Published Last updated Written and reviewed by the Resale Intelligence team
This document describes how the system actually works and is being reviewed by legal counsel. The wording may change before full launch.
On this page
Consent is recorded separately for transactions, an ID copy and news. Customers can change their mind any time, and every change stays in the history.
- Who can do this:
- Owner, Store Admin, Manager, Cashier (role defaults; the owner can change them)
Under Thailand's Personal Data Protection Act (PDPA), the store must tell customers what their data is used for. The system records consent separately for each purpose, so customers choose one by one, and every change is kept in the history.
Purposes the system records
| Purpose | Used for |
|---|---|
| Collect and use data to transact with the store | Buying, selling and the store's legal duties |
| Keep a copy or photo of the national ID card | Keeping a copy or photo of the customer's ID card |
| Receive news and promotions from the store | Sending news and promotions to the customer |
The system records the answer for every purpose, yes or no, with the time, who recorded it and the version of the privacy notice used.
Record consent when adding a customer
-
Tell the customer what data the store keeps and what it is for.
-
Ask about each purpose and tick only the ones the customer agrees to.
-
Save the customer.
When adding a new customer during a transaction, such as a purchase, the system requires Customer consents to the collection and use of their data for transactions (required) before saving. News and promotions are not asked at that point and are recorded as not consented.
The customer changes their mind or withdraws consent
Open the customer's page from Customers.
On the Consent (PDPA) card, tap the switch for the purpose they want to change.
Check each purpose's switch now matches what the customer said.
Each change is a new record; earlier ones are never deleted. You need the Edit customers permission, held by default by: Owner, Store Admin, Manager, Cashier.
What the system doesn't do yet
-
The customer page shows only the current status, not who changed it and when, although the system keeps the full history.
-
There is no feature for sending news, and nowhere to upload ID-card photos yet, so those two consents record the customer's wishes for now.
-
Withdrawing consent for transactions doesn't stop transactions in the system. If the customer wants their data deleted or no longer used, follow Customers asking to see, correct or delete data.
Customers imported from files
Customers imported from Excel have no consent records. The store confirms at import that it has the right to keep and use that data. When such a customer comes back, explain and record their consents.