1. Who We Are

www.fifty.in.th (“fifty,” “we,” “our,” or “us”) is a technology-driven platform designed to help people discover, compare, and request services from businesses in Thailand.

We use automated tools and internal processes to organize business information, respond to questions, summarize publicly available information, identify relevant service providers, and prepare inquiries or booking requests.

For purposes of applicable data protection laws, the operator identified above determines how and why personal data is processed, except where another party independently determines its processing purposes.

This Privacy Policy explains how personal data is collected, used, disclosed, stored, and protected when you visit or use www.fifty.in.th.

2. Information We Collect

We collect only the information reasonably needed for the purposes described in this Policy.

2.1 Information Provided by Customers

Depending on how you use the platform, we may collect:

• Name or nickname and contact information, including email address or telephone number.
• Questions, messages, and information submitted through interactive chat features or other forms.
• Service preferences, requested location, budget, preferred dates, and other details needed to identify suitable services.
• Inquiry, booking, order, and communication records.
• Information you voluntarily provide when contacting us for support.

2.2 Information Provided by Businesses

Businesses applying to join fifty may provide:

• Business name, contact details, address, and operating hours.
• Service descriptions, prices, menus, conditions, and availability information.
• Business photographs, logos, documents, and other materials submitted for their business profile.
• Information necessary to verify a business or the authority of its representative.
• Inquiry, order, confirmation, and communication records.

Businesses are responsible for ensuring that they have the appropriate rights and authority to submit the information, documents, and photographs they provide to fifty.

2.3 Publicly Available Business Information

To help customers discover and evaluate businesses, fifty may obtain business-related information from sources such as:

• Public business websites and social media pages.
• Public business directories and listings.
• Public service menus, price lists, opening hours, and photographs.
• Publicly accessible reviews and customer comments.
• Other sources that may lawfully be used for our stated purposes.

We may organize this information into structured business profiles, identify inconsistencies, summarize reviews, and indicate when information appears incomplete or requires confirmation.

Where reasonably practicable, we seek to record the source and date of relevant information. Public availability does not necessarily mean that information is accurate, current, or free from privacy restrictions.

We may correct, restrict, or remove information when appropriate, including when a business provides credible evidence that information is inaccurate or should not be published.

2.4 Information Collected Automatically

When you visit the platform, we may collect technical information such as:

• IP address and approximate location derived from it.
• Browser type, device information, and operating system.
• Pages visited, interaction events, and timestamps.
• Security logs and information needed to detect misuse.

Cookies and analytics identifiers will be used only as described in our cookie arrangements and subject to any consent requirements that apply.

3. How We Use Personal Data

We may use personal data for the following purposes:

• To operate, maintain, and secure fifty.
• To create, maintain, and update business profiles.
• To answer customer questions and provide relevant service information.
• To organize information, summarize reviews, and match service requests with relevant businesses.
• To prepare inquiries, booking requests, and order summaries.
• To forward a customer’s request to a business the customer selects or asks us to contact.
• To facilitate communication, confirmations, and transaction-related steps.
• To detect suspicious activity, misuse, inaccurate information, and security risks.
• To improve the reliability and usability of the platform.
• To respond to complaints, enforce our agreements, and comply with applicable laws.

We do not intentionally collect detailed medical records to diagnose conditions or support clinical decision-making. fifty is not designed to diagnose conditions or determine medical treatment.

4. Legal Basis for Processing

Where required by applicable law, we process personal data on an appropriate legal basis. Depending on the circumstances, this may include:

• Contractual necessity: To provide a service you request or take steps you request before entering into a contract.
• Legitimate interests: To operate and protect the platform, maintain business profiles, prevent misuse, and improve services, where those interests are not overridden by applicable rights.
• Consent: Where consent is required, including for certain optional cookies or the processing of sensitive personal data.
• Legal obligations: Where processing is necessary to comply with applicable law.

The legal basis depends on the purpose and circumstances of the processing. We will not treat this list as a blanket legal basis for every activity.

Where processing relies on consent, you may withdraw that consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

5. Automated Features and Recommendations

fifty uses automated tools and internal processes to support the following functions:

• Interpret customer questions and preferences.
• Organize information supplied by businesses.
• Summarize available business information and public reviews.
• Match service requests to businesses using factors such as service type, location, budget, stated preferences, and available business information.
• Prepare draft responses, inquiries, and order summaries.
• Identify missing, inconsistent, or potentially unreliable information for further review.

Information produced by automated tools may be incomplete, outdated, or inaccurate. A summary of reviews does not guarantee that the reviews are genuine, representative, or independently verified.

A risk indicator is not, by itself, proof of fraud, misconduct, or wrongdoing.

Business profiles, recommendations, and matches are informational aids, not guarantees of quality, safety, suitability, licensing, or business conduct. Users should consider the available evidence and confirm important details directly with the relevant business.

Unless expressly stated otherwise, our automated tools do not confirm a booking, guarantee availability, or authorize a business to provide a service. The relevant business must confirm the applicable service details, price, availability, and booking conditions.

Where applicable law requires further information about a decision made solely through automated processing, including a decision with legal or similarly significant effects, we will provide the required information and any applicable review or safeguard mechanisms.

6. Technology Service Providers

To operate the platform, we may use third-party service providers, including:

• Cloud hosting and database providers.
• Specialized information-processing and response-support providers that help process submitted information and prepare responses, summaries, or recommendations.
• Security, monitoring, and technical support providers.
• Email, messaging, and communication services.
• Analytics providers, where used.
• Payment processors, if payment functionality is introduced.

These providers may process personal data on our behalf or in accordance with their own applicable responsibilities and privacy terms.

Before this Policy is published, fifty will identify the hosting, information-processing, analytics, messaging, and payment providers it actually uses and verify the purposes for which information is shared, the countries where it may be processed, applicable retention periods, security arrangements, and terms governing any further use of submitted information. This Policy must accurately reflect those arrangements.

We will not state that submitted information is excluded from a provider’s service-improvement activities or retained for a particular period unless the applicable provider terms, account settings, and contractual arrangements support that statement.

7. When We Share Information

We may disclose relevant personal data in the following circumstances:

• Selected businesses: When you ask fifty to contact a business or proceed with an inquiry or booking request, we may share the information reasonably necessary for that request, such as your contact details, selected service, preferred date, and relevant requirements.
• Technology providers: We may share relevant information with service providers that host, operate, secure, or support the platform, including providers that process submitted text or other information to prepare responses, summaries, or recommendations.
• Payment providers: If payment functionality is introduced, relevant information may be provided to the payment processor and other parties necessary to complete or record the transaction.
• Legal and safety purposes: We may disclose information where required by law, pursuant to a valid legal process, or where reasonably necessary to protect rights, safety, or the security of the platform, subject to applicable law.
• Business transfers: If fifty undergoes a business transfer, merger, restructuring, or sale, personal data may be transferred as part of that transaction, subject to applicable legal requirements.

We do not sell personal data to third parties in exchange for money. Any future advertising, data-sharing, or commercial arrangement involving personal data will be assessed and disclosed as required by applicable law.

We do not disclose a customer's private conversation to a business merely because that business appears in a search result. Information is shared for an inquiry or transaction when reasonably necessary for the customer's request.

8. Health and Other Sensitive Personal Data

Certain information, including health information, is subject to additional legal protections.

The general fifty inquiry service is not intended to collect detailed clinical information, medical histories, diagnoses, prescriptions, or medical records.

Please use the relevant healthcare provider's appropriate secure channel for such information rather than submitting it through general chat features.

If sensitive personal data is genuinely required for a particular feature, we will assess the applicable legal requirements before collecting or using it and obtain explicit consent or rely on another legally permitted basis where required.

If unnecessary sensitive information is submitted, we will take appropriate steps to restrict, delete, or otherwise handle it in accordance with applicable law and what is technically practicable.

9. International Data Transfers

fifty may use service providers or infrastructure located outside Thailand. As a result, personal data may be processed in another country.

Where a transfer is subject to the Thailand Personal Data Protection Act (PDPA), GDPR, or another applicable data protection law, we will use an appropriate transfer mechanism or safeguard where required.

The actual countries, service providers, and safeguards must be assessed and documented based on the infrastructure and vendors used by fifty. This Policy does not represent that a particular safeguard is in place unless it has actually been implemented.

10. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, subject to applicable legal obligations and the establishment, exercise, or defence of legal claims. Our retention schedule will address, at a minimum:

• Unconverted inquiries and customer conversations.
• Orders, bookings, payment records, and disputes.
• Business profiles and verification records.
• Security logs and technical records.
• Backups and records that must be retained by law.

Before launch, fifty will set and document specific retention periods for each category and configure its systems to apply them. Where information is no longer needed, we will delete it, anonymize it, or securely restrict it, as appropriate, unless continued retention is legally required.

Deletion from active systems may not immediately remove information from backups, where those backups remain temporarily available under the applicable retention schedule.

11. Security and Data Breaches

We use, or will implement before launch, reasonable technical and organizational safeguards designed to protect personal data against unauthorized access, disclosure, alteration, loss, and misuse.

These measures should be appropriate to the nature and risks of the information processed and may include access controls, authentication, limited staff access, secure transmission, backups, monitoring, and appropriate controls for third-party providers.

No website, software system, network, or electronic transmission can be guaranteed to be completely secure.

If a personal data breach occurs, fifty will assess it and take the actions required by applicable law, including notification to the relevant authority or affected individuals where required.

This statement does not exclude any responsibility that cannot lawfully be excluded.

12. Your Privacy Rights

Subject to applicable law and any relevant legal exceptions, you may have the right to:

• Request access to personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion or destruction of personal data.
• Request restriction of certain processing.
• Object to processing in circumstances provided by law.
• Withdraw consent where processing relies on consent.
• Request a copy or transfer of personal data where applicable.
• Request information about the source of data that was not collected directly from you.
• Seek review of an automated decision where the law provides that right.
• Lodge a complaint with the appropriate data protection authority.

To exercise a right, contact us using the details in Section 16. We may request reasonable information to verify your identity and protect against unauthorized disclosure.

Some requests may be limited where the law permits or requires continued processing, including for legal obligations or the establishment, exercise, or defence of legal claims.

We will respond within the time limits required by applicable law.

13. Cookies and Similar Technologies

fifty may use essential cookies or similar technologies to provide website functions and maintain security.

If analytics or other non-essential technologies are used, we will provide appropriate information and obtain consent where required by applicable law.

You may also control cookies through your browser settings. Disabling certain cookies may affect website functionality.

The final cookie notice must accurately identify the technologies actually used by the live website.

14. Third-Party Websites and Services

fifty may link to or display information from third-party businesses, clinics, wellness providers, social media platforms, payment services, or other websites.

Those third parties may collect and process information under their own privacy policies and terms. We do not control their independent data-processing activities.

Before providing information directly to a third party, you should review its privacy information and understand what will be shared.

fifty's use of a public business page or review does not mean that the business endorses fifty or that fifty guarantees the accuracy of all information on that page.

15. Children's Privacy

fifty's general account, inquiry, and booking functions are intended for adults aged 18 or older.

Please do not submit children's personal data or medical information through general chat features. Where a service requires information about a child, an appropriate process and the required parental or guardian authority must be established before the information is collected.

If we become aware that personal data has been collected inappropriately, we will assess and take appropriate action under applicable law.

16. Contact Us

For questions, requests, corrections, or complaints concerning personal data, contact:

Please describe your request and provide sufficient information for us to identify the relevant records. Do not send passwords, full payment card details, or unnecessary medical information.

17. Changes to This Policy

We may update this Privacy Policy when our services, technology, data-processing activities, or applicable legal requirements change.

The revised version will be published on this page with an updated date. Where required by law, we will provide additional notice or obtain consent before carrying out a new processing activity.

The updated Policy will apply from its stated effective date, subject to any legal requirements governing prior processing.