Privacy policy

1. Data Controller

Thai Cafe is the data controller responsible for your personal data. For any data protection queries, please contact us at:

Student Thai Cafe

Email: [email protected]

2. Data We Collect

  • Name (first name, last name)

  • Email address

  • Mobile phone number

  • Student verification status

  • Order history

  • Payment data (processed by our payment provider, not stored by us)

3. Purpose and Legal Basis

We process your data on the following legal bases:

  • Contract performance — to fulfill your orders and manage your account

  • Legal obligation — to comply with tax and accounting requirements

  • Legitimate interest — for fraud prevention and service improvement

4. Third-Party Recipients

Your data may be shared with the following service providers:

  • Viva Payments — payment processing

  • Mailgun — email delivery

  • SMSEagle — SMS delivery

5. Data Retention

We retain your personal data for as long as your account is active. Order and payment records are retained as required by applicable tax and accounting laws. Session data is retained for 120 minutes.

6. Your Rights

Under the GDPR, you have the right to:

  • Access your personal data

  • Rectify inaccurate data

  • Request erasure of your data

  • Request data portability

  • Object to processing based on legitimate interest

  • Lodge a complaint with your supervisory authority

To exercise any of these rights, please contact us at [email protected].

7. Cookies

We use only strictly necessary session cookies to operate the application. No analytics or tracking cookies are used.

8. Contact

For any questions regarding this privacy policy or your personal data, please contact us at [email protected].