Privacy Policy

Sheep Gadget Co., Ltd. (Head office)
1 Ched Jeera Building, 4th Floor, Soi Lat Phrao 19, Lat Phrao Road, Chom Phon, Chatuchak, Bangkok 10900, Thailand
Company registration no. 0515561000590

For any personal-data matter: email customerservice@applesheep.com (subject “PDPA”), tel +66 2-101-9999 (Mon–Fri 10:00–18:00), or use the personal data request form.

• Identity and contact data — name, phone number, email, delivery and billing address, tax ID (only if you ask for a full tax invoice), LINE / Facebook / Instagram name or ID when you message us.
• Order data — products, prices, order history, payment slips or payment status, returns, exchanges and claims.
• Payment data — handled by licensed payment providers. We never store or see your full card number, CVV or OTP; we receive only payment status, amount, card type and the last 4 digits.
• Member SHEEP account — email, sign-in codes, orders and saved addresses.
• SHEEP Device — the device models you choose to save (e.g. iPhone 17 Pro Max), so we can highlight and check matching products.
• SHEEP AI — the messages you type, the page you were on, your saved SHEEP Device models and products added to the cart from the chat.
• Contact form — your message and, for business enquiries, company name, quantity or budget.
• Technical data — IP address, device and browser type, pages viewed, cookies and similar identifiers (see section 7).
• Marketing preferences — whether you agreed to receive news and offers, and when.

We do not ask for sensitive data (such as religion, health or biometric data) or ID-card copies on this website. Please do not send them to us in chat or forms; if you do, we will delete them.

If you do not give the data needed for an order (such as name, phone and address), we cannot deliver it. You can refuse or withdraw marketing and cookie consent at any time without affecting your purchases.

We share only what each party needs, under contracts that require them to protect it:

• Online store platform: Shopify
• Payment providers and banks
• Carriers: Thailand Post (EMS), KEX and international shipping partners
• Order and stock management and automation tools (e.g. Zort, Make)
• SHEEP AI: hosting by Netlify and the AI model provider Anthropic
• Messaging and email providers (e.g. LINE, Meta, Google)
• Analytics and advertising: Google, Meta, TikTok — only if you consent
• Auditors, legal advisers, and government authorities when the law requires

We do not sell your personal data.

Some providers above (such as Shopify, Netlify, Anthropic, Google, Meta and TikTok) store or process data on servers outside Thailand, for example in the United States, Canada, Singapore or the EU. We transfer data only as allowed by sections 28–29 of the PDPA — for example where it is needed to perform our contract with you, or where the recipient applies appropriate safeguards such as standard data-protection contract terms.

If there is a dispute, we may keep the related data until it is resolved and the legal limitation period ends. After that, data is deleted or made anonymous.

Necessary cookies keep the site working (cart, sign-in, your chosen store, delivery country and SHEEP Device). Analytics and marketing cookies are used only after you agree in the cookie banner. Full list in the Cookie Policy.

Cookie settings

1. Withdraw consent at any time
2. Access and obtain a copy of your data, and ask how we obtained it
3. Data portability (receive or transfer data kept in automated form)
4. Object to processing, including direct marketing
5. Have your data deleted, destroyed or anonymised
6. Restrict the use of your data
7. Have your data corrected and kept up to date
8. Lodge a complaint with the Office of the Personal Data Protection Committee (pdpc.or.th)

Use the personal data request form or email customerservice@applesheep.com. We may ask you to confirm your identity, and we reply within 30 days. Requests are free of charge. We may refuse a request only where the law allows, and we will tell you why. Withdrawing consent does not affect processing that took place before.

Make a request

Under Thai law, a person under 20 is a minor. If you are under 20, please ask your parent or guardian before signing up for marketing news or giving any other consent. We do not knowingly collect data from children under 10 without the consent of a parent or guardian; if we find we have, we will delete it.

We protect personal data with access controls, encrypted connections (HTTPS) and limited staff access on a need-to-know basis. If a data breach is likely to put your rights at risk, we notify the Office of the PDPC within 72 hours and inform you without delay where the risk is high.

We may update this notice; the latest version and date are always on this page. Important changes will also be announced on the website.