BPX · PRIVACY

Privacy Policy

What we collect, why, where it lives, and how you can have it removed.

Effective: 2026-08-16

1. Controller

Data controller: BPX Thailand
Address: 5F Toppil Bldg, 15 Pildong-ro, Jung-gu, Seoul, Korea
Privacy contact: contact@bpxthai.com

2. What we collect

Account data — LINE user identifier, display name, email (when signing in on the web), language.
Order data — items, quantity, amount, recipient name, delivery address, contact number.
Referral data — QRs issued, scans, and the BP entitled to cashback.
Usage data — interest taps, guidebook progress, CHAT 24 questions, product requests.
BPX BEAUTY SCAN images — stored only if you consent to automated image analysis.
Technical data — access times and the minimum logs needed for security.

3. We do not store payment credentials

Card and payment details are handled by the payment provider directly. Our systems keep only the result — status, amount and a transaction reference. No card numbers are stored with us.

4. Purposes and legal bases

Performance of contract — creating orders, delivering, computing BP shares.
Legitimate interests — fraud prevention, system security, service improvement.
Legal obligation — accounting and tax record retention.
Consent — automated image analysis and marketing messages; withdrawable at any time.

5. Disclosure to third parties

Payment provider — to process payments and refunds.
Delivery partners — recipient name, address and phone, limited to what delivery requires.
LINE — when you contact the official account, your user identifier is used to reply to you.
We never sell personal data.

6. Storage and cross-border transfer

Data is held in a database the Company operates itself, on servers located in the Republic of Korea. Using the service from Thailand therefore involves a cross-border transfer. We protect it with transport encryption, least-privilege access and access logging.

7. Retention

Account data — until you close your membership.
Order, payment and settlement records — for the period required by accounting and tax law.
CHAT 24 logs and product requests — kept in a form useful for improving the service; identifiers are removed once unnecessary.
Data past its period is deleted or de-identified.

8. Your rights

You may request access, a copy, rectification, erasure, restriction, portability, objection to processing, and withdrawal of consent at any time (Thailand PDPA and related law).

Send requests to contact@bpxthai.com or via the LINE OA; we respond within the statutory period.

9. What BPs can see

A BP sees only their own performance — their sales, cashback and QR statistics. Customer personal data is not exposed to BPs.

10. Cookies

We use cookies for sign-in, remembering your language and measuring aggregate usage. You can refuse them in your browser, though some functions may stop working.

11. Changes

Material changes are announced in the service or via the LINE OA before they take effect.