Last updated: 27 April 2026
This is the privacy policy for Scramble Thailand — operated by BJJ Global Co., Ltd., the official Scramble distributor for Thailand and Southeast Asia. We take your data seriously and we don’t make this complicated.
This policy covers what we collect when you use our website, place an order, or contact us, what we do with that data, who we share it with, and what rights you have over it. If anything’s unclear, email us — details at the bottom.
Who we are
BJJ Global Co., Ltd. (“we”, “us”, “our”) runs scramblethailand.com and the storefront at scramblethailand.com. We’re registered in Thailand. We’re the data controller for any personal data collected through this site.
What we collect
The data we hold depends on what you do on the site:
When you place an order
- Your name, email address, phone number, and shipping/billing addresses
- The products you ordered, prices paid, and order history
- Shipping carrier tracking references
- Anything you tell us in order notes
We do not store card data. Card payments are processed directly by Stripe — your card details go from your browser to Stripe’s servers and we never see them. Stripe sends us back a confirmation token, not card data.
When you create an account
- Your email address and a hashed password (we never see the plaintext)
- Saved shipping/billing addresses (so you don’t have to retype them)
- Order history
- Any preferences you set
When you browse the site
- Browser type, operating system, screen size — for site analytics
- Which pages you visited and roughly where in the world you visited from (country / city level, not your exact address)
- How you arrived (search engine, direct, referral)
- Cookies — see our Cookie Policy for full details and how to opt out
When you contact us
If you email us, fill in the contact form, or message us via Instagram or LINE, we’ll have a record of that conversation including whatever you wrote in it.
Why we collect it
- To process your order — pack it, ship it, send confirmation emails, handle returns or exchanges.
- To run your account — log you in, remember your addresses, show your order history.
- To support you — answer questions about products, shipping, sizing, returns.
- To improve the site — analytics tell us what’s working, what isn’t, what to fix.
- To send marketing emails — only if you’ve opted in. You can unsubscribe at any time.
- To meet our legal obligations — tax records, accounting, fraud prevention.
Who we share it with
We share data only with the third parties we need to actually deliver an order or run the site:
- Stripe — payment processing. They have their own privacy policy at stripe.com/privacy.
- Shipping carriers — Thailand Post, Kerry Express, DHL, and others depending on your destination. They get your shipping address and phone number to deliver your order.
- Email service providers — to send order confirmations and (if opted in) marketing emails.
- Web hosting — the data sits on the servers running the site.
- Analytics — Google Analytics receives anonymised browsing data only if you’ve consented via the cookie banner. See Cookie Policy.
- Authorities — if we’re legally required to, e.g. tax records or a valid court order.
We do not sell your data. We don’t share it with advertisers or marketers outside this list. If that ever changes, we’ll update this policy and ask for fresh consent.
How long we keep it
- Order records — for at least 7 years, to meet Thai accounting and tax-record retention rules.
- Account info — until you ask us to delete the account.
- Marketing opt-in — until you unsubscribe.
- Support emails — typically 2 years after the conversation ends, then archived or deleted.
- Analytics data — anonymised aggregates retained per Google Analytics’ standard retention (currently 14 months).
Your rights
Under Thailand’s Personal Data Protection Act (PDPA) and, if you’re in the EU, the General Data Protection Regulation (GDPR), you have the right to:
- See what data we hold about you
- Correct anything that’s wrong
- Delete your data, subject to legal retention obligations (e.g. we have to keep order records for tax purposes)
- Withdraw consent for marketing or analytics any time
- Export your data in a standard format (PDPA + GDPR)
- Restrict how we use your data while a query is being resolved
- Object to specific uses of your data
- Complain to your local data protection authority — in Thailand that’s the PDPC, in the EU it’s your country’s data protection regulator
To exercise any of these rights, email us — see “Contact” below. We’ll respond within 30 days.
International data transfers
If you order from outside Thailand, your shipping data goes to your local courier in your country. If you’re in the EU, that means data leaves the EEA — Stripe, Google Analytics, and our hosting provider may process data outside the EEA under standard contractual clauses or equivalent safeguards.
Cookies
We use cookies for essential site features (cart, login, language) and, with your consent, for analytics and marketing. Full details — including how to opt out — are on our Cookie Policy page.
Children
We don’t knowingly collect data from children under 13. If you’re a parent and think your child has given us their data, email us and we’ll delete it.
Security
The site runs on HTTPS, passwords are hashed (not stored in plain text), card payments are tokenised by Stripe, and admin access is restricted. We can’t promise zero risk — no online service can — but we keep the basics tight.
Updates to this policy
If anything material changes — new processing purpose, new data category, new third party — we’ll update this page and bump the date at the top. For substantial changes we’ll email account-holders.
Contact
Questions, requests, or complaints about this policy or your data — email [email protected]. We’ll get back to you within a few working days.
BJJ Global Co., Ltd.
32/13 Soi Ari 2, Phaya Thai
Krung Thep Maha Nakhon, Thailand