Privacy Policy
Last updated: 2026-02-22
1. Introduction
Folly ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our online ordering service and website, in accordance with the EU General Data Protection Regulation (GDPR) and applicable data protection laws.
2. Data Controller
The data controller responsible for your personal data is:
Folly Bildooyvegen 57A support@thaibeats.com, +4790363195
3. Personal Data We Collect
We may collect and process the following categories of personal data:
- Contact information: name, email address, phone number
- Order information: items ordered, delivery/pickup preferences, special requests, dietary requirements and allergen information (when you provide it)
- Account information: login credentials (hashed), saved addresses, order history
- Payment information: processed securely by our payment provider; we do not store full card numbers
- Technical data: IP address, browser type, device identifiers, pages visited (for security and analytics)
- Communication preferences: opt-ins for marketing and notifications
4. Legal Basis for Processing (GDPR Art. 6)
We process your personal data based on:
- Contract performance: processing orders, managing your account
- Legitimate interests: improving our service, fraud prevention, analytics
- Consent: marketing communications, non-essential cookies
- Legal obligation: tax records, compliance with applicable laws
5. How We Use Your Data
We use your data to:
- Process and fulfil your orders
- Communicate about orders, bookings, and your account
- Improve our menu, service, and website
- Comply with legal and regulatory requirements
- Send promotional communications (only with your consent)
6. Data Sharing
We may share your data with:
- Payment processors (for transaction processing)
- Service providers who assist our operations (under strict data protection agreements)
- Authorities when required by law
We do not sell your personal data.
7. Data Retention
We retain your data only as long as necessary:
- Order data: as required for tax and legal compliance (typically 7 years)
- Account data: until you delete your account or request erasure
- Marketing data: until you withdraw consent
8. Your Rights (GDPR Arts. 15–22)
You have the right to:
- Access your personal data
- Rectify inaccurate data
- Erasure ("right to be forgotten")
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent at any time
- Lodge a complaint with your supervisory authority
To exercise these rights, contact us at: support@thaibeats.com
9. Cookies and Similar Technologies
We use essential cookies to operate the ordering service. We may use analytics cookies to improve our site. You can manage cookie preferences in your browser settings.
10. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.
11. Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top indicates when changes were last made. Continued use of our service after changes constitutes acceptance.
12. Contact
For privacy-related inquiries or to exercise your rights:
Folly Bildooyvegen 57A support@thaibeats.com, +4790363195