This Privacy Policy explains how Dresswell ("Dresswell", "we", "us") collects, uses, shares, and protects your personal data when you use the Dresswell mobile app, web app, and website (together, the "Service"). We handle personal data in line with Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA").
By using the Service, you acknowledge that you have read this policy. See also our Terms of Service.
1. Personal data we collect
Information you give us
- Account details: your name, username, email address, password (stored only in hashed form), and profile photo.
- Identity verification: a photo of your government-issued ID and a selfie, which we ask for before your first booking or before you publish a listing.
- Addresses and contact details: shipping, ship-from, and return addresses, recipient name, and phone number.
- Listings: photos, videos, descriptions, sizes, pricing, and availability of the pieces you list.
- Payout and refund details: the bank account you add to receive rental income or a PromptPay refund.
- Communications: messages and attachments you exchange with other users in the app, reviews, feedback, issue reports, and the photos you submit for damage or late-return claims.
- Waitlist: your email address if you ask to be notified when bookings open.
Information created when you use the Service
- Bookings and transactions: rental dates, amounts paid, deposits, refunds, payouts, and shipment tracking details.
- Payment details: card payments are processed by our payment provider. We do not store your full card number or security code; we keep only limited display details such as the card brand and last four digits.
- Device and notification data: your device platform and push notification token, language, and notification preferences.
- Website usage: when analytics is enabled, our website uses Google Analytics, which uses cookies to collect information such as pages visited, approximate location, and device and browser type.
2. How we use personal data
We use personal data to:
- create and manage your account and verify your identity;
- arrange, process, and fulfil rentals, including shipping and returns;
- take payments, hold and release deposits, issue refunds, and pay out owners;
- let renters and owners communicate, and send you service emails, in-app messages, and push notifications about your bookings, listings, and account;
- review listings, resolve disputes and damage claims, and provide customer support;
- prevent fraud and misuse, and keep the platform safe;
- understand and improve how the Service is used;
- comply with our legal obligations.
3. Legal bases
We process personal data on the following bases under the PDPA:
- Contract: to provide the Service you have asked for, under our Terms of Service.
- Legitimate interests: to keep the platform safe, prevent fraud, resolve disputes, and improve the Service.
- Legal obligation: to meet accounting, tax, and other legal requirements.
- Consent: where the law requires it, for example for optional analytics cookies or marketing messages. You can withdraw consent at any time.
4. Who we share personal data with
We do not sell your personal data. We share it only as needed to run the Service:
- Other users: your username, profile photo, storefront, listings, and reviews are visible to other users. When a booking is confirmed, the details needed to ship and return the piece, such as the recipient name, address, and phone number, are used to create shipping labels.
- Payment providers: Opn Payments (Omise) processes card and PromptPay payments, refunds, and transfers to owners' bank accounts.
- Shipping providers: SHIPPOP and the courier you or the owner choose receive the sender and recipient details needed to deliver parcels.
- Infrastructure and communications providers: cloud hosting, database, file storage, email delivery, and push notification services that process data on our behalf.
- Analytics providers: Google Analytics, for website usage statistics.
- Authorities and advisers: where required by law, or to establish, exercise, or defend legal claims.
Some of these providers may store or process data outside Thailand. Where that happens, we take steps to ensure your data is protected as required by the PDPA.
5. How long we keep personal data
We keep personal data for as long as your account is active and for as long as needed for the purposes described in this policy, including resolving disputes and meeting legal, accounting, and tax obligations. When data is no longer needed, we delete or anonymise it.
6. Security
We use measures such as encryption in transit, hashed passwords, and restricted, role-based staff access to identity documents and financial records. No system is completely secure, so please keep your password confidential and tell us straight away if you suspect unauthorised use of your account.
7. Your rights
Under the PDPA, you have the right to:
- access and obtain a copy of your personal data;
- have inaccurate or incomplete data corrected;
- request deletion, destruction, or anonymisation of your data;
- restrict or object to certain processing;
- receive your data in a portable format;
- withdraw consent you have given;
- lodge a complaint with the Office of the Personal Data Protection Committee.
To exercise any of these rights, or to ask us to delete your account, email dresswellth@gmail.com. We may need to verify your identity first, and some data may be kept where the law requires or permits it.
8. Children
The Service is not intended for anyone who is not legally able to enter into a rental agreement. We do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us.
9. Changes to this policy
We may update this policy from time to time. We will post the new version on this page with a new "last updated" date, and let you know in the app or by email if a change is significant.
10. Contact us
If you have questions about this policy or how we handle your personal data, contact Dresswell at dresswellth@gmail.com.