[Company name] ("TIX", "we"), as data controller, takes your privacy seriously. This policy explains how we collect, use, disclose and protect personal data when you use the TIX Be There website and services, under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).
1. What we collect
- Account data: email, phone number, username, first and last name, date of birth, gender, nationality and chosen language.
- Booking data: events, tables, extra seats, orders, e-tickets, transfers and refund requests.
- Payment data: payment method, payment result and partial card details (brand, last 4 digits, expiry). Full card numbers stay with the payment provider.
- Usage data: favorites, sign-in history, IP address, device and browser type.
- What you send us, such as contact messages and refund reasons.
2. Why we use it, and on what basis
- To create and run your account, take bookings, issue and transfer tickets and process refunds (contract).
- To send one-time codes, confirmation emails, receipts and booking notices (contract).
- To prevent fraud, resale bookings and unauthorized access (legitimate interests).
- To improve the Service from usage statistics (legitimate interests).
- To send news and promotions, only with your consent, which you can withdraw at any time (consent).
- To keep accounting and tax records (legal obligation).
3. Who we share it with
We do not sell your personal data. We share only what is needed with:
- The venue you booked: your name, booking number and party size, to admit you.
- Our payment provider, such as [Opn Payments].
- Email, SMS and cloud providers who process data for us under contract.
- The recipient of a ticket you transfer: your name or TIX ID and the table details.
- Public authorities, where the law requires.
4. Transfers outside Thailand
Our systems run on a cloud provider with data centers outside Thailand [Google Cloud, Jakarta region, Indonesia]. We use providers with adequate data protection standards as the PDPA requires, under data protection agreements.
5. Cookies
- Essential cookies: tix_session keeps you signed in (30 days) and tix_locale remembers your language.
- We don't use advertising or third-party analytics cookies today. If we start, we will ask for your consent first.
6. How long we keep it
- Account data: while your account is active, then deleted or anonymized within [period] of closing it.
- Orders and payments: as long as accounting and tax law requires.
- Sign-in and security records: no longer than [period].
7. Your rights
Under the PDPA you can:
- Access your personal data and get a copy.
- Have it corrected (most of it you can edit on your profile).
- Have it deleted, destroyed or anonymized.
- Restrict or object to its processing.
- Receive it, or have it sent to another controller.
- Withdraw consent you have given.
- Complain to the Office of the Personal Data Protection Committee.
Contact us below to use these rights. We reply within 30 days, as the law requires.
8. Keeping data safe
Traffic is encrypted with HTTPS, passwords are stored as one-way hashes, QR codes are digitally signed, and access to personal data is limited to the people who need it.
9. Minors
The Service is for people aged 20 or over. We don't knowingly collect minors' data and will delete any we find.
10. Changes to this policy
We may update this policy; the date at the top shows the latest version. We will tell you about important changes in advance.
11. Contact us
[Company name], [address]. Email pixel.logic.interactive@gmail.com. Data protection officer (DPO): [name / contact].