Privacy Policy

Last updated: July 2026

Bangpot ("we", "us", "the platform") operates bangpot.events, a cannabis-friendly events and venue discovery platform serving Thailand. This Privacy Policy explains what information we collect, how we use it, and your rights under Thailand's Personal Data Protection Act (PDPA, B.E. 2562).

For any questions about this policy or your data, contact us at contact@bangpot.events.

What We Collect

Information you provide directly

When you submit a claim, register a profile, request support, or sign up for our newsletter, we may collect:

• Business name and business type
• Contact name
• Email address
• Phone number
• LINE ID
• Instagram handle
• Business address and location details
• Profile descriptions and business information
• Payment references (transaction hash or transfer confirmation)

We do not collect personal identification documents, credit card numbers, or banking credentials.

Information collected automatically

When you visit bangpot.events, the following is collected automatically through third-party services that operate in your browser:

Umami Analytics — We use Umami, a privacy-focused analytics service, to understand how people use the platform. Umami does not use cookies, does not collect personal data, and does not track individual users across sessions. Only aggregate usage data (page views, referral sources, device types) is collected.

Google Maps — Venue pages display embedded Google Maps. When a map loads, Google may collect technical data such as your IP address and device information in accordance with Google's own privacy policy.

Cloudinary — All images on the platform (venue photos, logos, event banners) are served through Cloudinary's content delivery network. Cloudinary may log standard request data (IP address, browser type) as part of content delivery.

Google Fonts — The platform loads the Inter typeface from Google Fonts. Google may log standard request data when fonts are loaded.

Supabase — The platform makes client-side API requests to our Supabase database to load venue data, events, and other public content. These requests include standard technical data (IP address, browser type). Authentication tokens are used for logged-in entity dashboard users only.

How We Use Your Information

We use the information we collect for the following purposes:

• Operating and maintaining the platform and your listing or profile
• Communicating with you about your listing, account, or support requests
• Sending transactional emails (claim confirmations, tier activations, profile updates)
• Sending our newsletter (only with your explicit consent, and you can unsubscribe at any time)
• Processing payments and verifying transactions
• Improving the platform based on aggregate usage patterns
• Preventing fraud and abuse

We do not sell, rent, or trade your personal information to any third party.

Who Has Access to Your Information

Your information may be processed by the following services as part of platform operations:

Service	Purpose	Location
Supabase	Database and authentication	United States
Netlify	Hosting and serverless functions	United States
Cloudinary	Image hosting and delivery	Global CDN
Brevo	Transactional and newsletter emails	European Union
Umami	Privacy-focused analytics	Vercel (US)
Google Maps	Map display on venue pages	United States
Google Fonts	Typography	United States
Telegram Bot API	Internal operations notifications	Global

We select services that maintain appropriate security standards. By using the platform, you acknowledge that your data may be processed in countries outside Thailand as listed above.

Data Retention

• Venue and entity profiles: Retained as long as your listing is active on the platform. If you request removal, your data will be deleted within 30 days.
• Support requests: Retained for up to 12 months after resolution, then deleted.
• Newsletter subscribers: Retained until you unsubscribe. Upon unsubscribing, your email is removed from our mailing list within 7 days.
• Payment records: Retained for the duration required by applicable tax and accounting obligations.
• Analytics data: Umami retains only aggregate, non-personal data. No individual user data is stored.

Your Rights Under the PDPA

Under Thailand's Personal Data Protection Act, you have the right to:

• Access your personal data that we hold
• Correct inaccurate or incomplete data
• Delete your personal data (subject to any legal retention obligations)
• Withdraw consent for data processing where consent was the basis
• Object to certain types of data processing
• Request portability of your data in a commonly used format
• File a complaint with the Personal Data Protection Committee if you believe your rights have been violated

To exercise any of these rights, email us at contact@bangpot.events. We will respond to your request within 30 days.

Cookies

Bangpot does not set any first-party cookies. Our analytics service (Umami) is fully cookieless.

Third-party services embedded on the platform (Google Maps, Google Fonts) may set their own cookies according to their respective privacy policies. These are not controlled by Bangpot.

Children

Bangpot is not directed at individuals under 20 years of age, consistent with Thailand's legal cannabis framework. We do not knowingly collect personal data from anyone under 20. If we become aware that we have collected data from someone under 20, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.