Privacy Notice

1. Who this covers

This notice explains how SEDS River Club (operated by C. Sittichoke, trading as SEDS-KANCHANABURI, “we” / “us”) collects and uses personal data from visitors, members and backers of this site, in line with Thailand's Personal Data Protection Act (PDPA).

2. What we collect

• Account details: name, email, phone/LINE ID, password (stored hashed, never in plain text).
• Pledge & order records: tier, amount, status, and any note you add.
• Payment transfer slips you send us to confirm a pledge — these may show bank account details, which we use only to match your transfer.
• Your language preference, stored in a cookie (seds_lang) and your browser's local storage.
• Photos you submit for the IG photo wall, if any, and the caption you provide.

We do not collect payment card numbers — all transfers go directly via PromptPay or bank transfer, never through this site.

3. Why we use it

• To run your membership — confirm pledges, issue your digital member card and discount code, and track your support history.
• To show the public backers wall — only if you opt in at sign-up (default is on, you can turn it off any time from your dashboard). Names shown there are shortened for privacy, or replaced with an alias you choose.
• To contact you — pledge confirmations, rejections, and updates about the campaign.
• To prevent fraud and keep records — e.g. matching transfer slips to pledges, and bookkeeping for tax purposes.

4. Who sees your data

Your account and pledge data is visible only to you and to our admin team (who confirm transfers and manage the campaign). We do not sell your data or share it with advertisers. We use the following processors to run the site:

• Railway — hosting for the site and its database.
• Resend or an SMTP provider — to send you transactional emails (pledge confirmations, etc).

5. How long we keep it

We keep account and pledge records for as long as your membership benefits are active, plus the period required for Thai tax and accounting record-keeping. You can ask us to delete your account data once your membership period has ended and no legal record-keeping obligation applies.

6. Your rights

Under the PDPA, you can ask us to:

• show you the personal data we hold about you;
• correct inaccurate data;
• delete your data or withdraw consent (e.g. turn off the public backers wall — you can also do this yourself from your dashboard);
• object to or restrict certain uses of your data.

To exercise any of these, email qoop.sittichoke@gmail.com. We'll respond within 30 days.

7. Security

Passwords are hashed with bcrypt and never stored in plain text. Sessions use signed, expiring cookies. Only admin accounts can view pledge and payment-slip records.

8. Changes to this notice

We may update this notice as the site evolves. Material changes will be posted here with a new “last updated” date.

9. Contact

Data controller: C. Sittichoke, trading as SEDS-KANCHANABURI, Kanchanaburi, Thailand. Email qoop.sittichoke@gmail.com or message us on WhatsApp.