Privacy Policy

1. Data We Collect

When you participate in this campaign, we collect the following information:

• Name and profile photo from Facebook (public profile data)
• Email address (if permission is granted)
• Receipt number you submit
• Discount code and redemption status
• Date and time of participation
• IP address (for fraud prevention purposes)

2. Purpose of Data Use

• To verify your identity and eligibility to participate
• To manage and deliver your discount
• To prevent duplicate claims or fraudulent activity
• To improve our services and user experience
• To comply with applicable laws and regulations

3. Legal Basis for Processing

We process your personal data on the basis of "consent" given at the time of participation, and "contractual necessity" to deliver campaign benefits as described in the campaign terms and conditions.
Where required by law, we may also process personal data to comply with legal obligations and to pursue our legitimate interests in preventing fraud, protecting our systems, and ensuring the integrity of the campaign.

4. Disclosure to Third Parties

We will not sell, rent, or share your personal data, except to:

• Service providers engaged to operate this campaign (bound by confidentiality agreements)
• Government authorities when required by law

Our service providers may include website hosting providers, IT service providers, analytics providers, campaign management agencies, and customer support providers, solely for the purposes described in this Policy.

5. Data Retention

We will retain your data for 1 year from the end of the campaign period, or as required by law. After this period, your data will be permanently deleted or anonymised.

6. Your Rights (PDPA)

Under the Personal Data Protection Act B.E. 2562, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data (right to be forgotten)
• Object to the processing of your data
• Data portability in a readable format
• Withdraw consent at any time

7. Data Security

We implement appropriate security measures, including data encryption (HTTPS), access controls, and regular system reviews to protect your personal information.

8. Facebook

This campaign uses Facebook Login for identity verification. Use of Facebook is subject to Meta Platforms' Privacy Policy. We do not receive any data beyond what is listed in Section 1.

9. Changes to This Policy

We may update this policy from time to time. Any significant changes will be communicated through the application.