Privacy Policy
Effective Date: 01/01/2026
Last Updated: 01/09/2026
Chill Up 2 Co., Ltd. ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and process your personal data in compliance with Thailand’s Personal Data Protection Act B.E. 2562 (2019) ("PDPA") and Meta’s (Facebook) Developer Policies.
1. Data Controller Information
Under the PDPA, Chill Up 2 Co., Ltd. acts as the Data Controller for the personal data collected through our app and services.
- Company Name: Chill Up 2 Co., Ltd.
- Address: 114/2 Moo 1 Koh Phangan, 84280 Surat Thani (Thailand)
- Email: [email protected]
2. Data We Collect
We collect personal information necessary to provide and improve our services, including:
- Directly Provided Data: Name, email address, phone number, delivery address, or support inquiries.
- Facebook / Meta Platform Data: When you log in via Facebook or connect our Facebook App, we collect data you permit Meta to share, including your Facebook Public Profile information (Name, Profile Picture, User ID) and Email Address.
- Technical Data: IP address, device identifier, operating system, and usage data via cookies or log files.
3. Purpose and Legal Basis for Processing
We process your personal data under the following legal bases:
| Purpose | Personal Data Used | Legal Basis (PDPA) |
|---|---|---|
| Account Creation & Login | Name, Facebook User ID, Email | Contract Performance / Consent |
| Service Delivery | Name, Contact Info, Usage Data | Contract Performance |
| App Improvement & Security | Technical & Usage Data | Legitimate Interests |
| Legal & Regulatory Compliance | Transaction records, log data | Legal Obligation |
4. How We Use Facebook User Data
Data obtained through Facebook API / Facebook Login is used strictly to authenticate your identity, create your user account, and provide customized services within our application. We do not sell, rent, or transfer Meta platform data to third parties, except as required to fulfill legal duties or operate essential cloud infrastructure.
5. Data Retention
We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy or as required by applicable laws (e.g., Thai tax and accounting regulations). Once data is no longer needed, it is securely deleted or anonymized.
6. User Data Deletion Request (Facebook Data Deletion)
You have the right to request the deletion of your personal data, including information collected via Facebook.
Direct Email Request: Send an email to [email protected] with the subject line “Data Deletion Request” and specify your registered email or Facebook User ID.
7. Your Rights Under Thai PDPA
As a data subject under the Thai PDPA, you possess the following rights:
- Right to Access: Request a copy of your personal data held by us.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten"): Request deletion or anonymization of your data.
- Right to Restrict Processing: Request suspension of the use of your data.
- Right to Object: Object to the collection, use, or disclosure of your data (e.g., for direct marketing).
- Right to Data Portability: Request transfer of your data to another controller in a readable format.
- Right to Withdraw Consent: Withdraw previously granted consent at any time.
- Right to File a Complaint: File a complaint with the Personal Data Protection Committee (PDPC) of Thailand if you believe your rights under the PDPA have been violated.
To exercise any of these rights, please contact us at [email protected].
8. Security & Third-Party Sharing
We implement appropriate physical, technical, and administrative security measures to prevent unauthorized access, loss, or misuse of your data. We may share data with trusted third-party service providers (e.g., cloud hosting, analytics) bound by confidentiality agreements and PDPA compliance.
9. Changes to This Privacy Policy
We may update this policy periodically to reflect changes in legal requirements or operational practices. Any changes will be posted on this page with an updated “Last Updated” date.