Privacy policy
Orders and messages
When you order or contact us, we store the details you give (name, phone, delivery address, LINE ID, gift card text) to prepare and deliver your order. We don't share them with advertisers.
Waitlist
Who is responsible. Ondine is run by Tim Grassin, who is responsible for your data. Ondine is not a company. To reach him, use the form at ondinehouse.com/contact or message @ondine.bkk on Instagram.
What we collect. When you join the waitlist we ask for your mobile number (required), your name (optional), your email (optional) and your delivery postcode (required). We also record automatically: the box you were looking at, the page language, the UTM source, medium and campaign tags of the link that brought you, the website that referred you (domain only), the first page you landed on (path only) and your device type (mobile or desktop). We also record whether and when your free madeleine has been used.
Why. To tell you when the next boxes open, to plan quantities and our delivery area, to greet you by name and to add your free madeleine to your first order. Only if you tick the second box: to tell you about later drops and Ondine news.
Legal basis. Your consent. You can withdraw it at any time.
What you must give. We need your mobile number and postcode to add you to the waitlist: without them we can't contact you or check whether we deliver to you. Email is optional.
How long we keep it. We keep it for 12 months after you sign up or after we next open orders, whichever is later, then delete it if you haven't ordered. If you ticked the news box, we keep your contact details for news until you withdraw.
Who receives it. Lovable, which hosts our website and its database (Lovable Cloud), and Supabase, the database service it runs on, store it for us. We don't sell it and we don't share it with advertisers. Your name, phone number, email and postcode are never sent to Google Analytics, Meta or Microsoft Clarity.
Where it is stored. Lovable and Supabase store it on servers outside Thailand, which may include India and the United States. Each protects it under its own data protection terms.
Your rights. You can withdraw your consent; ask to see your data and get a copy; ask us to send it to another service; object, including to direct marketing at any time; ask us to delete it, limit its use or correct it; and complain to the Personal Data Protection Committee (PDPC) at https://www.pdpc.or.th.
Leaving the waitlist. Use the form at ondinehouse.com/contact and choose "Remove me from the waitlist", or message @ondine.bkk on Instagram. We handle requests within 30 days.
Security. The waitlist can't be read publicly. Only Tim, and the service providers and tools that work for Ondine under his account (Lovable and the database host, Supabase), can access it. If a data breach puts your data at risk, we tell the PDPC within 72 hours of finding out, and if the risk to you is high, we tell you too, without delay.
LINE. If you add Ondine's LINE Official Account as a friend, Tim Grassin, who runs Ondine, receives your LINE display name, profile picture and the messages you send us. We use them to answer you and to tell you when the next boxes open. We keep chats for 12 months after your last message, unless you ask us to delete them sooner. LINE is run by LY Corporation, which stores this data on its own systems, which may be outside Thailand, under its own privacy policy and safeguards. You can block or remove our account in LINE at any time, or ask us to delete your chats through ondinehouse.com/contact.
Madeleine News
If you sign up, we keep your email or LINE ID to send you news. Ask us any time to be removed.
Site analytics
We use Microsoft Clarity to understand how visitors use the site (pages viewed, clicks, scrolling).
Meta pixel (advertising measurement)
We use the Meta pixel from Meta Platforms to measure and improve our Facebook and Instagram ads. It records the pages you visit and shopping actions such as viewing a box, adding to bag, starting checkout and sending an order to LINE, together with box types and prices. Meta may use cookies and your device information for ad measurement and optimisation. We never send your name, phone, address or gift message to Meta.
The Meta pixel is not loaded for visitors in the European Economic Area, the United Kingdom or Switzerland. You can limit ad tracking in your Facebook ad settings, in your browser, or by blocking cookies.
Contact
Questions about your data: message us on Instagram @ondine.bkk or use our contact page.