Skip to main content

Privacy Policy

Last updated: 2026-02-22

1. Introduction

Folly ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our online ordering service and website, in accordance with the EU General Data Protection Regulation (GDPR) and applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

Folly Bildooyvegen 57A support@thaibeats.com, +4790363195

3. Personal Data We Collect

We may collect and process the following categories of personal data:

  • Contact information: name, email address, phone number
  • Order information: items ordered, delivery/pickup preferences, special requests, dietary requirements and allergen information (when you provide it)
  • Account information: login credentials (hashed), saved addresses, order history
  • Payment information: processed securely by our payment provider; we do not store full card numbers
  • Technical data: IP address, browser type, device identifiers, pages visited (for security and analytics)
  • Communication preferences: opt-ins for marketing and notifications

4. Legal Basis for Processing (GDPR Art. 6)

We process your personal data based on:

  • Contract performance: processing orders, managing your account
  • Legitimate interests: improving our service, fraud prevention, analytics
  • Consent: marketing communications, non-essential cookies
  • Legal obligation: tax records, compliance with applicable laws

5. How We Use Your Data

We use your data to:

  • Process and fulfil your orders
  • Communicate about orders, bookings, and your account
  • Improve our menu, service, and website
  • Comply with legal and regulatory requirements
  • Send promotional communications (only with your consent)

6. Data Sharing

We may share your data with:

  • Payment processors (for transaction processing)
  • Service providers who assist our operations (under strict data protection agreements)
  • Authorities when required by law

We do not sell your personal data.

7. Data Retention

We retain your data only as long as necessary:

  • Order data: as required for tax and legal compliance (typically 7 years)
  • Account data: until you delete your account or request erasure
  • Marketing data: until you withdraw consent

8. Your Rights (GDPR Arts. 15–22)

You have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erasure ("right to be forgotten")
  • Restrict processing
  • Data portability
  • Object to processing
  • Withdraw consent at any time
  • Lodge a complaint with your supervisory authority

To exercise these rights, contact us at: support@thaibeats.com

9. Cookies and Similar Technologies

We use essential cookies to operate the ordering service. We may use analytics cookies to improve our site. You can manage cookie preferences in your browser settings.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

11. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top indicates when changes were last made. Continued use of our service after changes constitutes acceptance.

12. Contact

For privacy-related inquiries or to exercise your rights:

Folly Bildooyvegen 57A support@thaibeats.com, +4790363195