Privacy Policy

Last modified: 1 August 2025

This Privacy Policy includes important information about your personal data and we encourage you to read it carefully.

This Privacy Policy (“Policy”) describes the Personal Data that we collect, how we use and share it, and details on how you can reach us with privacy-related inquiries. The Policy also outlines your rights and choices as a data subject, including the right to object to certain uses of your Personal Data. 

Depending on the activity, Qashier assumes the role of a “data controller” and/or “data processor” (or “service provider”).

Defined Terms

In this Policy, “Qashier”, “we”, “our,” or “us” refers to the Qashier entity responsible for the collection, use, and handling of Personal Data as described in this document. Depending on your jurisdiction, the specific Qashier entity accountable for your Personal Data might vary. 

“Personal Data” refers to any information associated with an identified or identifiable individual, which can include data that you provide to us, and that we collect about you during your interaction with our Services (such as device information, IP address, etc.).

“Services” refers to the products, services, devices, and applications that we provide under the Qashier Services Agreement; websites (“Sites”) like Qashier.com; and other Qashier applications and online services. We provide Business Services to entities (“Business Users”). 

“Financial Partners” are financial institutions, banks, and other partners such as payment method acquirers, payout providers, and card networks that we partner with to provide the Services.

Depending on the context, “you” might be an End Customer, Representative, or Visitor:

(a) End Customers. When you are not directly transacting with Qashier, but we receive your Personal Data to provide Services to a Business User, including when you make a purchase from a Business User on a Qashier checkout page or receive payments from a Business User, we refer to you as an “End Customer.”

(b) Representatives. When you are acting on behalf of an existing or potential Business User—perhaps as a company founder, account administrator for a Business User—we refer to you as a “Representative.”

(c) Visitors. When you interact with Qashier by visiting a Site without being logged into a Qashier account, or when your interaction with Qashier does not involve you being an End Customer, or Representative, we refer to you as a “Visitor.” For example, you are a Visitor when you send a message to Qashier asking for more information about our Services.

In this Policy, “Transaction Data” refers to data collected and used by Qashier to facilitate transactions you request. Some Transaction Data is Personal Data and may include: your name, email address, contact number, billing and shipping address, payment method information (like credit or debit card number, bank account details, or payment card image chosen by you), merchant and location details, amount and date of purchase, and in some instances, information about what was purchased.

1. Personal Data we collect and how we use and share it

Our collection and use of Personal Data differs based on whether you are an End Customer, Representative, or Visitor, and the specific Service that you are using. For example, if you’re a sole proprietor who wants to use our Business Services, we may collect your Personal Data to onboard your business; at the same time, you might also be an End Customer if you’ve bought goods from another Business User that is using our Services for payment processing.

1.1 End Customers

Qashier provides various Business Services to our Business Users, which include processing in-person or online payments or payouts for those Business Users. When acting as a service provider—also referred to as a Data Processor—for a Business User, we process End Customer Personal Data in accordance with our agreement with the Business User and the Business User’s lawful instructions. This happens, for example, when we process a payment for a Business User because you purchased a product from them, or when the Business User asks us to send you funds.

Business Users are responsible for ensuring that the privacy rights of their End Customers are respected, including obtaining appropriate consents and making disclosures about their own data collection and use associated with their products and services. If you’re an End Customer, please refer to the privacy policy of the Business User you’re doing business with for its privacy practices, choices, and controls.

We provide more comprehensive information about our collection, use, and sharing of End Customer Personal Data in our Privacy Center, including the legal bases we rely on for processing your Personal Data.

1. Personal Data we collect about End Customers

Transaction Data. If you’re an End Customer making payments to, receiving refunds or payments from, initiating a purchase or donation, or otherwise transacting with our Business User, whether in-person or online, we receive your Transaction Data. We may also receive your transaction history with the Business User. Additionally, we may collect information entered into a checkout form even if you opt not to complete the form or transaction with the Business User. A Business User who uses Qashier’s Terminal Service to provide its goods or services to End Customers may use the Terminal Service to collect End Customer Personal Data (like your name, email, phone number, address, signature, or age) in accordance with its own privacy policy.

1. How we use and share Personal Data of End Customers

To provide our Business Services to our Business Users, we use and share End Customers’ Personal Data with them. Where allowed, we also use End Customers’ Personal Data for Qashier’s own purposes such as enhancing security, improving and offering our Business Services, and preventing fraud, loss, and other damages, as described further below.

Payment processing and accounting. We use your Transaction Data to deliver Payment-related Business Services to Business Users — including online payment transactions processing, sales tax calculation, and invoice, bill, and dispute handling — and to help them determine their revenue, settle their bills, and execute accounting tasks. We may also use your Personal Data to provide and improve our Business Services.

During payment transactions, your Personal Data is shared with various entities in connection with your transaction. As a service provider or data processor, we share Personal Data to enable transactions as directed by Business Users. For instance, when you choose a payment method for your transaction, we may share your Transaction Data with your bank or other payment method provider, including as necessary to authenticate you, process your transaction, prevent fraud, and handle disputes. The Business User you choose to do business with also receives Transaction Data and might share the data with others. Please review your merchant’s, bank’s, and payment method provider’s privacy policies for more information about how they use and share your Personal Data.

Fraud detection and loss prevention. We use your Personal Data collected across our Services to detect and prevent losses for you, us, our Business Users, and Financial Partners. We may provide Business Users and Financial Partners, including those using our fraud prevention-related Business Services, with your Personal Data (including your attempted transactions) to help them assess the fraud or loss risk associated with a transaction.

Our Business Users (and their authorized third parties). We share End Customers’ Personal Data with their respective Business Users and parties directly authorized by those Business Users to receive such data. Here are common examples of such sharing:

– Sharing information that you have provided to us with a Business User so that we can send payments to you on behalf of that Business User.

The Business Users you choose to do business with may further share your Personal Data with third parties (like additional third party service providers other than Qashier). Please review the Business User’s privacy policy for more information.

1.3 Representatives

We collect, use, and share Personal Data from Representatives of Business Users (for example, business owners) to provide our Business Services. 

1. Personal Data we collect about Representatives 

Registration and contact information. When you register for a Qashier account for a Business User (including incorporation of a Business), we collect your name and login credentials. As a Representative, we may collect your Personal Data from third parties, including data providers, to advertise, market, and communicate with you. We may also link a location with you to tailor the Services or information effectively to your needs. 

Identification Information. As a current or potential Business User, an owner of a Business User, or a shareholder, officer, or director of a Business User, we need your contact details, such as name, postal address, telephone number, and email address, to fulfill our Financial Partner and regulatory requirements, verify your identity, and prevent fraudulent activities and harm to the Qashier platform. We collect your Personal Data, such as ownership interest in the Business User, date of birth, government-issued identity documents, and associated identifiers, as well as any history of fraud or misuse, directly from you and/or from publicly available sources, third parties such as credit bureaus and via the Services we provide. You may also choose to provide us with bank account information.

1. How we use and share Personal Data of Representatives 

We typically use the Personal Data of Representatives to provide the Business Services to the corresponding Business Users. The ways we use and share this data are further described below.

Business Services. We use and share Representatives’ Personal Data with Business Users to provide the Services requested by you or the Business User you represent.

We share Representatives’ Personal Data with parties authorized by the corresponding Business User, such as Financial Partners servicing a financial product, or third party apps or services the Business User chooses to use alongside our Business Services. Here are common examples of such sharing:

– Payment method providers, like Visa or WeChat Pay, require information about Business Users and their Representatives who accept their payment methods. This information is typically required during the onboarding process or for processing transactions and handling disputes for these Business Users.

The use of Personal Data by a third party authorized by a Business User is subject to the third party’s privacy policy.

 

If you are a Business User who has chosen a name that includes Personal Data (for example, a sole proprietorship or family name in a company name), we will use and share such information for the provision of our Services in the same way we do with any company name. This may include, for example, displaying it on receipts and other transaction-identifying descriptions.

Fraud detection and loss prevention. We use Representatives’ Personal Data to identify and manage risks that our Business Services might be used for fraudulent activities causing losses to Qashier, End Customers, Business Users, Financial Partners, and others. We also use information about you obtained from publicly available sources, third parties like credit bureaus and from our Services to address such risks, including to identify patterns of misuse and monitor for terms of service violations. Qashier may share Representatives’ Personal Data with Business Users, our Financial Partners, and third party service providers, including phone verification providers to verify the information provided by you and identify risk indicators. We also use and share Representatives’ Personal Data to conduct due diligence, including conducting anti-money laundering and sanctions screening in accordance with applicable law.

Advertising. Where permitted by applicable law, and where required with your consent, we use and share Representatives’ Personal Data with third parties, including Partners, so we can advertise and market our Services and Partner integrations. Subject to applicable law, including any consent requirements, we may advertise through interest-based advertising and track the efficacy of such ads. We do not transfer your Personal Data to third parties in exchange for payment. However, we may provide your data to third party partners, like advertising partners, analytics providers, and social networks, who assist us in advertising our Services. Learn more. We may also use your Personal Data, including your Qashier account activity, to evaluate your eligibility for and offer you Business Services or promote existing Business Services.

1.4 Visitors

We collect, use, and share the Personal Data of Visitors. 

1. Personal Data we collect about Visitors

When you browse our Sites, we receive your Personal Data, either provided directly by you or collected through our use of cookies and similar technologies. If you opt to complete a form on the Site or third party websites where our advertisements are displayed (like LinkedIn or Facebook), we collect the information you included in the form. This may include your contact information and other information pertaining to your questions about our Services. We may also associate a location with your visit.

1. How we use and share Personal Data of Visitors

Personalization. We use the data we collect about you using cookies and similar technologies to measure engagement with the content on the Sites, improve relevancy and navigation, customize your experience (such as language preference and region-specific content), and curate content about Qashier and our Services that’s tailored to you. For instance, as not all of our Services are available globally, we may customize our responses based on your region.

Advertising. Where permitted by applicable law, and where required with your consent, we use and share Visitors’ Personal Data with third parties, including Partners, so we can advertise and market our Services and Partner integrations. Subject to applicable law, including any consent requirements, we may advertise through interest-based advertising and track the efficacy of such ads. We do not transfer your Personal Data to third parties in exchange for payment, but we may provide your data to third party partners, like advertising partners, analytics providers, and social networks, who assist us in advertising our Services.

Engagement. As you interact with our Sites, we use the information we collect about and through your devices to provide opportunities for further interactions, such as discussions about Services or interactions with chatbots, to address your questions.

2. More ways we collect, use, and share Personal Data

In addition to the ways described above, we also process your Personal Data as follows:

1. Collection of Personal Data

Online Activity. Depending on the Service used and how our Business Services are implemented by the Business Users, we may collect information related to:

– The devices and browsers you use across our Sites and third party websites, apps, and other online services (“Third Party Sites”).

– Usage data associated with those devices and browsers and your engagement with our Services, including data elements like IP address, plug-ins, language preference, time spent on Sites and Third Party Sites, pages visited, links clicked, payment methods used, and the pages that led you to our Sites and Third Party Sites. We also collect activity indicators, such as mouse activity indicators, to help us detect fraud. 

Communication and Engagement Information. We also collect information you choose to share with us through various channels, such as support tickets, emails, or social media. If you respond to emails or surveys from Qashier, we collect your email address, name, and any other data you opt to include in your email or responses. If you engage with us over the phone, we collect your phone number and any other information you might provide during the call. Calls with Qashier or Qashier representatives may be recorded.

Forums and Discussion Groups. If our Sites allow posting of content, we collect Personal Data that you provide in connection with the post.

1. Use of Personal Data. 

Besides the use of Personal Data described above, we use Personal Data in the ways listed below:

Analyzing, Improving, and Developing our Services. We collect and process Personal Data throughout our various Services, whether you are an End Customer, Representative, or Visitor, to improve our Services, develop new Services, and support our efforts to make our Services more efficient, relevant, and useful to you. We may use Personal Data to generate aggregate and statistical information to understand and explain how our Services are used.  Examples of how we use Personal Data to analyze, improve, and develop our products and services include:

– Using analytics on our Sites, including as described in our Cookie Policy, to help us understand your use of our Sites and Services and diagnose technical issues. 

– Training artificial intelligence models to power our Services and protect against fraud and other harm.

– Analyzing and drawing inferences from Transaction Data to reduce costs, fraud, and disputes and increase authentication and authorization rates for Qashier and our Business Users.

Communications. We use the contact information we have about you to deliver our Services, which may involve sending codes via SMS for your authentication. If you are a Representative, or Visitor, we may communicate with you using the contact information we have about you to provide information about our Services and our affiliates’ services, invite you to participate in our events, surveys, or user research, or otherwise communicate with you for marketing purposes, in compliance with applicable law, including any consent or opt-out requirements. For example, when you provide your contact information to us or when we collect your business contact details through participation at trade shows or other events, we may use this data to follow up with you regarding an event, provide information requested about our Services, and include you in our marketing information campaigns. Where permitted under applicable law, we may record our calls with you to provide our Services, comply with our legal obligations, perform research and quality assurance, and for training purposes.

Social Media and Promotions. If you opt to submit Personal Data to engage in an offer, program, or promotion, we use the Personal Data you provide to manage the offer, program, or promotion. We also use the Personal Data you provide, along with the Personal Data you make available on social media platforms, for marketing purposes, unless we are not permitted to do so.

Fraud Prevention and Security. We collect and use Personal Data to help us identify and manage activities that could be fraudulent or harmful across our Services, enable our fraud detection Business Services, and secure our Services and transactions against unauthorized access, use, alteration or misappropriation of Personal Data, information, and funds. As part of the fraud prevention, detection, security monitoring, and compliance efforts for Qashier and its Business Users, we collect information from publicly available sources, third parties (such as credit bureaus), and via the Services we offer. In some instances, we may also collect information about you directly from you, or from our Business Users, Financial Partners, and other third parties for the same purposes. Furthermore, to protect our Services, we may receive details such as IP addresses and other identifying data about potential security threats from third parties. Such information helps us verify identities, conduct credit checks where lawfully permitted, and prevent fraud. Additionally, we might use technology to evaluate the potential risk of fraud associated with individuals seeking to procure our Business Services or arising from attempted transactions by an End Customer with our Business Users or Financial Partners.

Compliance with Legal Obligations. We use Personal Data to meet our contractual and legal obligations related to anti-money laundering, Know-Your-Customer (“KYC”) laws, anti-terrorism activities, safeguarding vulnerable customers, export control, and prohibition of doing business with restricted persons or in certain business fields, among other legal obligations. For example, we may monitor transaction patterns and other online signals and use those insights to identify fraud, money laundering, and other harmful activity that could affect Qashier, our Financial Partners, Business Users and others. Safety, security, and compliance for our Services are key priorities for us, and collecting and using Personal Data is crucial to this effort.

Minors. Our Services are not directed to children under the age of 13, and we request that they do not provide Personal Data to seek Services directly from Qashier. In certain jurisdictions, we may impose higher age limits as required by applicable law.

1. Sharing of Personal Data. 

Besides the sharing of Personal Data described above, we share Personal Data in the ways listed below:

Qashier Affiliates. We share Personal Data with other Qashier-affiliated entities for purposes identified in this Policy.

Service Providers or Processors. In order to provide, communicate, market, analyze, and advertise our Services, we depend on service providers. These providers offer critical services such as providing cloud infrastructure, conducting analytics for the assessment of the speed, accuracy, and/or security of our Services, verifying identities, identifying potentially harmful activity, and providing customer service and audit functions. We authorize these service providers to use or disclose the Personal Data we make available to them to perform services on our behalf and to comply with relevant legal obligations. We require these service providers to contractually commit to security and confidentiality obligations for the Personal Data they process on our behalf.

Financial Partners. We share Personal Data with certain Financial Partners to provide Services to Business Users and offer certain Services in conjunction with these Financial Partners.

Others with Consent. In some situations, we may not offer a service, but instead refer you to others. In these instances, we will disclose the identity of the third party and the information to be shared with them, and seek your consent to share the information.

Corporate Transactions. If we enter or intend to enter a transaction that modifies the structure of our business, such as a reorganization, merger, sale, joint venture, assignment, transfer, change of control, or other disposition of all or part of our business, assets, or stock, we may share Personal Data with third parties in connection with such transaction. Any other entity that buys us or part of our business will have the right to continue to use your Personal Data, subject to the terms of this Policy.

Compliance and Harm Prevention. We share Personal Data when we believe it is necessary to comply with applicable law; to abide by rules imposed by Financial Partners in connection with the use of their payment method; to enforce our contractual rights; to secure and protect the Services, rights, privacy, safety, and property of Qashier, you, and others, including against malicious or fraudulent activity; and to respond to valid legal requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, which may include authorities outside your country of residence.

3. Legal bases for processing Personal Data

For purposes of applicable data protection laws, we rely on a number of legal bases to process your Personal Data. For some jurisdictions, there may be additional legal bases, which are outlined in the Jurisdiction-Specific Provisions section below.

1. Contractual and Pre-Contractual Business Relationships. We process Personal Data to enter into business relationships with prospective Business Users and fulfill our respective contractual obligations with them. These processing activities include:

– Creation and management of Qashier accounts and Qashier account credentials, including the assessment of applications to initiate or expand the use of our Services;

– Accounting, auditing, and billing activities; and

– Processing of payments and related activities, which include fraud detection, loss prevention, transaction optimization, communications about such payments, and related customer service activities.

1. Legal Compliance. We process Personal Data to verify the identities of individuals and entities to comply with obligations related to fraud monitoring, prevention, and detection, laws associated with identifying and reporting illicit and illegal activities, such as those under the Anti-Money Laundering (“AML”) and Know-Your-Customer (“KYC”) regulations, and financial reporting obligations. For example, we may be required to record and verify a Business User’s identity to comply with regulations designed to prevent money laundering, fraud, and financial crimes. These legal obligations may require us to report our compliance to third parties and subject ourselves to third party verification audits.

1. Legitimate Interests. Where permitted under applicable law, we rely on our legitimate business interests to process your Personal Data. The following list provides an example of the business purposes for which we have a legitimate interest in processing your data:

– Detection, monitoring, and prevention of fraud and unauthorized payment transactions;

– Mitigation of financial loss, claims, liabilities or other harm to End Customers, Business Users, Financial Partners, and Qashier;

– Determination of eligibility for and offering new Qashier Services;

– Response to inquiries, delivery of Service notices, and provision of customer support;

– Promotion, analysis, modification, and improvement of our Services, systems, and tools, as well as the development of new products and services, including enhancing the reliability of the Services;

– Management, operation, and improvement of the performance of our Sites and Services, through understanding their effectiveness and optimizing our digital assets;

– Analysis and advertisement of our Services, and related improvements;

– Aggregate analysis and development of business intelligence that enable us to operate, protect, make informed decisions about, and report on the performance of our business;

– Sharing of Personal Data with third party service providers that offer services on our behalf and business partners that help us in operating and improving our business (Learn More);

– Enabling network and information security throughout Qashier and our Services; and

– Sharing of Personal Data among our affiliates.

1. Consent. We may rely on consent or explicit consent to collect and process Personal Data regarding our interactions with you and the provision of our Services. When we process your Personal Data based on your consent, you have the right to withdraw your consent at any time, and such a withdrawal will not impact the legality of processing performed based on the consent prior to its withdrawal.
   
   
2. Substantial Public Interest. We may process special categories of Personal Data, when such processing is necessary for reasons of substantial public interest and consistent with applicable law, such as when we conduct politically-exposed person checks. We may also process Personal Data related to criminal convictions and offenses when such processing is authorized by applicable law, such as when we conduct sanctions screening to comply with AML and KYC obligations.

1. Other valid legal bases. We may process Personal Data further to other valid legal bases as recognized under applicable law in specific jurisdictions. 

 

4. Your rights and choices

Depending on your location and subject to applicable law, you may have choices regarding our collection, use, and disclosure of your Personal Data:

1. Opting out of receiving electronic communications from us

If you wish to stop receiving marketing-related emails from us, you can opt-out by clicking the unsubscribe link included in such emails or by replying to the email indicating your intention to unsubscribe. We’ll try to process your request(s) as quickly as reasonably practicable. However, it’s important to note that even if you opt out of receiving marketing-related emails from us, we retain the right to communicate with you about the Services you receive (like support and important legal notices) and our Business Users might still send you messages or instruct us to send you messages on their behalf.

1. Your data protection rights

Depending on your location and subject to applicable law, you may have the following rights regarding the Personal Data we process about you as a data controller:

– The right to request confirmation of whether Qashier is processing Personal Data associated with you, the categories of personal data it has processed, and the third parties or categories of third parties with which your Personal Data is shared;

– The right to request access to the Personal Data Qashier processes about you;

– The right to request that Qashier rectify or update your Personal Data if it’s inaccurate, incomplete, or outdated;

– The right to request that Qashier erase your Personal Data in certain circumstances as provided by law;

– The right to request that Qashier restrict the use of your Personal Data in certain circumstances, such as while Qashier is considering another request you’ve submitted (for instance, a request that Qashier update your Personal Data);

– The right to request that we export the Personal Data we hold about you to another company, provided it’s technically feasible;

– The right to withdraw your consent if your Personal Data is being processed based on your previous consent;

– The right to object to the processing of your Personal Data if we are processing your data based on our legitimate interests; unless there are compelling legitimate grounds or the processing is necessary for legal reasons, we will cease processing your Personal Data upon receiving your objection; 

– The right not to be discriminated against for exercising these rights; and 

– The right to appeal any decision by Qashier relating to your rights by contacting Qashier’s Data Protection Officer (“DPO”) at [email protected], and/or relevant regulatory agencies.

You may have additional rights, depending on applicable law, over your Personal Data.

1. Process for exercising your data protection rights 

To exercise your data protection rights related to Personal Data we process as a data controller, contact us as outlined below.  For Personal Data we process as a data processor, please reach out to the relevant data controller (Business User) to exercise your rights. If you contact us regarding your Personal Data we process as a data processor, we will refer you to the relevant data controller to the extent we are able to identify them. 

5. Security and Retention

We make reasonable efforts to provide a level of security appropriate to the risk associated with the processing of your Personal Data. We maintain organizational, technical, and administrative measures designed to protect the Personal Data covered by this Policy from unauthorized access, destruction, loss, alteration, or misuse. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure.

We encourage you to assist us in protecting your Personal Data. If you hold a Qashier account, you can do so by using a strong password, safeguarding your password against unauthorized use, and avoiding using identical login credentials you use for other services or accounts for your Qashier account. If you suspect that your interaction with us is no longer secure (for instance, you believe that your Qashier account’s security has been compromised), please contact us immediately.

We retain your Personal Data for as long as we continue to provide the Services to you or our Business Users, or for a period in which we reasonably foresee continuing to provide the Services. Even after we stop providing Services directly to you or to a Business User that you’re doing business with, and even after you close your Qashier account or complete a transaction with a Business User, we may continue to retain your Personal Data to:

– Comply with our legal and regulatory obligations;

– Enable fraud monitoring, detection, and prevention activities; and

– Comply with our tax, accounting, and financial reporting obligations, including when such retention is required by our contractual agreements with our Financial Partners (and where data retention is mandated by the payment methods you’ve used).

In cases where we keep your Personal Data, we do so in accordance with any limitation periods and record retention obligations imposed by applicable law.

6. International Data Transfers

As a global business, it’s sometimes necessary for us to transfer your Personal Data to countries other than your own Country of Residence. These countries might have data protection regulations that are different from those in your country. When transferring data across borders, we take measures to comply with applicable data protection laws related to such transfer. In certain situations, we may be required to disclose Personal Data in response to lawful requests from officials, such as law enforcement or security authorities. 

7. Updates and notifications

We may change this Policy from time to time to reflect new services, changes in our privacy practices or relevant laws. The “Last updated” legend at the top of this Policy indicates when this Policy was last materially revised. Any changes are effective the latter of when we post the revised Policy on the Services or otherwise provide notice of the update as required by law.

We may provide you with disclosures and alerts regarding the Policy or Personal Data collected by posting them on our website and, if you are an End User or Representative, by contacting you through QashierHQ, contact number, email address and/or the physical address listed in your Qashier account.

8. Jurisdiction-specific provisions

– Singapore. In this Policy, “applicable law” includes the Personal Data Protection Act 2012 (“PDPA”) (No. 26 of 2012) as amended from time to time. In some cases, and as permitted under the PDPA, we may rely on “deemed consent” as a legal basis. For example, we do so when you voluntarily provide your personal data to us. If you have any questions or complaints about this Policy, please contact our DPO at [email protected].

– Malaysia. In this Policy, “applicable law” includes the Personal Data Protection Act 2010 (“PDPA”) (Act 709) as amended from time to time. If you have any questions or complaints about this Policy, please contact our DPO at [email protected].

– Thailand. In this Policy, “applicable law” includes the Personal Data Protection Act 2019 (“PDPA”). If we rely on certain legal bases (such as “legal obligation” or “contractual necessity” and you do not provide us with your Personal Data, we may not be able to lawfully provide you services. If you have any questions or complaints about this Policy, please contact our DPO at [email protected]. Where required, we have put in place appropriate safeguards for the cross-border transfer of Personal Data from Thailand, including the EU Standard Contractual Clauses as adapted for Thailand data transfers in accordance with the Notification of the Personal Data Protection Committee on Criteria for the Protection of Personal Data Sent or Transferred to a Foreign Country Pursuant to Section 29 of the Personal Data Protection Act, B.E. 2562 B.E. 2566 (2023).

– Philippines. In this Policy, “applicable law” includes the Data Privacy Act of 2012 (Act 10173) as amended from time to time. If you have any questions or complaints about this Policy, please contact our DPO at [email protected].

9. Contact us

If you have any questions or complaints about this Policy, please contact us at [email protected]. If you are an End Customer (i.e., an individual doing business or transacting with a Business User), please refer to the privacy policy or notice of the Business User for information regarding the Business User’s privacy practices, choices and controls, or contact the Business User directly.