Privacy Policy

Effective 25 October 2026

This Privacy Policy explains how Together With Co., Ltd., the company behind Somuti (“we”, “us”), collects, uses, shares and protects your personal data when you visit www.somuti.com, shop with us online or at our Song Wat shop, join the IF Membership, or contact us. We follow Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”), and we are the data controller for your personal data.

1. Who we are and how to reach us

Company Together With Co., Ltd. (Somuti)
Shop address 981/5 Song Wat Road, Samphanthawong, Bangkok 10100
Email [email protected]
Phone 086 456 6956
LINE Somuti.Official

2. Personal data we collect

  • Account and IF Membership first name, last name, email, password (stored encrypted), country, gender and date of birth.
  • Orders billing and delivery name, address, phone number and email, the products you order and your order history.
  • Payment card, QR (PromptPay) and e-wallet payments are processed by our payment provider, Ksher. Your card details go straight to Ksher, so we never see or store your full card number. If you choose to save a card, Ksher keeps it securely for your next order.
  • Messages what you send us through our contact form, email, LINE, Instagram or Facebook.
  • Technical data IP address, browser and device type, pages visited, how you arrived at our website and cookie identifiers.

We do not intend to collect sensitive personal data, such as health, religious or biometric data, so please don’t send it to us.

3. Why we use your data and our legal basis

  • To process and deliver your orders, handle exchanges and returns, and answer your questions (contract).
  • To run your account and the IF Membership, including member discounts and birthday offers (contract).
  • To keep accounting and tax records (legal obligation).
  • To keep our website secure, prevent fraud and improve our products and service, including looking at purchase trends (legitimate interests, balanced against your rights).
  • To send you news, offers and new scents by email or LINE (consent). You can unsubscribe at any time through the link in each email or by contacting us.
  • Non-essential cookies (consent, given in our cookie banner).

If you don’t give us the data we need for an order or an account, we may not be able to complete it.

4. Who we share your data with

We never sell your personal data. We share only what is needed with

  • delivery companies, to send your orders
  • Ksher and banks, to process and confirm your payment
  • companies that host and run our website, email and IT systems, under contract and only on our instructions
  • Google, which runs Google Analytics for us, only if you accept analytics cookies
  • LINE, Meta (Instagram and Facebook) and other platforms when you choose to contact us through them, under their own privacy policies
  • government authorities, courts or the police when the law requires it

5. Transfers outside Thailand

Some of our service providers, such as hosting and email, may store data on servers outside Thailand. When this happens, we use providers with appropriate data protection standards, as the PDPA requires.

6. How long we keep your data

  • Account and membership data, until you close your account. We may delete accounts that have not been used for 3 years.
  • Order, payment and tax records, for at least 5 years, as Thai accounting and tax law requires.
  • Marketing data, until you withdraw your consent.
  • Messages, for up to 2 years after our last conversation.
  • Cookies, for the period shown in our cookie banner.

After that, we delete your data or make it anonymous.

7. Your rights

Under the PDPA, you have the right to

  • access your personal data and get a copy of it
  • receive your data in a commonly used format, or have it sent to another company
  • correct data that is wrong or out of date
  • ask us to delete your data or make it anonymous
  • ask us to restrict how we use your data
  • object to how we use your data, including for direct marketing
  • withdraw your consent at any time, without affecting what we did before you withdrew it
  • complain to the Office of the Personal Data Protection Committee (PDPC) at www.pdpc.or.th

To use any of these rights, email us at [email protected]. We may ask you to confirm your identity first, and we will reply within 30 days. Some rights have limits under the law. For example, we must keep tax records even if you ask us to delete your data.

8. Cookies

Cookies are small files saved in your browser. We use

  • Necessary cookies for your cart, log-in, language and security. Our website can’t work without them.
  • Analytics cookies (Google Analytics) that record how you found our website and which pages you visit, so we know which channels work. They stay off until you accept them in our cookie banner, and Google may process this data outside Thailand.

On your first visit, you can accept or decline non-necessary cookies in our cookie banner. You can also delete cookies at any time in your browser settings.

9. Keeping your data safe

We use appropriate technical and organisational measures, such as encrypted connections (HTTPS), encrypted passwords and limited staff access. No system is 100% secure. If a data breach is likely to affect your rights, we will report it to the PDPC within 72 hours, and tell you without delay if the risk to you is high.

10. Minors

Our website is meant for adults. If you are under 20, please ask your parent or guardian before you create an account or place an order. We do not knowingly collect data from children under 10 without a parent’s consent. If you believe a child has given us personal data, please contact us and we will delete it.

11. Links to other websites

Our website links to other websites, such as Instagram, Facebook, LINE and Google Maps. We are not responsible for how they handle your data, so please read their own privacy policies.

12. Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new effective date, and tell members by email if a change is significant.