Privacy Notice

1. Who we are

Golojoy Tech Co., Ltd. (บริษัท โกโลจอย เทค จำกัด) (“Golojoy”, “we”, “us”) operates the Golojoy Partner Portal and Golojoy for Business (together, the “Service”). Golojoy is the data controller for the personal data described in this notice — we decide why and how it is processed. Questions or requests: privacy@golojoy.com.

2. Personal data we collect

• Account data — name, work email, phone number, login credentials, workspace role.
• Business data — company or shop name, registration and tax ID, address, bank account details used for payouts.
• Operational data — services, bookings, ticket scans, staff and employee records, allowances and budgets you enter.
• Support data — messages, attachments and correspondence you send us.
• Usage and device data — pages viewed, actions taken, IP address, browser and device identifiers, error logs.
• Cookies — see section 8.

We record the billing details and transfer slips you submit at checkout. We never store full card numbers.

3. Why we use it, and our legal basis

• Creating and administering your account and workspace — performance of our contract with you.
• Providing the Service: bookings, check-in, payouts, benefits administration — performance of contract.
• Security, fraud prevention and abuse detection — our legitimate interest in protecting the Service.
• Product improvement and aggregate analytics — legitimate interest.
• Customer support — performance of contract and legitimate interest.
• Marketing emails about Golojoy products — consent, withdrawable at any time.
• Accounting, tax and legal record-keeping — legal obligation.

4. Who we share data with

• Service providers / subprocessors — cloud hosting, database, email delivery, analytics and support tooling, acting on our instructions.
• Banks and payment networks — to receive and reconcile PromptPay and bank transfer payments for subscriptions.
• Counterparties in a transaction — a partner sees the booking details needed to deliver the service; a corporate administrator sees their own employees’ allowance usage.
• Professional advisers — legal, accounting and audit.
• Authorities — where required by law or valid legal process.

We do not sell personal data.

5. International transfers

Our providers may process data outside Thailand, including in the EEA, the UK, Singapore and the United States. Where data leaves your jurisdiction we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

6. Retention

We keep account and operational data for as long as your workspace is active, and afterwards only as long as needed for legitimate business, accounting and legal purposes — generally up to 10 years for transaction and tax records, and up to 24 months for usage logs. Data that is no longer needed is deleted or anonymised.

7. Your rights

Subject to Thailand’s Personal Data Protection Act and, where applicable, the UK/EU GDPR, you may request access to your data, rectification, erasure, restriction of processing, data portability, and object to processing based on legitimate interests. You may withdraw consent at any time. Email privacy@golojoy.com and we will respond within 30 days. You also have the right to complain to your data protection authority (in Thailand, the PDPC).

8. Cookies

We use essential cookies to keep you signed in and secure the session; these cannot be switched off. We use limited analytics cookies to understand how the Service is used. We do not use advertising cookies. You can block or delete cookies in your browser settings, though essential cookies are required for sign-in to work.

9. Security

We apply appropriate technical and organisational measures, including encryption in transit, encryption at rest for stored records, row-level access controls, role-based permissions and audited administrative access. No system is perfectly secure, but we review these controls regularly.

10. Changes

We may update this notice. Material changes will be notified in the product or by email before they take effect.