Privacy Policy

1. Introduction

Welcome to Zaapi, a platform operated by Zaapi Co., Ltd. and its affiliates (referred to as "Zaapi," "we," "us," or "our"). We are committed to protecting your privacy and complying with applicable privacy laws and regulations ("Personal Data Protection Laws"). This Privacy Policy outlines how we collect, use, disclose, and process your personal data when you use our website and mobile application (collectively, the "Platform"). The services provided through the Platform are referred to as the "Services." By registering an account and using our Platform, you are considered a User (referred to as "User," "you," or "your").

We recognize the importance of your personal information and are committed to handling it responsibly. This Privacy Policy explains:

• How we collect, use, and process your personal data, both now and in the future.
• How we protect your personal information.
• Your rights regarding your data.
• Please read this Privacy Policy carefully.

If you have any questions about our privacy practices, refer to the "Contact Us" section at the end of this Policy.

‍1.1 Definition of Personal Data

"Personal Data" refers to any information about an individual—whether true or false—that can identify that person, either directly or indirectly. Common examples include names, identification numbers, and contact details.

‍1.2 Consent and Acceptance

‍By registering an account, visiting our Platform, or accessing our Services, you acknowledge and agree to the collection, use, disclosure, and processing of your personal data as described in this Privacy Policy.If you do not consent to our processing of your personal data, please do not use our Services or access the Platform.If we update this Privacy Policy, we will notify you by posting the revised version on the Platform. Your continued use of the Platform and Services after such updates constitutes your acceptance of the revised Privacy Policy.

‍1.3 Relationship with Other Agreements

‍This Privacy Policy applies alongside any contractual agreements or notices regarding the collection, use, disclosure, and processing of your personal data. It does not override any existing agreements unless explicitly stated.

‍1.4 Who This Policy Applies To

‍This Policy applies to all Users, including buyers, sellers, and merchants who use our Services, unless specified otherwise.

2. When Does Zaapi Collect Personal Data?

Zaapi may collect your personal data in the following circumstances:The scenarios listed above are not exhaustive but serve as general examples of when we may collect your personal data.

• When you access or use our Services or Platform, or register an account with us.
• When you submit forms, including but not limited to application forms or other documents related to our products and services, whether online or in physical form.
• When you enter into an agreement with us or provide documents and other relevant information in connection with our products and services.
• When you interact with us through various channels, such as phone calls (which may be recorded), emails, letters, faxes, or face-to-face meetings—including interactions with our customer service team.
• When you use our Services electronically or engage with our Platform, including through cookies or other tracking technologies when accessing applications or websites.
• When you grant permissions on your device to share information with our applications or Platform.
• When you link your Zaapi account to a social media or third-party account, or use social media features in accordance with the provider’s service policies.
• When you conduct transactions through our Services.
• When you provide feedback or submit complaints to us.
• When you register for contests or events organized by Zaapi.
• When you submit personal information to us for any other reason.

The scenarios listed above are not exhaustive but serve as general examples of when we may collect your personal data.

3. What personal data does Zaapi collect?

3.1 Types of Personal Data Collected‍

Zaapi may collect the following types of personal data, including but not limited to:

• Basic Information: First name, email address, date of birth, and gender.
• Contact Information: Phone number, billing and shipping address.
• Financial Information: Bank account details and payment information.
• Identification Information: National ID card or passport number, and registered address as per your identification document.
• Network & Interaction Data: Information about your connections, interactions, or associated accounts.
• Media Data: Photos, audio recordings, or video recordings.
• Government-Issued Identifications & Compliance Data: Any official identification or other details required for due diligence, identity verification, fraud prevention, and compliance with "Know Your Customer" (KYC) regulations.
• Communication & Marketing Preferences: Your preferences for receiving marketing materials, communication history, and interactions with us, our service providers, and third parties.
• Transaction & Access Data: Product search history, order details, advertisement interactions, and other related service and platform usage data.
• Location Information: Data related to your geographic location.
• Usage Data: Any other information collected when you register for our services, use the Platform, or interact with its features.
• User-Provided Information: Any personal information you voluntarily share with us through the Platform.

3.2 Accuracy of Personal Data

You agree not to provide any false or misleading information and must notify us of any inaccuracies or updates. Zaapi reserves the right to request additional documentation to verify the accuracy of the information you provide.

3.3 Social Media Account Integration

If you register or access our Platform via a social media account, we may collect information that you have voluntarily shared with the social media provider, in accordance with their service policies.

3.4 Opting Out of Data Collection

If you do not wish for Zaapi to collect certain personal data, you may opt out at any time through the Platform or by submitting a written request to our Data Protection Officer.

For more details on how to withdraw, delete, access, or correct your personal information, please refer to the section titled "How You Can Manage Your Personal Data" below.

Note: Opting out of data collection may impact your ability to use certain features of our Services. For example, disabling location tracking may prevent access to location-based features.

4. Collection of Other Information

4.1 Automatic Data Collection

‍When you access our web platform or mobile applications, your device automatically transmits certain data, which may be recorded by our web servers. This data may include, but is not limited to:

‍4.2 Location Data Collection

‍Our mobile application may collect precise location data from your device using technologies such as GPS, Wi-Fi, and other sensors. This information may be collected, used, disclosed, and processed for purposes outlined in Section 6.1, including but not limited to:

• Providing location-based services that you request.
• Delivering relevant content based on your geographic location.
• Allowing location-sharing with other users as part of our Services.

For most mobile devices, you can disable location tracking in your device settings. If you need assistance disabling location services, please refer to your device manufacturer’s guide or contact your mobile carrier.‍

4.3 Viewing Content & AdvertisementsWhen you browse our Platform, view content or advertisements, or access third-party software through our Services, your device transmits similar data, including but not limited to:

• Your IP address, operating system, and browser details.
• Content and advertisements viewed.
• Software installed or accessed through our Services.
• Timestamps of visits and interactions.

This data helps us improve the relevance of content and advertisements displayed on our Platform.

• Device Information: IP address, operating system (computer or mobile), browser version, device type, mobile device features, and unique device identifiers (UDID, MEID).
• Referral & Browsing Data: Referring webpage address (if applicable), pages visited on our Platform, and timestamps of visits.
• Cookies & Tracking Technologies: Our Platform may use cookies to enhance user experience and remember previous visits. You can disable cookies through your device settings.
• User Account Association: If you log in to your account, this data may be linked to your user profile.
• Anonymous Analytics: We use this data to generate anonymous statistics and gain insights into user behavior on our Platform

5. Cookies

5.1 Use of Cookies and Tracking Technologies

‍We, along with our service providers and advertising partners, may use "cookies" or other tracking technologies to collect information about your use of our Services and Platform. These technologies help us improve the Platform, enhance the services we offer, introduce new features, and deliver relevant content tailored to your interests.

Cookies are small identifiers stored on your computer or mobile device that track information such as:

We may link cookie data to your personal information. This allows us to track your shopping cart, offer personalized content, and enable advertising partners to display relevant ads based on your interests. Additionally, cookies help us analyze data and monitor your use of our services.

‍5.2 Managing Cookies

‍You can opt out of cookies by adjusting the settings on your browser or device. However, please be aware that disabling cookies may limit your ability to access certain features of the Platform and Services, potentially affecting your overall user experience.

‍5.3 Types of Cookies We Use

• Strictly Necessary Cookies:
  These cookies are essential for the operation of the Platform and Services. They enable critical features such as user authentication, preventing account spoofing, and remembering login details or account settings. These cookies also collect anonymous usage data. You can delete these cookies through your browser, and they are typically permanent.
• Analytical/Performance Cookies:
  These cookies help us track and count user interactions to understand how the Platform is used. They enable us to improve functionality and make it easier for users to find what they’re looking for. These cookies are also permanent and store objective data until legal requirements for changes are exercised.
• Advertising Cookies:
  These cookies allow us to show you ads that are more relevant to your interests. They limit the frequency with which you see the same ad and help us evaluate the effectiveness of our marketing efforts. We may also share this data with third parties, including our business partners, to serve targeted ads based on your past behavior. Like other cookies, advertising cookies store data until changes are required by law.

6, How We Use the Information You Provide

6.1 Purpose of Collecting and Processing Personal Data

Zaapi may collect, use, disclose, and/or process your personal data for one or more of the following purposes:

Service and Transaction Management

• To process your transactions, submissions, or communications with us or third parties via our Services.
• To manage and administer your use of our Services and Web Platforms, including maintaining your account and relationship with us.
• To respond to inquiries, process orders, and fulfill requests related to your use of our Services.
• To notify you of service updates, account issues, or irregularities.

Legal and Security Compliance

• To enforce our Terms of Service or End User License Agreement.
• To ensure security by protecting the rights, safety, and property of users and third parties.
• To verify identity and conduct Know Your Customer (KYC), due diligence, and fraud prevention checks.
• To assess your creditworthiness for financial or credit-related services.

Service Improvement and Communication

• To maintain and update software, provide customer support, and ensure seamless service functionality.
• To facilitate customer service, respond to inquiries, and provide necessary assistance.
• To contact you via various communication methods (e.g., calls, messages, emails, mail) for service-related updates.
• To allow user interactions, including private messaging, comments, and social media connections.

Research, Analytics, and Marketing

• To conduct research and analyze user behavior for service improvement.
• To personalize content and recommend relevant products or services.
• To carry out surveys and audits to improve the user experience.
• To send marketing and promotional materials via different channels. Users may opt out of marketing communications at any time.

Legal Compliance and Data Retention

• To comply with legal obligations and respond to regulatory requirements.
• To maintain records for internal reporting and compliance purposes.
• To perform business background checks as required by law or risk management policies.
• To monitor service usage and detect policy violations, fraud, or illegal activities.

Business Operations and Transactions

• To store and back up data for security and disaster recovery purposes.
• To facilitate potential business transactions, such as mergers, acquisitions, or asset transfers.
• To manage other business-related activities where Zaapi, its affiliates, or external parties are involved.

6.2 Legal Obligations and Compliance

‍You acknowledge and agree that Zaapi may access, retain, and disclose your information when required to:

• Comply with legal obligations or governmental requests.
• Enforce our Terms of Service and Privacy Policy.
• Respond to claims or allegations regarding intellectual property infringement.
• Fulfill customer service requests.
• Protect the rights, property, and security of Zaapi, its users, and the public.

6.3 Additional Purposes

‍The purposes for collecting and processing personal data may vary depending on the circumstances. If a purpose is not listed above, we will inform you at the time of data collection, unless processing without consent is permitted by applicable Personal Data Protection Laws.

7. How Zaapi Protects and Retains Customers' Personal Information

7.1 Security Measures

Zaapi takes the security of your personal data seriously and implements a variety of measures to protect it. These include:

• Storing personal data on secure networks.
• Restricting access to authorized personnel only, limited to employees with privileged system access.
• Utilizing industry-standard security protocols to safeguard against unauthorized access, disclosure, or loss of data.

While we make every effort to secure your personal information, please note that no system can guarantee absolute security. We encourage users to take precautions when sharing sensitive information online.

‍7.2 Data Retention and Disposal‍

Zaapi retains your personal data in accordance with Personal Data Protection Laws and other applicable regulations. We will securely destroy or anonymize your personal data when:

1. The original purpose for collecting the data is no longer valid.
2. The data is no longer required for legal or business purposes.
3. There are no lawful grounds for further retention.

If you discontinue using the Platform or if your access to the Services is revoked or terminated, we may still collect, use, and disclose your personal data as permitted by Personal Data Protection Laws. We also reserve the right to securely dispose of your personal data without prior notice when it is no longer necessary.

8. Disclosure of Visitor Information to Third Parties

8.1  Sharing Information with Third Parties

In the course of our business operations, we may process, disclose, or transfer your personal data to third-party service providers, affiliates, or related companies—whether based in Thailand or abroad—for the purposes outlined in Clause 6.1. These third parties may process your personal data on our behalf or in other ways that align with the stated purposes.

We take reasonable steps to ensure that these third parties and affiliates:

• Maintain the confidentiality and security of your personal data.
• Use and store your data only for the necessary duration.

The third parties we work with include, but are not limited to:

• Affiliates and Group Companies: Entities within our corporate group that provide services under their own privacy policies and in compliance with Personal Data Protection Laws.
• Sellers, Merchants, and Driver-Partners: Parties you interact with through the Platform to facilitate transactions.
• Other Users: Certain information may be shared with other users for interaction or communication purposes.
• Contractors and Agents: Service providers assisting with business functions such as logistics, IT, payment processing, advertising, and customer support.
• Government and Regulatory Authorities: Agencies with legal authority over Zaapi, as required by law.
• Business Successors: If Zaapi undergoes a merger, acquisition, restructuring, or asset sale, personal data may be transferred as part of the business transaction.

Additionally, third parties to whom we disclose your personal data may process it for the purposes outlined in Clause 6.1.

‍8.2 Advertising and Analytics Sharing

‍We may share aggregated, non-identifiable statistical data about our users with advertising partners and service providers to optimize ad delivery and measure effectiveness.

‍8.3 Compliance with Laws

‍Where permitted by applicable Personal Data Protection Laws, we may collect, use, or disclose your personal data without your explicit consent if:

• It is required by law.
• It is necessary for fulfilling contractual obligations.
• It serves legitimate business interests while considering your data protection rights.

8.4 Security Risks and Unauthorized AccessDespite our strict security measures, we cannot guarantee absolute protection against:

• Cyberattacks and sophisticated hacking attempts.
• Technical malfunctions beyond our control.
• Unauthorized access by malicious third parties.

We take reasonable precautions to mitigate these risks, in compliance with Personal Data Protection Laws.

‍8.5 User Responsibilities Regarding Personal Data

‍Any user who receives another user's personal data through Zaapi’s Platform (e.g., a seller accessing buyer information) agrees to:

1. Comply with all applicable data protection laws regarding data collection, processing, storage, and transfer.
2. Allow Zaapi or the data owner to request deletion of collected personal data from their records.
3. Provide transparency about the personal data collected, as required by law.

8.6 Obligations of Sellers, Merchants, and Driver-Partners

‍Sellers, merchants, and driver-partners who obtain buyer personal data from Zaapi must strictly adhere to the following rules:

• Use buyer data only for essential purposes (e.g., responding to inquiries, processing orders).
• Do not contact buyers outside Zaapi’s Platform without explicit prior consent.
• Do not disclose buyer information to third parties without written consent from both Zaapi and the buyer.
• Implement adequate security measures to protect user data and retain it only as long as necessary.
• Report any suspected data breaches to Zaapi’s Personal Data Protection Officer (care@zaapi.com) immediately.

9. Children's Information

Zaapi’s services are not intended for children under the age of 13. We do not knowingly collect, store, or process any personal or non-personal information from children under 13, nor do we make any part of our Platform available to them.

If you are a parent or legal guardian and provide personal data of a child under 13 to Zaapi, you:

• Consent to our collection, use, and processing of that child’s data.
• Agree to be bound by this Privacy Policy on behalf of the child.

However, if we discover that a child under 13 has provided personal information without verifiable parental or guardian consent, we will:

• Immediately close the associated account.
• Delete or withdraw any collected personal data.

If you believe a child under 13 has provided their personal information to Zaapi without consent, please contact us so we can take appropriate action.

10. Information Collected by Third Parties

10.1 Google Analytics 

Our Platform uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses cookies—small text files stored on your device—to analyze how users interact with our Platform.

The information collected by these cookies (including your IP address) is transmitted to and stored on Google's servers in the United States. Google uses this data to:

• Evaluate and report on Platform usage.
• Provide insights on user behavior and engagement.
• Offer additional services related to website activity and internet usage.

Google may also share this information with third parties as required by law or when those parties process data on Google's behalf. However, Google does not associate your IP address with other data it holds.10.2 Third-Party ApplicationsFrom time to time, we or third parties may provide software applications for download that enhance your experience with our Services. These applications may:

• Collect personally identifiable information (e.g., name, user ID, IP address).
• Access previously installed cookies or install new ones.
• Request additional information directly from you.

Important: These applications and their associated products or services are not controlled by Zaapi. Any data collection or usage by third-party applications is governed by their own privacy policies, and Zaapi is not responsible for their practices. If you have concerns about third-party applications, we recommend reviewing their privacy policies before downloading or using them.

11. Third-Party Security and Platforms

11.1 Security of Third-Party Platforms 

While we implement strict security measures to protect the personal data in our possession, we cannot guarantee the security of any information you provide to third-party platforms.

To safeguard your data, we:

• Store personal information on secure networks with restricted access to authorized personnel only.
• Require privileged users to maintain strict confidentiality.
• Encrypt all sensitive and personal information stored in our databases.
• Use secure servers when processing transactions or granting access to personal data.

However, once you share information with a third-party platform, its security is beyond our control.

‍11.2 Third-Party Web Platforms For your convenience, we may provide links to third-party web platforms or integrate their services within our Platform. These platforms may offer:

• E-commerce transactions
• Additional services or features

Even if these third parties are affiliated with us, each has its own privacy policies and security practices that operate independently of Zaapi. Any information collected by third-party platforms—including those offered through our Platform—is not obtained by Zaapi.

‍11.3 Limitation of Liability

‍We are not responsible for:

• The content, security, or data management practices of linked third-party platforms.
• Any risks you may encounter when using these third-party services.

While we strive to protect the integrity of our Platform, your use of third-party links is at your own risk. We welcome your feedback regarding these links, including reports of broken or problematic links.

12. International Data Transfers

Your personal data may be transferred, stored, or processed outside of Thailand, including in Singapore, for one or more of the purposes outlined in Section 6.1.

You acknowledge and agree that data protection laws in other countries may differ from those in Thailand and may not offer the same level of protection. However, Zaapi is committed to implementing appropriate safeguards to ensure that your personal data remains secure and that your rights are upheld in compliance with Personal Data Protection Laws.

13. Withdrawal of Consent

13.1 Withdrawal of Consent 

You may withdraw your consent for the collection, use, or disclosure of your personal data, or request its deletion, by emailing care@zaapi.com. We will review your request in accordance with this Privacy Policy, the Personal Data Protection Laws, and other applicable regulations.

However, withdrawing consent may affect our ability to provide the Services to you, and in some cases, may require us to terminate our contractual relationship with you.

13.2  Requests for Access or Correction of Personal Data การร้องขอการเข้าถึงหรือการแก้ไขข้อมูลส่วนบุคคล

13.2.1 Accessing or Correcting Your Data

• If you have an account with us, you may access or update your personal data through the account settings on our Platform.
• If you do not have an account, you may submit a written request to our Data Protection Officer at care@zaapi.com.

To process your request, we may require sufficient details to verify your identity and understand the nature of your request.

13.2.2 Processing Access Requests

• Once we have enough information, we will process your request within 30 days.
• If we are unable to meet this timeframe, we will notify you of the expected timeline.
• Please note that certain types of personal data may be exempt from access requests under Personal Data Protection Laws.

13.2.3 Processing Correction RequestsOnce we have sufficient information, we will:

• Make the necessary corrections within a reasonable timeframe.
• If corrections cannot be made immediately, we will notify you of the earliest possible date for the update.
• Notify organizations to which we disclosed your personal data within the past year about the corrections, unless they do not require the updated data for legal or business reasons.

13.2.4 Specific Requests for Data Correction

‍If requested, we may send the corrected data only to a specific organization that received your personal data within one year before the amendment date.

‍13.2.5 Fees for Access Requests

‍To the extent permitted by law, we may charge a reasonable fee for processing data access requests. If applicable, we will provide you with an estimated cost in writing before proceeding. We are not required to process your request unless you agree to the fee.

‍13.2.6 Right to Refuse Correction‍

We reserve the right to deny correction requests under circumstances outlined in the Personal Data Protection Laws where:

• The law exempts certain data from corrections.
• The correction is not legally or contractually required.

14. Contacting Us

14.1  General Inquiries

If you have any questions or concerns about our privacy practices or the management of our Services, please contact us at:

📧 Email: care@zaapi.com

14.2 Complaints and Concerns 

If you have any concerns or complaints regarding how we handle your personal data, we encourage you to reach out to us at the same email address. We take privacy matters seriously and will investigate your concerns promptly in accordance with applicable data protection laws.

15.Terms and Conditions

By using the Zaapi Platform and Services, you agree to be bound by our Terms of Service, which outline the rules, disclaimers, and limitations of liability governing your use of our Platform. These Terms also incorporate other relevant policies and guidelines that apply to your interaction with Zaapi.

We strongly encourage you to review our Terms of Service carefully to understand your rights and responsibilities when using our Platform and Services.

‍