Raisebiz ("we") takes the protection of your personal data seriously. This policy explains how we collect, use, disclose, and safeguard your personal information in line with Thailand's Personal Data Protection Act B.E. 2562 (PDPA). Please read it carefully before using our service.
1. Information we collect
- Personal data such as name, email, phone number, date of birth, address, and profile photo
- Account data such as username, password (hashed), and login history
- Transaction data such as bookings, payments, and credit card details (via PCI DSS-compliant providers)
- Technical data such as IP address, device type, browser, operating system, and cookies
2. How we use your information
- To provide services, maintain accounts, and process bookings or transactions you request
- To verify identity, prevent fraud, and protect the security of our systems
- To improve and develop the quality of our service, including usage analytics
- To send news, promotions, and related information (with your consent)
- To comply with laws, regulations, or orders from relevant authorities
3. Disclosure to third parties
- We never sell or rent your personal data to third parties for marketing purposes
- We may share data with partners necessary to deliver the service — such as payment processors, email providers, or cloud vendors — under confidentiality agreements
- We may disclose data under a court order or lawful request from authorities
4. Your rights (PDPA)
- The right to access, request copies of, and review your personal data
- The right to correct, update, or rectify your data
- The right to request deletion, destruction, or anonymization of your data
- The right to object to processing or withdraw consent
- The right to data portability in a machine-readable format
- The right to lodge a complaint with the Personal Data Protection Committee
5. Data retention
- We retain your personal data only as long as necessary for the purposes stated in this policy
- For active accounts, we keep data for the account's lifetime and an additional 5 years after closure to comply with tax and accounting laws
- Unnecessary data will be deleted or anonymized within the period required by law
6. Security measures
- All data is transmitted via TLS/SSL encryption
- Passwords are hashed with industry-standard algorithms (bcrypt/argon2)
- Data access is restricted under the principle of least privilege, and access logs are monitored
- Our systems undergo regular security audits and testing
7. Cookies
- We use cookies to remember your login, personalize your experience, and analyze traffic
- You can disable cookies in your browser settings, but some features may not work properly
8. Changes to this policy
- We may update this policy from time to time. We'll publish updates on the website and notify you in advance as appropriate
- Continued use of our service after changes take effect indicates your acceptance of the new policy
9. Contact the Data Protection Officer
- Email: [email protected]
- Phone: 02-123-4567
- Address: 123 Sukhumvit Rd, Khlong Toei, Bangkok 10110