Privacy Policy
Draft for legal review. Josh & John Designs. Effective date: 30 September 2026
1. Who we are
This website, joshandjohndesigns.com, is operated by Josh & John Designs ("Josh & John Designs", "we", "us"), located at K.B.S Building, Suite 207, 2nd Floor, Mahesak, Si Lom, Bang Rak, Bangkok 10500, Thailand. We are the data controller of the personal data described in this policy under Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA").
Contact for privacy matters: joshandjohndesigns7@gmail.com
2. What personal data we collect
Information you give us. When you send an inquiry, request a custom design, or contact us by form, LINE, WhatsApp, Instagram, Facebook or email, we collect your name, contact details (phone number, email, LINE or WhatsApp ID), the message you send, the product or stone you are asking about, and, for custom orders, your design preferences, budget and timeline. For trade inquiries we also collect your business name.
Information collected automatically. When you visit the website, we and our service providers may collect technical data such as your IP address, browser and device type, pages visited, and approximate location, through cookies and similar technologies [confirm which analytics tools are used, if any].
Information on orders and delivery. If you proceed with a purchase, we collect your delivery address and the details needed to issue a quotation, invoice or receipt, and to arrange delivery.
We do not ask you for payment card details through this website. The website does not currently have online checkout.
3. Why we use your data
To respond to your inquiries and provide quotations (to take steps at your request before entering into a contract).
To design, make, deliver and maintain jewelry and to supply loose diamonds (to perform our contract with you).
To keep records, issue invoices and meet legal, accounting and tax obligations (legal obligation).
To operate, secure and improve the website, and to prevent fraud and misuse (our legitimate interests).
To send you news, collection announcements or offers, only where you have agreed (your consent). You can withdraw consent at any time.
4. Who we share your data with
We do not sell your personal data. We share it only as needed with:
Service providers that help us run the business, such as website hosting and database providers, email and messaging platforms (LINE, WhatsApp, Meta), analytics providers, and delivery couriers such as Thailand Post and FedEx.
Our professional advisers (accountants, lawyers) and authorities when the law requires.
We do not share your personal data with our sister company George Diamonds Co., Ltd.
When you contact us through LINE, WhatsApp, Instagram or Facebook, those platforms process your data under their own privacy policies.
5. Transfers outside Thailand
Some of our service providers store or process data outside Thailand. Where this happens, we take steps to make sure your data receives protection that meets the PDPA's requirements.
6. How long do we keep your data
We keep inquiry records for as long as needed, to answer you and for 12 months afterwards, unless you become a customer. Customer and order records are kept for as long as needed for maintenance, warranty and legal, accounting and tax requirements (10 years for accounting records). After that we delete or anonymize the data.
7. Cookies
Our website uses cookies that are necessary for it to work, and analytics cookies that help us understand how visitors use it. You can control cookies in your browser settings. Where required, we ask for your consent before using non-essential cookies.
8. Your rights
Under the PDPA you have the right to:
access and obtain a copy of your personal data;
have inaccurate or incomplete data corrected;
request deletion, anonymisation or restriction of your data in the cases the law allows;
object to our processing in the cases the law allows;
receive your data in a portable format where applicable;
withdraw consent at any time (this does not affect processing already carried out); and
complain to the Personal Data Protection Committee or its Office if you believe we have not complied with the PDPA.
To use these rights, email joshandjohndesigns7@gmail.com. We will respond within the time the law requires, normally within 30 days.
9. Security
We use reasonable technical and organisational measures to protect your data, including access controls and encrypted connections (HTTPS). No online system is completely secure, so we cannot guarantee absolute security.
10. Children
This website is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, please contact us and we will delete it.
11. Links to other sites
The website links to other services, such as LINE, WhatsApp, Instagram, Facebook and gemological laboratory verification pages. We are not responsible for their privacy practices.
12. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page with its effective date.
13. Contact us
Josh & John Designs, K.B.S Building, Suite 207, 2nd Floor, Mahesak, Si Lom, Bang Rak, Bangkok 10500 Email: joshandjohndesigns7@gmail.com WhatsApp: +66 81 019 1416
