Privacy
Your data
How The High Supply Co., Ltd. handles your personal data under Thailand's Personal Data Protection Act B.E. 2562 (PDPA). Last updated 27 October 2026.
1.Who we are
The data controller is The High Supply Co., Ltd. (“we”). We run Rustic & Blue.
- Company
- The High Supply Co., Ltd.
- Registration no.
- 0835565014436
- Registered address
- 39/7 Moo 7, Thep Krasatti, Thalang, Phuket 83110, Thailand
- Studio address
- 39/6 Moo 7, Thep Krasatti, Thalang, Phuket 83110, Thailand
- Phone
- +66 82 619 5948 or +66 96 978 9598
- Form
- Visit page
To contact us about your data, use any of these channels. We have not appointed a data protection officer, so they reach the people who handle your data.
2.What we collect and why
We give you this notice when you first share data with us.
The table shows, for each use, what we collect, why, on what legal basis and how long we keep it.
| Use | Data | Purpose and legal basis | Kept for |
|---|---|---|---|
| Booking a class | Name, email, optional phone, number of seats, and whether you want our newsletter. | To hold your place, send your confirmation, reminders and any change, and run the class. Legal basis: performing the booking you asked for. | Until the class has run, then as long as our accounting and dispute records need it. |
| Shop order | Name, email, optional phone and the items you chose. We ask for an address only if we ever deliver. | To prepare the order, tell you about it and give you your receipt. Legal basis: performing the order you placed. | As long as the order may be queried and our Thai accounting records require. |
| Online payment | The order and its amount. Card details go straight to our payment provider and never reach us. | To take payment and, if needed, refund it. Legal basis: performing the order. | As long as Thai accounting rules require us to keep payment records. |
| Contact form | Your email and your message. | To read and answer your message. Legal basis: our legitimate interest in replying to people who write to us. | Until your question is settled, then for a short time in case you write again. |
| Mailing list | Your email, and a record of when you joined or left. | To send our newsletter. Legal basis: your consent. We keep a record of consent so we never write to someone who left. | Until you leave the list. We then keep only the record that you left. |
| Security | Your IP address, when you submit a form. | To check that a form is sent by a person and to block abuse. Legal basis: our legitimate interest in keeping the site safe. | Only as long as the check needs it. |
Giving us your name and email is needed to make a booking or an order, because we cannot hold a place or prepare goods without them. If you do not give them, we cannot take the booking or order.
Your phone number, the newsletter and any message you send are your choice, and declining them costs you nothing.
3.Who receives your data
We share your data only with the providers we need to run the site and the business. Each handles it for us, for the purposes above. They are:
- Our website hosting and database provider, which stores the site, bookings, orders and uploaded files.
- Our email delivery provider, which sends our emails and keeps the mailing list.
- A security service that checks form submissions come from a person. It sees your IP address.
- Our payment provider, Opn Payments, which takes card and PromptPay payments.
- The messaging app our staff use to receive booking, order and message notices.
- Where the law requires it, Thai authorities and our accountants.
We do not sell your data and we do not use it for advertising. We can name our providers if you ask.
Some of these providers store or process data outside Thailand. We choose providers that publish data protection commitments, and we transfer data abroad only in the ways the PDPA allows (sections 28 and 29).
5.Your rights
Under the PDPA you may ask us to:
- tell you whether we hold data about you and give you a copy;
- send your data to you or to another controller in a common format, where that applies;
- correct data that is wrong or out of date;
- delete your data, or stop using it for now;
- stop using your data in a way you object to; and
- withdraw your consent, for example to the newsletter, at any time.
Withdrawing consent does not affect what we did before you withdrew. Every newsletter has a one-click unsubscribe link.
To use a right, contact us as set out under Who we are. We may need to confirm it is you.
We answer within 30 days of your request. If we cannot do what you ask, we say why.
If you think we have handled your data unlawfully, you may complain to the Office of the Personal Data Protection Committee (PDPC), the Thai regulator. We would like the chance to put it right first.
6.Children
This site is not for children under 20, and we do not knowingly collect their data. Children are welcome at the studio, but an adult makes any booking or order for them.
7.Changes to this notice
If we change how we use your data, we update this page and its date. For a change that needs your consent, we ask you again. This notice took effect on 27 October 2026. Our terms for orders and bookings are on the policies page.