Privacy policy
This policy explains what personal information White Rose Murals collects when you browse, order or contact us, why we hold it, and the choices you have. We keep it plain rather than legalistic, and we only collect what we need to make and deliver your mural.
What we collect
Depending on how you use the site, we may collect:
- Contact details — your name, email and phone number, so we can confirm your order and the courier can reach you.
- Delivery address — the shipping address you enter at checkout, used to print the label and send your mural.
- Order details — the designs, materials and wall sizes you order, plus your order history if you create an account.
- Uploaded artwork — any images you upload for a custom mural, kept privately so our team can check the resolution and print them.
- Payment information — handled entirely by Stripe. We never see or store your full card number; we only receive confirmation that a payment succeeded.
- Basic usage data — lightweight, privacy-friendly analytics events such as pages viewed and checkout steps completed, which help us improve the site. These are not used to build advertising profiles.
Why we use it
- To take, print and deliver your order, and to email you as its status changes.
- To answer your messages and provide support.
- To prevent fraud and keep payments secure.
- To meet our legal, accounting and tax obligations in Thailand.
- To understand which parts of the site work well and improve them.
Who we share it with
We do not sell your personal information. We share it only with the partners we need to fulfil your order:
- Stripe — to process your card or PromptPay payment securely.
- Our print shop — to produce your mural and print the delivery label. They receive your order details, delivery address and a time-limited link to your artwork.
- Couriers — to deliver your mural, including your name, address and phone number.
- Supabase and Vercel — our database and hosting providers, who process data on our behalf.
- Anyone we are legally required to share it with, where the law asks us to.
How we protect your artwork
Your full-resolution artwork is stored in a private location that is not publicly accessible. When we send it to print, our print shop receives a signed link that expires after seven days.
Artwork you upload without completing an order is deleted after 30 days.
How long we keep it
We keep your order records for as long as we need them to support your order and to meet the accounting and tax record-keeping requirements of Thai law.
Uploaded artwork that is not linked to an order is deleted after 30 days. You can ask us to close your account and delete the personal data we hold about you at any time.
Your rights under the PDPA
Under Thailand's Personal Data Protection Act, you can ask to see the personal information we hold about you, have it corrected, or have it deleted, and you can withdraw consent for optional uses such as analytics.
To make a request, contact us using the details below and we will respond within a reasonable time.
Cookies and browser storage
We use a small amount of browser storage to remember your cart, your saved favourites and your language, and to keep you signed in if you have an account. These are needed for the site to work and do not track you across other websites.
Questions about your privacy, or want to make a request about your data? Contact us