Privacy policy
This policy explains what Cloffedia collects about you, what we use it for, and your rights under Thailand's Personal Data Protection Act B.E. 2562 (PDPA). If the Thai and English versions differ, the Thai version applies.
1. What we collect
- Account data — username, email and password (stored hashed; we never see your actual password).
- Shop data — shop name, menu, recipes, ingredient prices, fixed costs and the sales you import or enter.
- Payment data — transfer slips, transfer times and payment history. We do not store card numbers or your bank login.
- Technical data — cookies needed to keep you signed in, and server access logs (such as IP address).
2. Why we use it
- To run the service and calculate your shop's costs, profit and reports.
- To confirm payments and extend your subscription.
- To contact you about your account, payments, password resets and expiry reminders.
- To keep the system secure and fix problems.
The legal basis is performance of our service contract and our legitimate interest in operating the system. We do not sell or rent your data.
3. Who may receive it
- Server provider — data is stored on a rented cloud server located in Singapore.
- Email provider — to send confirmations and reminders.
- Government authorities, when required by law.
4. How long we keep it
We keep shop data for as long as you have an account. When you ask us to delete your account, we delete shop data within 30 days, except payment records we must keep for tax purposes. Backups are overwritten within 14 days.
5. Your rights
You may ask to access, copy, correct, delete or transfer your data, or object to how we use it, by contacting us below. We reply within 30 days. You may also complain to the Personal Data Protection Committee (PDPC).
6. Security
Connections are encrypted with HTTPS, passwords are one-way hashed, transfer slips are stored separately and can only be opened by you and the administrator, and each shop can access only its own data.
7. Contact us
Cloffedia service provider