PDPA Notice (พระราชบัญญัติคุ้มครองข้อมูลส่วนบุคคล)

The data controller for personal data collected through this website and our ordering channels is Manha Cloud Kitchen & Catering, Silom, Bang Rak, Bangkok 10500, Thailand. Contact: hello@manha.co.th · 064-491-3230.

• Identity & contact: name, phone number, email address
• Delivery data: address or table number, delivery notes
• Transaction data: order contents, totals, PromptPay slips you upload
• Technical data: session identifier needed to keep the ordering process working

Under the PDPA we process your data only with a lawful basis:

• Contract — preparing, cooking, delivering and supporting your order.
• Legal obligation — keeping accounting and tax records as Thai law requires.
• Legitimate interests — preventing fraudulent payments, securing our systems, improving the service with aggregated statistics.
• Consent — only where you have actively agreed (for example, optional notifications). You may withdraw consent at any time.

Order and delivery data: up to 12 months, then deleted or anonymised. Accounting records and payment slips: as long as Thai tax law requires. Profile data: until you request deletion. Session cookies: for the duration of your visit or sign-in only.

You have the right to:

• Access the personal data we hold about you and receive a copy (portability)
• Ask for correction of inaccurate data
• Ask for deletion of data we no longer need
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Personal Data Protection Committee

Send requests to hello@manha.co.th. We verify your identity where needed and respond within 30 days.

We never sell personal data. This website runs no third-party advertising or profiling trackers. Data is shared only with service providers who process it on our instruction (hosting) and with delivery staff strictly for completing your order.