PRIVACY POLICY

1. INTRODUCTION

This Privacy Policy is issued by Dodo Sushi and Rolls, located at Eakmongkol Village, Pattaya, Thailand (hereinafter referred to as 'we', 'us'). We act as the Data Controller under the Thailand Personal Data Protection Act (PDPA). This policy describes how we collect, use, and protect your Personal Data. If you have any questions regarding this Privacy Policy or the processing of your Personal Data, you may contact us at [email protected].

2. LEGAL BASIS FOR PROCESSING

In accordance with the PDPA, we process your Personal Data based on the following legal grounds:

• Contractual Necessity: To process and fulfill your food orders and delivery.
• Legal Obligation: To comply with Thai tax, accounting, and consumer protection laws.
• Legitimate Interest: To improve our services, ensure website security, and handle customer support.
• Consent: For marketing communications and the use of non-essential cookies (which you may withdraw at any time).

3. DATA COLLECTION

We collect only the necessary information to provide our services:

• Identity & Contact Data: Name, delivery address, phone number, and email address.
• Order Data: Details of products purchased, order history, and specific delivery instructions.
• Technical Data: IP address, browser type, and interaction with our website via essential cookies.

4. DISCLOSURE TO THIRD PARTIES

To fulfill our service, we may share your data with:

• Delivery Partners: Couriers for the sole purpose of delivering your order.
• Payment Processor: Omise (Opn), for secure online payment processing and fraud prevention.
• Service Providers: IT hosting services.
• Legal Authorities: Only when required by law or to protect our legal rights.

We ensure that all third-party partners comply with PDPA-standard data protection measures.

5. DATA RETENTION & SECURITY

We retain your data only for as long as required by law or for the purposes stated:

• Accounting & Transaction Records: For the period required by applicable Thai tax and accounting laws.
• Marketing Data: Until you withdraw your consent.
• Website Logs: For the period required by applicable Thai law and for security purposes.

We implement appropriate administrative and technical security measures to protect your data. However, while we strive to maintain the highest security standards, no system can guarantee absolute security against all potential risks.

6. YOUR RIGHTS (UNDER PDPA)

You have the following rights regarding your Personal Data:

• The right to access and receive a copy of your data.
• The right to request data rectification or erasure (where applicable).
• The right to object to or restrict data processing.
• The right to withdraw consent at any time.

To exercise any of these rights, please submit your request by email to [email protected], specifying the nature of your request and providing sufficient information to identify you. We may request additional information where reasonably necessary to verify your identity. We will process your request in accordance with the requirements and timeframes prescribed by the PDPA.

7. GOVERNING LAW

This Privacy Policy is governed by and construed in accordance with the laws of the Kingdom of Thailand.