Privacy Policy
Papaya Technologies Co., Ltd., and our affiliates and group companies (the “Company”) is committed to maintaining robust privacy protections for its users. Our Privacy Policy (“Privacy Policy”) is designed to help you understand how we collect, use and safeguard the information you provide to us as well as your rights and to assist you in making informed decisions when using our Service. For purposes of this Agreement, “Site” refers to the Company’s website which can be accessed at www.papaya.co.th and also includes without limitation, papaya.co.th, merchant.papaya.co.th, app.papaya.co.th and any successor URLs, mobile or localized versions and related domains and subdomains. “Service” refers to the Company’s services accessed via the Site, whether you are a client who subscribed to our services, you are an establishment (or a member of the staff of an establishment) using our solution or you are an end customer who orders and/or pays your bills via our application. The terms “we,” “us,” and “our” refer to the Company. “You” refers to you, as a user of our Site or our Service. By accessing our Site or our Service, you accept our Privacy Policy and Terms of Service, and you consent to our collection, storage, use and disclosure of your Personal Information as described in this Privacy Policy.
Information we collect
We collect “Non-Personal Information” and “Personal Information.” Non-Personal Information includes information that cannot be used to personally identify you, such as anonymous usage data, general demographic information we may collect, referring/exit pages and URLs, platform types, preferences you submit and preferences that are generated based on the data you submit and number of clicks. Personal Information includes your name, email and profile picture, which you submit to us through the registration process at the Site.
Information collected via technology
To activate the Service you do not need to submit any Personal Information other than your email address and/or phone number. To use the Service thereafter, you do need to submit further Personal Information, which may include your name and occupation. However, in an effort to improve the quality of the Service, we track information provided to us by your browser or by our software application when you view or use the Service, such as the website you came from (known as the “referring URL”), the type of browser you use, the device from which you connected to the Service, the time and date of access, and other information that does not personally identify you. We track this information using cookies, or small text files which include an anonymous unique identifier. Cookies are sent to a user’s browser from our servers and are stored on the user’s computer hard drive. Sending a cookie to a user’s browser enables us to collect Non-Personal information about that user and keep a record of the user’s preferences when utilizing our services, both on an individual and aggregate basis. For example, the Company may use cookies to collect information regarding your device screen resolution and language preferences. The Company may use both persistent and session cookies; persistent cookies remain on your computer after you close your session and until you delete them, while session cookies expire when you close your browser.
Information you provide us by registering for an account
In addition to the information provided automatically by your browser when you visit the Site, to become a subscriber to the Service you will need to create a personal profile. You can create a profile by registering with the Service and entering your email address or using one of the social authentication options. By registering, you are authorizing us to collect, store and use your email address and/or approved social profile attributes in accordance with this Privacy Policy.
Sensitive personal information
The personal data protection laws places restrictions on collecting sensitive personal information about you (including information about your religious views, ethnicity, political opinions, criminal records, personal health information or sexual preferences). Generally, we do not collect this type of information. However, if we required any sensitive personal information, your explicit consent is required.
Children’s privacy
In the event that we learn that we have gathered personal information from anyone under the age of 20 without the consent of a parent or guardian, we will delete that information as soon as possible, unless such collection, use or disclosure is for an act which anyone under the age of 20 may be entitled to act alone such as all strictly personal acts, all acts which are suitable to his condition in life, and required for his reasonable needs, only the consent of the minor is required. In addition, the Site does not knowingly collect or solicit information from anyone under the age of 10, or allow anyone under the age of 10 to sign up for the Service. In the event that we learn that we have gathered personal information from anyone under the age of 10 without the consent of a parent or guardian, we will delete that information as soon as possible. If you believe we have collected such information, please contact us at hello@papaya.co.th.
Purposes for which Personal Information is collected, held, used and disclosed
We may collect, hold, use and disclose Personal Information for the provision of services under the Terms of Service.
What lawful rights we have when collecting Personal Information without consent
We will collect use and disclose your Personal Information upon receiving your consent unless it is permitted by law which are: (i) it is for preventing or suppressing a danger to your life, body or health; (ii) it is necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract; (iii) it is necessary for the performance of a task carried out in the public interest by us, or it is necessary for the exercising of official authority vested in us; (iv) it is necessary for our legitimate interests or any other persons or juristic persons other than us, except where such interests are overridden by the fundamental rights of your Personal Information; or (v) it is necessary for compliance with a law to which we are subjected. In case where you are required to provide your Personal Information for compliance with a law, or contract, or where it is necessary to provide the Personal Information for the purpose of entering into the contract with us and you reject to provide us such Personal Information, your rejection may affect us to be unable to provide or perform our services to you wholly or partly.
How long Personal Information is collected and held
We hold your Personal Information for as long as necessary for the aforementioned purposes for which they were collected or otherwise processed, for compliance with a legal obligation to which we are subject, or for the establishment, exercise or defense of legal claims.
How we use and share information
Personal information
Except as otherwise stated in this Privacy Policy, we do not sell, trade, rent or otherwise share for marketing purposes your Personal Information with third parties without your consent. We do share Personal Information with vendors who are performing services for the Company, such as the servers for our email communications who are provided access to user’s email address for purposes of sending emails from us. Those vendors use your Personal Information only at our direction and in accordance with our Privacy Policy. In general, the Personal Information you provide to us is used to help us communicate with you. For example, we use Personal Information to contact users in response to questions, solicit feedback from users, provide technical support, and inform users about promotional offers. We may share Personal Information with outside parties if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to meet any applicable legal process or enforceable governmental request; to enforce applicable Terms of Service, including investigation of potential violations; address fraud, security or technical concerns; or to protect against harm to the rights, property, or safety of our users or the public as required or permitted by law.
Non-personal information
In general, we use Non-Personal Information to help us improve the Service and customize the user experience. We also aggregate Non-Personal Information in order to track trends and analyze use patterns on the Site. This Privacy Policy does not limit in any way our use or disclosure of Non-Personal Information and we reserve the right to use and disclose such Non-Personal Information to our partners, advertisers and other third parties at our discretion. In the event we undergo a business transaction such as a merger, acquisition by another company, or sale of all or a portion of our assets, your Personal Information may be among the assets transferred. You acknowledge and consent that such transfers may occur and are permitted by this Privacy Policy, and that any acquirer of our assets may continue to process your Personal Information as set forth in this Privacy Policy. If our information practices change at any time in the future, we will post the policy changes to the Site so that you may opt out of the new information practices. We suggest that you check the Site periodically if you are concerned about how your information is used.
How we protect information
We will take strict technical and organizational security measures in managing the collected Personal Data in accordance with local personal data protection law and any related regulations. We implement security measures designed to protect your information from unauthorized access. Your account is protected by your account password and we urge you to take steps to keep your personal information safe by not disclosing your password and by logging out of your account after each use. We further protect your information from potential security breaches by implementing certain technological security measures including encryption, firewalls and secure socket layer technology. However, these measures do not guarantee that your information will not be accessed, disclosed, altered or destroyed by breach of such firewalls and secure server software. By using our Service, you acknowledge that you understand and agree to assume these risks.
Your rights regarding the use of your personal information
You have the right under the law in regard to your personal data as follows: (i) Rights to access your Personal Information and request copy of your Personal Information being processed; (ii) Right to data portability; (iii) Right to erasure of Personal Information; (iv) Right to restriction of processing of your Personal Information; (v) Right to rectification of incorrect Personal Information; (vi) Right to object to processing of your Personal Information in case where the Personal Information is collected with the exemption to consent requirements under the law, i.e., it is necessary for the performance of a task carried out in the public interest by us, or it is necessary for the exercising of official authority vested in us; or it is necessary for our legitimate interests or any other persons or juristic persons other than us, except where such interests are overridden by your fundamental rights of your Personal Information; and (vii) Right to withdraw your consent for collection, use and disclosure of your Personal Information. In the event that you exercise your right to object to processing of your Personal Information, we will no longer be able to collect, use, or disclose such Personal Information, and we will immediately distinguish such Personal Information clearly from the other matters at the time when you give the notice of objection to us. However, we may reject your request to exercise the right to objection if we can prove that: (a) the collection, use, or disclosure of such Personal Information can be demonstrated by us that there is a compelling legitimate ground; or (b) the collection, use, or disclosure of such Personal Data is carried out for the establishment, compliance or exercise of legal claims, or defense of legal claims. In addition, you also have the right at any time to prevent us from contacting you for marketing purposes. When we send a promotional communication to a user, the user can opt out of further promotional communications by following the unsubscribe instructions provided in each promotional email. Please note that notwithstanding the promotional preferences you indicate by unsubscribing, we may continue to send you administrative emails including, for example, periodic updates to our Privacy Policy.
How to contact us or exercise your rights on Personal Information
If you would like to contact us or to exercise you rights in regard to your Personal Information, please contact as by email at hello@papaya.co.th or 193/104 Lake Ratchada Office Complex, 25th Floor, Unit C, Ratchadapisak Road, Khongtoey Sub-District, Klongtoey District, Bangkok Metropolis.
Links to other websites
As part of the Service, we may provide links to or compatibility with other websites or applications. However, we are not responsible for the privacy practices employed by those websites or the information or content they contain. This Privacy Policy applies solely to information collected by us through the Site and the Service. Therefore, this Privacy Policy does not apply to your use of a third party website accessed by selecting a link on our Site or via our Service. To the extent that you access or use the Service through or on another website or application, then the privacy policy of that other website or application will apply to your access or use of that site or application. We encourage our users to read the privacy statements of other websites before proceeding to use them.
Changes to our privacy policy
The Company reserves the right to change this policy and our Terms of Service at any time. We will notify you of significant changes to our Privacy Policy by sending a notice to the primary email address specified in your account or by placing a prominent notice on our site. Significant changes will go into effect 30 days following such notification. Non-material changes or clarifications will take effect immediately. You should periodically check the Site and this privacy page for updates.
Contact us
If you have any questions regarding this Privacy Policy or the practices of this Site, please contact us by sending an email to hello@papaya.co.th.
Last Updated: This Privacy Policy was last updated on 16th February 2023.