Privacy Policy

Last updated: February 15, 2026

1. INTRODUCTION

This Privacy Policy is issued by Dodo Sushi and Rolls, located at Eakmongkol Village, Pattaya, Thailand (hereinafter referred to as 'we', 'us'). We act as the Data Controller under the Thailand Personal Data Protection Act (PDPA). This policy describes how we collect, use, and protect your Personal Data.

2. LEGAL BASIS FOR PROCESSING

In accordance with the PDPA, we process your Personal Data based on the following legal grounds:

Contractual Necessity

To process and fulfill your food orders and delivery.

Legal Obligation

To comply with Thai tax, accounting, and consumer protection laws.

Legitimate Interest

To improve our services, ensure website security, and handle customer support.

Consent

For marketing communications and the use of non-essential cookies (which you may withdraw at any time).

3. DATA COLLECTION

We collect only the necessary information to provide our services:

Identity & Contact Data

Name, delivery address, phone number, and email address.

Order Data

Details of products purchased, order history, and specific delivery instructions.

Technical Data

IP address, browser type, and interaction with our website via essential cookies.

4. DISCLOSURE TO THIRD PARTIES

To fulfill our service, we may share your data with:

Delivery PartnersCouriers for the sole purpose of delivering your order.

Service ProvidersSecure payment gateways and IT hosting services.

Legal AuthoritiesOnly when required by law or to protect our legal rights.

5. DATA RETENTION & SECURITY

We retain your data only for as long as required by law or for the purposes stated:

Accounting & Transaction Records5 years (as required by the Thai Revenue Code).

Marketing DataUntil you withdraw your consent.

Website Logs90 days (in compliance with the Thai Computer Crimes Act).

We implement appropriate administrative and technical security measures to protect your data. However, while we strive to maintain the highest security standards, no system can guarantee absolute security against all potential risks.

6. YOUR RIGHTS (UNDER PDPA)

You have the following rights regarding your Personal Data:

/The right to access and receive a copy of your data.

/The right to request data rectification or erasure (where applicable).

/The right to object to or restrict data processing.

/The right to withdraw consent at any time.