools. WordPress sets technical cookies only for staff who log in to manage the site.

Server logs and crawler visits

Our web host keeps standard server access logs, including IP address, date, page and browser. These logs are kept for security and operation, for a limited period set by the host. Our legal basis is our legitimate interest in keeping the website secure and running. Our website also counts visits by known search-engine and AI crawlers, recording only the crawler name and page. No IP address is recorded for these crawler counts, and they are kept for 180 days.

External links

Our website includes links to LINE, WhatsApp, Facebook, Instagram and the Pebble Pools website (a separate company). These external services have their own privacy policies. Nothing is loaded from them while you browse our site unless you click a link.

5. Service providers and international transfers

We use service providers (data processors) that store or process data for us to run our website and communications:

Some of these providers are outside Thailand. Where personal data is stored or processed outside Thailand, we rely on the providers’ contractual and security safeguards, as permitted by sections 28 and 29 of the PDPA. When you contact us by email, LINE or WhatsApp, the transfer of your message through those services is also necessary so that we can answer you.

We do not sell personal data. We do not use it for automated decisions. We do not send marketing newsletters from the website form.

6. Data retention and security

We keep enquiries and business correspondence for as long as needed for your request and our business relationship. Where records form part of a commercial transaction, we keep them for the period required by Thai accounting and tax law. Otherwise, we keep them for no longer than 5 years after our last contact, unless the law requires longer, and then delete or anonymise them. Retention periods for server logs and crawler counts are given in the sections above.

We protect personal data with access controls, two-factor login for website administrators, and an encrypted connection (HTTPS) to our website.

7. Your rights under the PDPA

Under the PDPA, you have the following rights regarding your personal data:

To make a privacy request, write to info@pebblecrete.com. We reply to requests within 30 days. You also have the right to lodge a complaint with the Office of the Personal Data Protection Committee (PDPC), Thailand, at https://www.pdpc.or.th.

8. Visitors from the EU and EEA

Our website also serves business visitors from the European Union (EU) and the European Economic Area (EEA). Where the General Data Protection Regulation (GDPR) applies to you, the following also applies.

Our legal bases are those described above: taking steps at your request before a contract and performing a contract (Article 6(1)(b) GDPR), and our legitimate interests in keeping business records and keeping our website secure (Article 6(1)(f) GDPR).

We are established in Thailand. The data you send us is processed in Thailand and by the service providers listed in section 5. This transfer is necessary to reply to you and to take steps towards or perform a contract with you; for our service providers, we rely on their contractual and security safeguards. We have not appointed a representative in the EU or EEA.

You have the right to access, rectify or erase your personal data, to restrict its processing, to data portability, and to withdraw consent where consent is the basis. You also have the right to object at any time to processing based on our legitimate interests. Send any GDPR request to info@pebblecrete.com. You may also lodge a complaint with the data protection supervisory authority in your EU or EEA country.

9. Children and changes to this notice

Our website is for professionals and businesses, not for children.

We may update this Privacy Notice when our practices or legal requirements change. The current version is always available at https://pebblecrete.com/privacy-policy/.

How we use your enquiry
Chat on LINE@pebblecrete