Privacy Policy

This policy explains what personal information we collect, why we collect it, and what we do with it. We keep as little as we can, for as long as we need, and we do not sell it to anyone.

Who we are

Gypsy Amazon Ltd, Moo 4, 26/2, Koh Samui, Surat Thani 84320, Thailand, is the controller of the personal information described here. You can reach us at tatiana@gypsyamazon.com about anything in this policy.

What we collect

When you order: your name, email address, shipping and billing address, phone number and order details.
When you pay: payment is handled by our payment providers. We never see or store your full card details.
When you subscribe: your email address, and your name if you give it.
When you browse: device and browser information, pages viewed, and how you arrived at our store. This is collected through cookies and similar technologies.
When you write to us: whatever you choose to tell us in your message.

Why we use it, and on what basis

To take, pack, ship and support your order — because we need it to perform our contract with you.
To send order and shipping updates — also to perform our contract.
To send marketing emails — only with your consent, which you can withdraw at any time.
To understand how our store is used and improve it — on the basis of our legitimate interest in running a functioning shop, and with your consent where cookies require it.
To prevent fraud — on the basis of our legitimate interest in protecting the business.
To meet accounting and tax obligations — because the law requires it.

Who we share it with

We share information only with the services that make the shop work, and only what they need:

Shopify, which hosts our store
Payment providers, to process your payment
Shipping carriers and our fulfilment partners in Brazil, Thailand and Bali, to deliver your order
Email and review services, to send you the updates you have asked for
Analytics services, to measure how the store is used

We may also disclose information where the law requires it. We do not sell your personal information.

International transfers

We operate from Thailand and ship from Brazil, Thailand and Bali, so your information may be processed outside your own country, including outside the European Economic Area. Where information is transferred out of the EEA we rely on the European Commission's Standard Contractual Clauses, or on another lawful transfer mechanism offered by the provider concerned. You can ask us for details of the safeguards that apply.

Cookies

Our store uses cookies to keep your cart working, remember your preferences and understand how the site is used. You can block or delete cookies in your browser settings, though some parts of the store may not work properly if you do.

How long we keep it

Order and invoice records: kept for as long as tax and accounting law requires, normally seven years.
Customer account details: kept while your account is open, and deleted on request.
Marketing contacts: kept until you unsubscribe, then removed from our mailing list.
Correspondence: kept for up to two years, so we can pick up a conversation where it left off.
Analytics data: kept in line with the retention settings of the services we use, normally no more than 26 months.

Your rights

Depending on where you live, you may have the right to ask us for a copy of the personal information we hold about you, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. You can also withdraw consent for marketing at any time, either through the unsubscribe link in any email or by writing to us.

To exercise any of these, write to tatiana@gypsyamazon.com. We will respond within one month.

If you are in the European Economic Area or the United Kingdom and you believe we have not handled your information properly, you also have the right to complain to your national data protection authority.

Children

Our store is not intended for children, and we do not knowingly collect information from them.

Changes to this policy

We may update this policy as our shop changes or the law requires. The date below tells you when it was last revised.

Last updated: 11 August 2026