PRIVACY POLICY
Your details, handled with care.
This policy explains what personal data The Prep Spot collects, why, and the choices you have, in line with Thailand’s Personal Data Protection Act (PDPA). Last updated 23 October 2026.
What we collect
Your name, email address and password (stored only in encrypted form) when you create an account. Your phone number, LINE ID or WhatsApp number and delivery addresses. Your meal preferences, allergies, dietary and kitchen notes. Your orders, delivery slots and Pay.n.Joy balance. If you turn on notifications, a device token so we can send order updates.
Signing in with Google
If you sign in with Google, we receive only your name, email address and Google account ID. We use them only to create your account and sign you in, and never share them or use them for anything else. You can disconnect The Prep Spot from your Google account settings at any time.
Why we use it
To run your account, prepare and deliver your meals safely, confirm orders and send updates about them, manage your Pay.n.Joy credit, and keep the website working and secure. We use your data to provide the service you asked for, and allergy and health details only with your consent and only to prepare your meals. We do not sell your data or use it for advertising.
Who we share it with
Only the services that help us run The Prep Spot: Supabase (database and accounts), Cloudflare (website hosting), Resend (order emails), Sentry (error reports, which may include technical details of your visit), and LINE or WhatsApp when we message you. Delivery details are shared with the driver delivering your order. These services may store data outside Thailand, with appropriate safeguards.
Cookies and storage
We use your browser’s storage to keep you signed in and remember your bag. We do not use advertising or tracking cookies.
How long we keep it
We keep your account data while your account is open. When you ask us to delete your account, we remove your personal data, except order and payment records we must keep for accounting and tax purposes, which are kept for as long as Thai law requires.
Your rights
You can ask to see, correct, export or delete your personal data, object to or limit how we use it, and withdraw your consent at any time. Most details can be edited in your account. For anything else, message our team through the Contact page and we will reply within 30 days. You can also complain to Thailand’s Personal Data Protection Committee.
Children
Our service is not intended for children under 10, and we do not knowingly collect their data.
Changes to this policy
If we change this policy, we will update the date above, and tell you directly about any important change.