Veranda

Privacy Policy

Last updated: 8 October 2026.

1. About this policy

This Privacy Policy explains how the VERANDA website handles information when you browse the website, use the menu and cart, or proceed to place an order through WhatsApp.

Data Controller: Karon Paragon Co., Ltd., Registration No. 0835554008511. Address: 470/4 Patak Road, Karon, Mueang Phuket, Phuket, Thailand. Email: tropicoza@gmail.com. Phone: +66 63 195 8005.

2. Information that may be processed

The website does not offer user registration, customer accounts or online payment, and it does not contain forms asking for your name, phone number, email address, delivery address or bank card details.

When you visit the website, the server or hosting provider may process standard technical information such as your IP address, user-agent, request date and time, requested URL and error details. This information is necessary to operate, diagnose and protect the website.

3. Cart and local storage

Your cart is stored locally in your browser, not in a separate VERANDA order database. It may contain selected dishes, SKUs, quantities, modifiers, the chosen order method (Delivery or Pickup), and a comment of up to 500 characters.

The cart expires 12 hours after its most recent update. You can also clear it yourself or remove website data through your browser settings. Please do not include unnecessary personal or sensitive information in a comment.

4. Ordering through WhatsApp

When you select the checkout button, the website prepares a message containing the order items, SKUs, quantities, modifiers, comments, total amount and selected order method. You then choose whether to open WhatsApp and send that message.

Once you continue to WhatsApp, the message is processed by WhatsApp/Meta under that service’s terms and privacy policy. VERANDA uses the received message to communicate with you and process the order. Orders are not additionally copied into a CRM, Google Sheets, Excel or a separate website order database.

The website does not set a fixed retention period for WhatsApp conversations. Message availability depends on WhatsApp settings, the settings of the relevant chat and applicable requirements.

5. Cookies

The website uses the pll_language cookie to remember your selected language. This cookie expires after one year. The cart is stored in browser local storage, rather than in a cookie, and has a 12-hour TTL.

Google Analytics and your analytics cookie choice

Google Analytics is used only after you select “Accept” in the cookie banner, to understand visits and website interactions: contact-link clicks, additions to the cart and continuing to WhatsApp. Analytics cookies may be used, and technical information about your browser, device and visit may be processed. Complete anonymity is not guaranteed. Our analytics code does not send your order comment or the full WhatsApp message.

If you select “Necessary only”, Google Analytics does not load and analytics events are not sent. The cart, language selection and other website features remain available. Continuing to WhatsApp does not mean that an order has been sent or paid for.

Browser local storage retains only your analytics choice (accepted / necessary) and its version, shared by RU and EN, without personal data. To choose again, remove this website’s data in your browser settings and reopen the website; this also clears the local cart. Meta Pixel, Yandex Metrica and Google Ads are not connected.

6. Third-party services and external links

The website uses embedded Google Maps and Google Fonts. When this content loads, those providers may independently receive technical information such as your IP address and information about your browser or device, and may use their own cookies in accordance with their privacy policies.

The website also contains ordinary external links to Instagram, Yandex Maps, HOTTABYCH, Foodmenu and other resources shown on the website. After following a link, you interact with the relevant third-party service under its own terms. The presence of an external link does not mean that VERANDA receives additional personal data about you from that service.

7. Purposes and sharing

Information is used only to operate the website, retain the cart, prepare the order message, communicate with you after you send a WhatsApp message, diagnose errors and maintain security and, after consent, analyse visits and website interactions. Information is shared with third-party services when you use a selected feature, choose to continue to an external service or consent to analytics.

8. Retention and security

The local cart is retained for 12 hours and the language cookie for one year. Technical server logs may be retained for as long as reasonably necessary to operate, diagnose and protect the website, in accordance with server or hosting settings and applicable requirements.

The Data Controller takes reasonable organisational and technical measures to protect information. However, no method of transmission or storage can guarantee absolute security.

9. Your rights

Under applicable data protection law, including the Thailand Personal Data Protection Act (PDPA) where applicable, you may have the right to request access, correction, deletion, restriction or portability of your personal data, object to processing, withdraw consent where processing is based on consent, and lodge a complaint with the competent authority.

To make a privacy request, email tropicoza@gmail.com or call +66 63 195 8005. We may need to take reasonable steps to verify the requester’s identity.

10. Changes to this policy

This policy may be updated when the website, the services it uses or applicable requirements change. The current version will be published on this page together with its last-updated date.