Privacy
Policy

ARCEN (“we”, “us”) sells sealed Japanese Pokémon trading card products to customers in Thailand and Southeast Asia. This policy explains what personal data we collect, why, and what you can do about it. We’ve kept it short and plain.

This policy is written to align with Thailand’s Personal Data Protection Act (PDPA).

Key points

• We collect only what we need to run the store and fulfil your orders.
• We use trusted services (payment, email, hosting, shipping) to operate — some are located outside Thailand.
• We never sell your personal data.
• Marketing emails are opt-in only, and you can unsubscribe anytime.
• You can ask to see, correct, or delete your data at any time.

What we collect, and why

• Email and display name — to create and operate your account, and to send you order and account information.
• Name and shipping address — to deliver your orders.
• Payment information — to process payments. This is handled securely by Stripe; we never see or store your full card number.
• Order and account activity — order history, loyalty balance, and referral activity, to run your account and our loyalty features.
• Marketing preference — whether you’ve chosen to receive our Source Report updates, so we only email you if you’ve asked us to.

We collect only what’s relevant and necessary for these purposes.

Who we share it with

We use trusted third-party services to run ARCEN. Each receives only the data needed to do its job:

• Stripe — payment processing
• Resend — sending emails
• Supabase and Vercel — website and database hosting
• Our Japan-side shipping consolidator — shipping and consolidation from Japan

We do not sell your personal data, and we don’t share it with anyone beyond the services needed to run the store and deliver your orders.

Data transferred outside Thailand

Some of the services above are located outside Thailand, so operating ARCEN involves transferring your data internationally. We only use reputable providers that apply recognised data-protection safeguards, and we share only what each needs to perform its service.

How we protect your data

We take reasonable measures to protect your personal data against unauthorised access, loss, or misuse. In the unlikely event of a data breach affecting your personal data, we will notify affected users and the relevant authority as required by law.

Your rights

Under the PDPA, you can ask us to:

• See what personal data we hold about you
• Correct anything that’s inaccurate
• Delete your account and associated data
• Withdraw marketing consent (or simply click unsubscribe in any email)

To make a request, email shop.arcen@gmail.com. We’ll respond within a reasonable time.

Marketing emails

We send our Source Report newsletter only to people who have opted in. Your consent is specific and freely given, and you can withdraw it at any time using the unsubscribe link in any marketing email. Withdrawing consent stops future marketing emails but doesn’t affect emails necessary for your orders and account.

Cookies and analytics

We use basic cookies and analytics needed to make the website work and to understand how it’s used. We don’t use them to build advertising profiles of you.

Changes to this policy

If we make meaningful changes, we’ll update the date at the top of this page. We review this policy periodically. Continued use of ARCEN after a change means you accept the updated policy.

Contact

Questions about your privacy or this policy? Email shop.arcen@gmail.com.