Privacy Policy and Personal Data Protection

1. Data Controller

The Data Controller responsible for personal data processed through this Application is:

• Organization: Thaibeerjudge.com
• Email for Personal Data Matters: thaibeerjudge@gmail.com

2. Scope of This Privacy Policy

This Privacy Policy applies to the collection, use, disclosure, and other processing of personal data in connection with your use of our Application, website, systems, and other services provided by us.

This Privacy Policy may not apply to third-party websites or services that may be linked to or accessible through our Application. Such third parties may have their own privacy policies governing the processing of your personal data.

3. Personal Data We May Collect

We may collect personal data from you as necessary for the provision and operation of our services. Such data may include the following:

3.1 Identification Information

• Full name
• Username
• Profile picture

3.2 Contact Information

• Email address
• Telephone number
• Other contact information that you provide to us

3.3 Account Information

• Username
• Passwords stored in encrypted or otherwise appropriately secured form
• Login information
• Account history or other information associated with your user account

3.4 Application Usage Information

• IP address
• Device type
• Operating system
• Application version
• Device identifiers or other device-related identifiers
• Log data
• Information regarding your use of the Application, including features accessed and activities performed
• Analytics and information relating to the performance and operation of the Application

3.5 Location Information

Where the Application uses location-based services, we may collect your location information when you grant the Application permission to access such information. The collection and use of location information will depend on the features and purposes of the relevant services.

3.6 Information You Provide to Us

This may include:

• Messages
• Images
• Documents
• Information provided when contacting our support services
• Feedback
• Complaints
• Any other information that you choose to provide to us

We will collect only personal data that is necessary and relevant to the purposes for which it is processed.

4. Sources of Personal Data

We may obtain your personal data from the following sources:

• Directly from you, such as when you register for an account, complete a form, or contact us.
• Through your use of our Application or services.
• From the devices or systems you use to access our services.
• From service providers or business partners involved in providing our services.
• From third parties, where permitted by law or where you have provided the necessary authorization or consent.

5. Purposes of Processing Personal Data

We may collect, use, or disclose your personal data for the following purposes:

5.1 To Provide the Application and Our Services

Including:

• Creating and managing user accounts
• Verifying user identity
• Providing the features and functionality of the Application
• Communicating with you regarding your account or our services
• Providing user support and assistance

5.2 To Develop and Improve Our Services

We may use personal data to:

• Analyze how the Application is used
• Monitor system performance
• Identify and resolve errors
• Develop and improve the Application
• Analyze usage trends

We will process such information only as necessary and will implement appropriate measures to protect your personal data.

5.3 To Maintain Security

We may process personal data to:

• Prevent unauthorized access to our systems
• Detect and prevent fraud
• Monitor activities that may pose a risk to our systems
• Maintain the security of the Application and related data

5.4 To Comply with Legal Obligations

We may process personal data where necessary to comply with applicable laws, governmental orders, regulatory requirements, or other legal obligations.

5.5 For Communications and Marketing

Where you have provided your consent, or where otherwise permitted by applicable law, we may use your personal data to send you news, offers, benefits, promotions, or other marketing communications.

You may withdraw your consent or opt out of receiving marketing communications through the channels specified by us.

6. Legal Bases for Processing Personal Data

We will process your personal data based on an appropriate legal basis, including:

• Your consent
• The necessity to perform a contract or to take steps at your request before entering into a contract
• Compliance with a legal obligation
• The necessity to prevent or suppress a danger to the life, body, or health of an individual
• Legitimate interests pursued by us or another person, taking into account your rights and freedoms
• Other legal bases as permitted under applicable law

We will not rely on consent where another appropriate legal basis is available and applicable to the processing of your personal data.

7. Sensitive Personal Data

In general, we do not intend to collect sensitive personal data, such as information relating to health, race, political opinions, religious beliefs, or biometric data.

If the Application requires the collection of sensitive personal data, we will process such data in accordance with applicable legal requirements and conditions, including obtaining explicit consent where required by law.

8. Disclosure and Sharing of Personal Data

We may disclose or share your personal data with the following persons or organizations where necessary:

• Cloud or hosting service providers: Odoo.com
• Technology service providers: Lovable.com
• Analytics service providers: Google Analytics
• Payment service providers: Thai QR Payment
• Affiliates or business partners
• Government authorities or other organizations with legal authority

Where third parties process personal data on our behalf, we will take appropriate measures to require such parties to protect personal data in accordance with applicable laws and relevant contractual obligations.

We do not sell your personal data.

9. International Transfer of Personal Data

Where it is necessary for us to transfer personal data to another country, such as when using cloud services, servers, or technology service providers located outside Thailand, we will comply with the applicable requirements and conditions under personal data protection laws.

We will implement appropriate safeguards to ensure that your personal data receives an adequate level of protection, including contractual arrangements or other data protection measures with the recipient, or by relying on other legally permitted mechanisms or exceptions where applicable.

10. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy or for the period required by applicable law.

When personal data is no longer necessary, we will delete, destroy, or anonymize the data using appropriate methods, unless we are required or permitted by law to retain it for a longer period.

Examples of retention periods include:

11. Security Measures

We implement appropriate technical and organizational measures to protect personal data against loss, unauthorized access, use, alteration, modification, or disclosure.

Such measures may include:

• Access controls and authorization management
• Authentication and user access management
• Encryption or other appropriate security measures
• Secure password storage
• System logging and monitoring
• Data backup
• Regular review and improvement of security measures

However, no system can guarantee absolute security. We will take reasonable and appropriate measures to reduce the risks associated with the processing of personal data.

12. Your Rights as a Data Subject

Subject to the conditions and limitations provided by applicable law, you may have the following rights:

12.1 Right to Withdraw Consent

You have the right to withdraw any consent you have previously provided.

12.2 Right of Access

You have the right to request access to, or obtain a copy of, your personal data.

12.3 Right to Rectification

You have the right to request the correction of inaccurate or incomplete personal data.

12.4 Right to Erasure

You may request the deletion, destruction, or anonymization of your personal data in circumstances provided by applicable law.

12.5 Right to Restriction of Processing

You may request that we restrict the processing of your personal data in certain circumstances.

12.6 Right to Data Portability

Where applicable, you may have the right to receive your personal data in a commonly used and machine-readable format or request that your personal data be transferred to another data controller, subject to the conditions prescribed by law.

12.7 Right to Object

You may object to the processing of your personal data in certain circumstances as permitted by applicable law.

12.8 Right to Lodge a Complaint

You have the right to lodge a complaint with the relevant supervisory authority if you believe that our processing of your personal data does not comply with applicable law.

13. How to Exercise Your Rights

If you wish to exercise any of your rights regarding your personal data, please contact us at:

• Email: thaibeerjudge@gmail.com
• Subject: Personal Data Request

We may request additional information to verify your identity before processing your request in order to prevent unauthorized disclosure of personal data.

We will process your request within the timeframe required by applicable law. In certain circumstances, we may be unable to fully comply with your request where legal obligations or applicable exceptions apply.

14. Personal Data Breach Notification

In the event of a personal data breach, we will assess the impact of the incident and take appropriate action in accordance with applicable law. This may include notifying the relevant supervisory authority and/or affected data subjects where legally required.

15. Children's Privacy

If the Application provides services to minors or collects personal data relating to minors, we will process such data in accordance with applicable laws and requirements.

Where required by law, we may obtain consent from a parent or legal guardian.

If you believe that we have collected personal data relating to a minor in violation of applicable law, please contact us using the contact details provided in this Privacy Policy.

16. Third-Party Services

The Application may connect with or use third-party services, including:

• Third-party login services
• Analytics services
• Cloud services
• Payment services
• Maps or location-based services
• Notification services

The use of such services may be subject to the privacy policies of the relevant third-party providers. We encourage you to review the privacy policies of those providers.

17. Cookies and Similar Technologies

Where our Application or related website uses cookies, SDKs, tracking technologies, or similar technologies, we may use them for purposes including:

• Remembering user preferences
• Maintaining security
• Analyzing usage
• Improving the performance of our services
• Measuring usage or marketing performance, where applicable

We may provide a separate Cookie Policy or other notice containing additional information regarding our use of cookies and similar technologies.

18. Changes to This Privacy Policy

We may review and update this Privacy Policy from time to time to reflect changes in our services, applicable laws, technology, or business practices.

Where we make material changes, we will notify you through appropriate channels, such as through the Application, our website, or by email.

The latest effective date will be displayed at the beginning of this Privacy Policy.

19. Contact Us

If you have any questions, comments, or requests regarding your personal data or this Privacy Policy, please contact:

• Thaibeerjudge.com
• Email: thaibeerjudge@gmail.com