Privacy Policy

Proper Dinner Club operates a membership, meal-ordering and delivery service in Chiang Mai, Thailand. For the personal data described in this Policy, Proper Dinner Club acts as the data controller unless stated otherwise.

Privacy questions and requests may be sent to hello@properdinner.club or submitted through our contact page.

• Identity and contact data: name, email address, telephone number and account identifiers.
• Membership and profile data: membership plan and status, meal credits, referral activity, preferences and account settings.
• Order and delivery data: orders, delivery address and map location, access instructions, delivery status, proof photographs, complaints and support history.
• Payment data: transaction amount, currency, payment status, Stripe customer or transaction identifiers and limited billing details. Proper Dinner Club does not receive or store your full payment-card number.
• LINE and communications data: LINE user identifier, display name, profile image and follow status when you connect LINE, together with messages, notification preferences and campaign interactions.
• Device and usage data: IP address, browser and device information, authentication and security records, cookies, local-storage preferences and push-notification tokens.
• Dietary information: dietary preferences or allergy information that you choose to provide.

• directly from you when you register, purchase a membership, place an order, enter an address, contact us or update your profile;
• automatically when you use our website, sign in, use a referral link or enable notifications;
• from services you choose to connect, including LINE;
• from payment, delivery and technical service providers when they confirm an activity or help us operate the service; and
• from another person when they refer you, order for your household or provide your details with your authority.

• to create and secure your account;
• to activate and administer memberships, meal credits, renewals and referrals;
• to process payments, refunds and transaction records;
• to prepare orders, honour preferences and arrange delivery;
• to send service messages about orders, deliveries, membership status and account security;
• to provide support and resolve complaints;
• to prevent fraud, misuse and security incidents;
• to improve menus, operations, service reliability and customer experience;
• to send marketing where permitted and manage your communication choices; and
• to comply with accounting, tax, food-safety, consumer-protection and other legal obligations.

Depending on the activity, we process personal data because it is necessary to enter into or perform our contract with you, to comply with a legal obligation, for our legitimate interests or those of another person, to establish or defend legal claims, to protect vital interests, or because you have given consent.

Our legitimate interests include operating and improving the service, protecting members and the business, preventing fraud, keeping appropriate records and communicating about closely related services. We consider your rights and reasonable expectations before relying on these interests.

Where processing depends on consent, you may withdraw that consent at any time. Withdrawal does not affect processing already carried out lawfully before withdrawal.

Allergy or dietary information may reveal health or religious information and may therefore be sensitive personal data. You are not required to provide it, but without relevant information we may be unable to consider a dietary request.

When Thai law requires explicit consent to use sensitive data, we will ask for it or rely on another basis specifically permitted by law. Kitchen and delivery personnel receive only the information reasonably needed to prepare and deliver an order.

We share personal data only as reasonably necessary with:

• authorised Proper Dinner Club kitchen, operations, customer-support, administration and delivery personnel;
• Supabase for account authentication, database and file storage;
• Stripe for payment processing and fraud prevention;
• LINE when you connect your LINE account or receive LINE communications;
• Vercel and other infrastructure providers that host and deliver our website;
• Google services for maps, geocoding and optional push notifications through Firebase;
• email-delivery providers used to send account, order and support messages;
• professional advisers, insurers, auditors or a purchaser of the business where appropriate; and
• courts, regulators, law-enforcement bodies or other parties when disclosure is required or permitted by law.

These recipients may act as our processors, independent controllers or joint participants depending on the service. We do not sell or rent personal data to third parties.

Some technology and communications providers may process personal data outside Thailand. Where a transfer is subject to the Personal Data Protection Act B.E. 2562 (2019), we use a method permitted by that law, such as transferring to a destination with adequate protection, using appropriate contractual or organisational safeguards, obtaining consent where legally appropriate, or relying on another permitted exception.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to provide an active account, honour credits and referrals, complete deliveries, handle complaints, maintain security and satisfy legal, tax, accounting and dispute-resolution requirements.

Retention periods vary by record type. When data is no longer required, we delete it, anonymise it or securely isolate it until deletion is possible. Backup copies may remain for a limited period before being overwritten.

Our website uses cookies and similar browser storage that are necessary or useful for sign-in, security, account sessions, LINE connection, referral attribution, shopping-cart contents, interface preferences and notification prompts. A referral-attribution cookie may remain for up to 30 days.

You can remove browser cookies or local storage through your browser settings, but doing so may sign you out, clear your cart or prevent parts of the service from working correctly. We do not currently use third-party advertising cookies.

We may send service messages needed to manage your account, orders, deliveries, credits or security. These are not marketing messages and may continue where necessary even if you opt out of promotions.

You may unsubscribe from email marketing using the link in a message, adjust available account preferences, or block or unfollow our LINE Official Account. You may also contact us to object to direct marketing.

We use reasonable technical and organisational safeguards designed to protect personal data, including access controls, authenticated accounts, encrypted network connections, service-provider controls, activity records and restricted staff access. No internet or storage system can be guaranteed completely secure.

You are responsible for keeping your password and verification codes confidential and for notifying us promptly if you suspect unauthorised account access.

Subject to the conditions and exceptions in Thai law, you may have the right to:

• request access to and a copy of your personal data;
• request information about how we obtained data you did not provide directly;
• request correction of inaccurate or incomplete data;
• request deletion, destruction or anonymisation;
• request restriction of processing;
• object to certain processing, including direct marketing;
• request transfer of data in a portable format where applicable;
• withdraw consent where processing relies on consent; and
• submit a complaint to Thailand’s Personal Data Protection Committee or another competent authority.

To exercise a right, contact us using the details in section 16. We may need to verify your identity and may refuse or limit a request where the law permits. We will explain the reason where legally required.

Membership is intended for adults aged 18 or over. We do not knowingly offer membership to children. If you believe a child has provided personal data without the authorisation required by Thai law, please contact us so we can review and take appropriate action.

We may update this Privacy Policy when our practices, providers or legal obligations change. The effective date at the top shows when the current version began to apply. We will provide reasonable notice of material changes where required.

To ask a privacy question, exercise a right or make a complaint, email hello@properdinner.club, call +66 84 741 7471, or use our contact page.

Please describe your request clearly and include enough information for us to identify the relevant account or communication. If you are dissatisfied with our response, you may complain to Thailand’s Personal Data Protection Committee in accordance with applicable law.