Privacy Policy

Introduction

Thai.Golf ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

This policy complies with Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA") and is designed to meet international standards for data protection.

Data Controller

Thai.Golf is the data controller responsible for your personal data. For questions about this policy or your data rights, contact us at:

Data We Collect

Account Information

• Name and email address
• Profile picture (if provided)
• Account preferences and settings

Social Login Data

When you sign in using a social platform (Google, Facebook, or Apple), we receive:

• Your public profile name
• Email address associated with your account
• Profile picture URL

We do not access your friends list, posts, or any other private social media data.

Automatically Collected Data

• IP address and approximate location
• Browser type and device information
• Pages visited and actions taken on our site
• Date and time of visits

How We Use Your Data

We use your personal data for the following purposes:

• To create and manage your account
• To provide and improve our services
• To personalize your experience
• To communicate with you about updates and offers
• To ensure security and prevent fraud
• To comply with legal obligations

Legal Basis for Processing (PDPA)

Under Thailand's PDPA, we process your data based on:

• Consent: When you create an account or sign in with social login, you consent to our data collection.
• Contract: Processing necessary to provide you with our services.
• Legitimate Interest: To improve our services, ensure security, and communicate with users.
• Legal Obligation: When required by Thai law or court order.

Data Sharing

We do not sell your personal data. We may share data with:

• Service providers who help us operate our website (hosting, analytics)
• Legal authorities when required by law
• Business partners with your explicit consent

All third parties are required to protect your data in accordance with this policy and applicable laws.

International Data Transfers

Your data may be transferred to and processed in countries outside Thailand, including the United States, where our service providers operate.

We ensure adequate protection through standard contractual clauses and compliance with PDPA requirements for cross-border transfers.

Data Retention

We retain your personal data for as long as necessary to:

• Maintain your account and provide services
• Comply with legal obligations
• Resolve disputes and enforce agreements

Your Rights Under PDPA

Under Thailand's PDPA, you have the following rights:

• Right to Access: Request a copy of your personal data.
• Right to Correction: Request correction of inaccurate data.
• Right to Deletion: Request deletion of your data (subject to legal requirements).
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent at any time (this does not affect prior processing).
• Right to Complain: Lodge a complaint with the Personal Data Protection Committee.

To exercise these rights, contact us at birdie@thai.golf. We will respond within 30 days.

Data Deletion (Social Login)

If you signed in using Facebook, Google, or Apple, you can request deletion of your data by:

1. Emailing birdie@thai.golf with your request
2. We will delete your account and associated data within 30 days
3. You may also revoke app access directly from your social platform settings

Please note that some data may be retained for legal compliance or legitimate business purposes.

Cookies and Tracking

We use cookies and similar technologies for:

• Essential Cookies: Required for website functionality and security.
• Functional Cookies: Remember your preferences and settings.
• Analytics Cookies: Help us understand how visitors use our site.

Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure password hashing
• Regular security assessments
• Access controls and monitoring

Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending you an email. Your continued use of our services after changes constitutes acceptance of the updated policy.