Privacy policy

Summary

Fan4you protects personal data under Thailand’s Personal Data Protection Act B.E. 2562 (PDPA). This page explains what we collect, why we use it, and how you can exercise your rights.

1. Introduction

The data controller is the operator of the Fan4you platform at fan4you.app. This notice covers visitors, members, profile owners, and people who contact support. Where we use processors, they work under appropriate agreements.

2. Data we collect

We collect only what we need to run the service, including:

• Identity data you provide at signup or verification, such as display name, email, phone number, and KYC documents.
• Profile data you publish yourself, such as photos, bio, work area, and contact links.
• Reviews, comments, and reports you submit.
• Usage data such as pages viewed, device, browser, and IP address.
• Payment data handled by certified payment providers — Fan4you does not store full card numbers in our own systems.

3. Why we use data

We use data to:

• Create accounts, show profiles, and provide search, reviews, in-app features, and promotion packages.
• Verify identity and prevent fake accounts and fraud.
• Send notices about your account, security, and support.
• Comply with law, court orders, or requests from competent authorities.
• Analyse usage in aggregate to improve the product. We do not sell member lists.

4. Sharing

We do not sell your personal data. We may share data only as needed with processors that help us operate the site, such as hosting, payments, analytics, and support chat, under data-processing terms, and with government agencies when the law requires it.

5. Your PDPA rights

You have rights under applicable law, including:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete data where the law allows.
• Object to or restrict certain processing.
• Data portability in a reasonable format.
• Withdraw consent at any time, without affecting lawful processing already carried out.

6. Retention

We keep data while your account is active, or as long as needed for the stated purposes and the law. In general this is no more than three years after account closure, unless we must keep records for disputes, fraud prevention, or legal duty. KYC records may be kept longer based on account risk.

7. Security

We use HTTPS/TLS in transit and limit internal access by role. No system is perfectly secure. If you think your account was accessed without permission, change your password and tell the team immediately.

8. Privacy contact

To exercise PDPA rights or ask about this policy, use the contact page or the official Telegram group. Mark the subject “PDPA” and describe your request clearly. We will respond within the statutory period after we can verify the requester.