Privacy Policy

1. Who we are

SpaDrop Co., Ltd. (บริษัท สปาดรอป จำกัด), 168/89 Centro Motorway 2, Phatthana Chonnabot 4 Road, Khlong Song Ton Nun, Lat Krabang, Bangkok 10520, Thailand, is the data controller for this website, our LINE Official Account (@spadrop) and the My SpaDrop account area.

2. What we collect

• Contact details: name, phone number, LINE ID and email.
• Booking details: address, building, room number, date, time and treatment.
• Account data: My SpaDrop login, membership plan, Drop Card drops and rewards.
• Payment data: handled by Stripe. We do not store your full card number.
• Partner referrals: which hotel or condo QR code you booked through.
• Device data: cookies, IP address and pages visited.

3. Health information

Before your massage we may ask about injuries, pregnancy or medical conditions so your therapist can keep you safe. This is sensitive data under the PDPA, so we only collect it with your explicit consent, given by a checkbox when you book. You can withdraw consent at any time. The health check we send with your booking confirmation (one form per guest) is seen only by the therapist on that booking and the SpaDrop team, and we delete the answers 30 days after the appointment.

4. How we use it

• To take, confirm and deliver your booking (contract).
• To run memberships and the Drop Card (contract).
• To send offers and news, only if you opt in (consent).
• To prevent fraud and keep therapists safe (legitimate interest).
• To meet tax and accounting rules (legal obligation).

5. Who we share it with

• Your assigned therapist: your name, phone and address for that booking only.
• Our booking admin team.
• Service providers: payment, website hosting, LINE, analytics and advertising (Google Analytics, Google Ads, Meta (Facebook and Instagram), Google Workspace and LINE).
• Partner hotels and condos: booking counts for commission only, never your health notes.
• Authorities, when the law requires it.

6. Data outside Thailand

Some providers store data on servers outside Thailand. When that happens we use safeguards the PDPA accepts.

7. How long we keep it

Booking records: 5 years for accounting · Health notes: 12 months after your last booking · Health check answers: 30 days after the appointment · Marketing data: until you unsubscribe.

8. Your rights

You can ask to access, correct, delete or move your data, object to its use, or withdraw consent. Message us and we will reply within 30 days. You may also complain to the Office of the Personal Data Protection Committee (PDPC).

9. Cookies

We use essential cookies to make the site work and, with your permission, analytics and ad cookies. Change your choice any time in “Cookie settings”.

10. Contact us

Email [email protected] · LINE @spadrop · +66 98 982 4111