Privacy policy

1. Data controller and contact

In Inn Hospitality Company Limited, which operates Belly Shake Café ("the company", "the shop", "we"), is the controller of personal data collected through bellyshake.cafe. This policy explains what we collect, use and disclose, why, and what rights you have under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

• Address: 706 Pradit Manutham Rd, Khlong Chaokhun Sing, Wang Thonglang, Bangkok 10310
• Email: bellyshake.bkk@gmail.com
• Phone: 061-496-5955
• LINE Official Account: https://lin.ee/yZRC1SM

2. What we collect

This website has no forms for entering personal details. The data that may be collected is:

• Website usage data such as IP address, device and browser type, language, pages viewed, time of visit and referring site. It is collected through cookies and online identifiers only if you accept cookies.
• Server access logs that are created automatically when the site is opened, for security and troubleshooting.
• Information you give us directly through outside channels, such as member sign-up, LINE chat or a phone call, which run on those providers' systems (see section 5).

3. Purposes and legal bases

• To count visitors, see which pages are used and improve the site, including measuring the shop's advertising, based on your consent. You can withdraw consent at any time.
• To keep the site secure and prevent misuse, based on the shop's legitimate interests.
• To register members, provide member benefits (such as the first sign-up discount, a birthday drink and points) and answer your enquiries, to carry out your request or agreement.

4. Cookies

Cookies are small files a website stores in your browser. We use two groups.

• Necessary: remember your cookie choice (accept or decline) in your browser so we do not ask every time. This group does not need consent.
• Analytics and advertising: set through Google Tag Manager and the tags the shop chooses to use (Google Analytics, Google Ads and the Meta Pixel of Facebook and Instagram). They run only if you accept. If you decline, this group is not stored.

You can change your mind or withdraw consent at any time by selecting "Cookie settings" at the bottom of any page and choosing again, or by contacting us as in section 1.

5. Disclosure and third-party services

We do not sell your personal data. Data may be sent to or accessed by providers that help the site work:

• Google (Tag Manager, analytics tools and the Google Maps embedded in the page). When the map loads, Google receives your IP address and browser details.
• Meta Platforms (Facebook and Instagram) through the Meta Pixel, if you accept cookies, to measure the shop's advertising. Meta receives page views and clicks on the contact and order buttons, such as LINE, call, Grab, LINE MAN and maps.
• The website hosting provider, which keeps server access logs.
• Outside services the site links to: LINE, Grab, LINE MAN, Foodstory (the member system), Facebook, Instagram and TikTok. After you follow a link, your data is covered by that provider's own privacy policy, which we do not control.

We may disclose data where required by law or by a competent authority.

6. Transfers abroad

Providers such as Google and Meta process data on servers that may be outside Thailand. Where data is sent abroad, we take steps so that the destination provides suitable data protection as the PDPA requires.

7. How long we keep data

We keep data only as long as needed for the purposes above. Analytics data is kept for the period set in the shop's tool account (for example Google Analytics), server logs follow the hosting provider's cycle, and member data is kept while you remain a member or until you ask us to delete it. When it is no longer needed, we delete it or make it anonymous.

8. Your rights

Under the PDPA you have the right to:

• access and obtain a copy of your personal data;
• have your data corrected so it is accurate and up to date;
• have your data deleted, destroyed or made anonymous;
• restrict the use of your data, or object to its collection, use and disclosure;
• receive or transfer your data in a commonly readable format;
• withdraw consent you have given at any time, without affecting earlier use of the data;
• complain to the Personal Data Protection Committee Office if you believe we have not followed the law.

To use your rights, contact us through the channels in section 1. We will reply within the time the law requires.

9. Data security

The site is served over an encrypted connection (HTTPS) and we use appropriate measures to protect data from unauthorised access, use, alteration or disclosure. No system is 100% secure, however.

10. Children

This website is not aimed at collecting children's personal data. If a parent finds that a child in their care has given us data, please contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time and will show the latest update date at the top of this page. If there is an important change, we will announce it on the website.