Privacy Policy

“MassOrder” Application ("MassOrder" or "Platform" or "we" or “our” or “us”) understands and recognizes the importance of your personal data and fundamental rights as the data subject. This Privacy Policy is provided to inform you about our privacy practices, which will describe the collection, use, or disclosure of personal data, purposes of processing, retention periods of such personal data, as well as security measures, including the rights of users as data subjects (“Platform user” or “Platform users” or "you"), regardless of whether you participate in MassOrder as a seller or a buyer or others ( For instance, general users who visit Platform or individuals who participate in activities organized conducted by MassOrder).

We hereby confirm our commitment to uphold this Privacy Policy, as well as  applicable legislation, in order to  ensure your confidence that any data you provided to us will be used for the stated purposes and in compliance with the law.

By registering as a member using Platform, or  its services, it shall be deemed that you acknowledge and consent to this Privacy Policy and authorize us to collect, use, disclose, or process your personal data in the manner  as specified in this Privacy Policy.

If you do not agree to the collection, usage, disclosure, and/or processing of your personal data as specified in this Privacy Policy, please discontinue using or accessing our services.

1. Definitions

"Personal Data (General)" refers to data relating to an individual that can be used to identify that person, whether directly or indirectly, excluding data of deceased individuals.

"Sensitive Personal Data" refers to personal data concerning race, ethnicity, political opinions, beliefs in religion or philosophy, sexual behavior, criminal records, health data, disabilities, labor union membership, genetic data, biometric data, or any other data with a similar impact on the data subject, as specified by the Committee on the Protection of Personal Data.

"Processing" refers to any actions or any operation on personal data, including collection, use, disclosure, erasure, or destruction of personal data.

2. Collection of Personal Data

2.1 We may collect personal data from registering platform user accounts, offering products or services, ordering products or services, searching products or services on the Platform, communicating through the call center or any other channels. The types of personal data we may collect include:

(1) Personal data, such as name, surname,  identification number, passport number, etc.

(2) Contact data, such as address, phone number, email, social media accounts (e.g., Google Account, Line ID, Facebook ID),  etc.

(3) Financial data such as a bank account number, a taxpayer identification number, etc.

(4) Platform user account information including user name, membership ID, Platform usage history, transaction history, payment history, and all other privileges, etc.

(5) Technical data, such as  Platform usage history.

(6) Other data, such as exchanges and correspondence records between you and Platform, and any other data considered personal data under data protection laws.

2.2 In the case of minors (individuals under the age of 20), if individuals provide us their personal data, we consider that you have obtained consent from a legal guardian, parent, or person with legal authority to act on behalf of the minor, permitting us to collect and process personal data.

3. Purposes of Processing Personal Data

We will collect and process your personal data in accordance with the law and in a fair and transparent manner, only to the extent necessary for the purposes set out below. The purposes for which we may process your personal data include:

Purposes of processing

Lawful Basis of Processing

To verify the identity of users during registration on our Platform, which operates as an online intermediary for the buying and selling goods and services, in accordance with the Platform’s terms and conditions.

  • Performance of a contract or any prerequisite before entering into a contract.

To offer a sale on products or services or submit an order on products and/or services, including utilizing associated benefits, in accordance with the outlined in terms and conditions of our Platform.

  • Performance of a contract

To conduct accounting and financial transactions, such as process payment, manage successful transactions, address taxation matters, generate invoices, handle debt collection, respond to inquiries, conduct account audits, including comply with our internal procedures, or communicate between you and us, which may involve the exchange of various documents.

  • Performance of a contract
  • Compliance with Legal Obligations

To fulfill legal obligations and enforce legal claims, including reporting data to government agencies as required by law, such as the Revenue Department, investigations by law enforcement officials, governmental entities, or courts.

  • Compliance with Legal Obligations

To maintain, manage, develop, and enhance our services, with the aim of improving user experience and maximizing the benefits derived from using our Platform. This includes planning, reporting, and forecasting our business activities.

  • Legitimate Interests

To establish legal claims, exercise legal rights, or engage in legal proceedings.

  • Legitimate Interests

To send newsletters, promotional offers, sales promotions, and provide information about products or services, which may include a variety of notifications

  • Legitimate Interests

To perform a disclosure of personal data to any service providers that are necessary for our operations, such as marketing agencies, cloud service providers, banks, financial institutions, or IT system administrators, etc.

  • Performance of a Contract
  • Legitimate Interests

The purposes for which we may collect, use, disclose, or process your personal data depend on different situations. All specified purposes may not be fully outlined in the foregoing sections. However, we shall inform you of these intended purposes upon obtaining your consent, except in cases where legal regulations permit us to engage in activities involving your personal data without requiring your prior consent, we shall proceed accordingly.

4. Sources of Personal Data

We may obtain personal data from you through various channels including but not limited to:

  1. We obtain your personal data directly from you.

      • MassOrder Platform: We may obtain personal data when you register as a user on MassOrder, post to offer products or services, submit a request on buying or selling products or services, complete various forms, participate in surveys or events, provide information, enroll in various activities, or initiate claims or requests to exercise of your  rights through different channels, such as the Platform, email, and any social media Platforms (e.g. Line, Instagram, or Facebook).

        • We may collect your personal information offline, such as when you visit our office, contact us by phone, or attend one of our events.

        • We may also automatically collect information about you, such as when you use our platform.

  1. We obtain your personal data from other sources, such as:

• Our customers, or our representatives who offer our Platform services to you.

• Collaborative business partners.

• Government agencies or other public sources, such as data available on the internet or on social media Platforms such as Facebook, Twitter, Instagram, Line, etc.

5. Disclosure of Personal Data

We may disclose your personal data with others, either upon obtaining your consent or as required by applicable law, based on the purposes specified in this privacy policy, including but not limited to:

1. Other Platform users who utilize our Platform for the purpose of buying and selling products. This may facilitate communication and interaction between you and other Platform users. Please be aware that information you publicly disclose, such as your username and profile picture, may be accessible to other users and any data you disclose during conversations, messages, posts, or other means during the use of our Platform (e.g., sharing your address or phone number with other users who may be sellers or buyers) may be collected by those other users. The disclosure of such information will be your sole responsibility and will not be under the control or data protection measures of our Platform.

2. Government agencies or other entities as mandated by law, including legal officials such as courts, police, the Revenue Department, the Customs Department, and others, exercise their lawful authority.

3. Representatives, contractors, and/or service providers who are engaged in various operational functions. These may include:

• Service providers engaged in marketing activities, research, or information technology development.

• Banks or intermediaries providing electronic fund transfer services.

• Auditors, legal advisors, or other professional consultants.

4. Cloud service providers and individuals, whether situated within Thailand or abroad, including system administrators, application developers, and related information systems, including our application support team. These individuals are considered as data processors of your personal data.

5. Other collaborative business partners or external individuals as permitted by your consent or in accordance with  the terms of agreements or legal obligations, as applicable.

6. Mobile Application Push Notifications:

We may send push notifications to your mobile device to provide updates related to your usage of various services or updates your transaction status on Platform, as well as other relevant news concerning our services. If desired, you can opt-out of receiving push notifications by changing the notification settings through our Platform.

7. Data Retention Period

The criteria guiding the determination of retention period include the duration of our relationship with you and provision of services. Generally, after terminating our services, the maximum data retention period is 5 years, or as required by the law or the statutory period designated for asserting legal claims, exercising legal rights, or defending against legal claims. This may also include criteria specified in our internal policies and terms.

8. Data Subjects Rights

As the data subject, you have the following rights within  permitted by applicable law as follows:

• Right to withdraw consent: You have the right to withdraw your consent to process your personal data at any time. However, we may continue processing your personal data if we have other legal bases for processing your personal data.

• Right to access personal data: You have the right to access your personal data and may request us to provide you with copies of such data.

• Right to rectify personal data: You have the right to request us to rectify any of your personal data to become accurate, up-to-date, and complete.

• Right to erasure of personal data: You have the right to request us to erase, destroy, or anonymize your personal data so that it can no longer identify you. However, we may continue processing your personal data if we have other legal bases for doing so.

• Right to object to processing: You have the right to object to the processing of your personal data that is processed under our legitimate interests, except when there are compelling legitimate grounds for the processing that override your interests, rights, and freedoms.

• Right to data portability: You have the right to request the transfer of your personal data to third parties.

• Right to suspend processing: You have the right to request the suspension of the processing of your personal data, for example, when you request us to rectify your personal data, or when you challenge the lawful basis of the processing.

• Right to lodge a complaint: You have the right to lodge a complaint with the Office of the Personal Data Protection Commission in case we violate or fail to comply with the Personal Data Protection Act.

For other users who are recipients of your disclosed personal data on the Platform, they may collect, use, and process your personal data which are not under our control. If you desire to exercise any of the data subject rights mentioned above, you must directly contact those other users who are processing your personal data. We are not involved in any processing activities carried out by other users who are recipients of your personal data.

9.  Security Measures for Personal Data Protection

We have established measures to ensure the security of personal data, ensuring it remains confident.These measures aim at preventing loss, unauthorized access, destruction, misuse, alteration , modification, or disclosure of personal data without legal authorization or consent, in accordance with established data security standards.

10. Contact Detail

For inquiries or an exercise of data subject rights, or a submission of complaints about the processing of your personal data under our control as data controller, you can contact us via the designed contact channels or via email [email protected].

11. Change of Privacy Policy

We reserve the right to update, modify, or amend this privacy policy in a whole or a part in the future, in compliance with appropriateness and legal requirements. Any revisions, changes, or amendments will be duly communicated to you.

This Privacy Policy will come into effect on  01 August 2023, and will remain in validity until any revisions, changes, modifications, or revocation.