1. Purpose of This Privacy Policy

This Privacy Policy is intended to inform you, as a data subject, about how the Company collects, uses, and/or discloses your personal data, the purposes for which such processing is carried out, and your rights under applicable personal data protection laws.

This Privacy Policy applies to customers, guests, contacts, website visitors, individuals who contact the Company through online channels, and other individuals who interact with or are otherwise associated with the Company.

2. Personal Data Collected, Used, and/or Disclosed by the Company

2.1 Personal Data

Personal data means any information relating to an individual that can directly or indirectly identify that individual. The Company may collect personal data directly from you or from other sources where permitted by applicable law, including through:

• Dining at the Company’s restaurants
• Making a table or private dining room reservation
• Contacting the Company for inquiries
• Contacting the Company through its website or social media channels
• Participating in activities, campaigns, or promotions
• Subscribing to newsletters, updates, or marketing benefits
• Contacting the Company by telephone, email, or other digital communication channels

2.2 Types of Personal Data

The types of personal data that the Company may collect include:

2.3 Sensitive Personal Data

The Company may, where necessary, collect, use, and/or disclose sensitive personal data as defined under applicable law, only where the Company has obtained your explicit consent or where there is another lawful basis permitting such processing.

The Company will handle such data with appropriate care and will process it only to the extent necessary and in accordance with applicable laws.

3. Purposes for Which the Company Collects, Uses, and/or Discloses Personal Data

The Company may collect, use, and/or disclose your personal data for the following purposes:

3.1 To Provide Services to You

• To process table and private dining room reservations
• To confirm and manage reservation details
• To contact you regarding your reservation or dining experience
• To provide services and facilitate your dining experience
• To accommodate special requests relating to your reservation or use of the Company’s services
• To process payments and related transactions

3.2 To Manage and Improve Our Services

• To monitor and improve the quality of our services
• To assess customer satisfaction
• To understand customer preferences and needs
• To manage complaints, feedback, and suggestions
• To develop and improve our menus, services, and customer experience
• To manage the Company’s internal operations

3.3 For Marketing and Communications

Where the Company has obtained your consent or is otherwise permitted to do so under an applicable legal basis, the Company may use your personal data to:

• Send news, promotions, and special offers
• Present products and services offered by the Company
• Inform you about special events, activities, or marketing campaigns
• Analyze and improve our marketing communications
• Contact you regarding products, services, or information that may be of interest or benefit to you

You may withdraw your consent to receive marketing communications at any time through the channels provided by the Company.

3.4 To Comply with Legal Obligations

The Company may collect, use, and/or disclose your personal data where necessary to comply with applicable laws, regulations, orders issued by government authorities, or lawful orders from authorized persons or authorities.

3.5 For Legitimate Interests

The Company may process your personal data where necessary for the Company’s legitimate interests, including:

• Maintaining the security of our premises and property
• Operating and monitoring CCTV systems
• Preventing and investigating fraud or misconduct
• Maintaining the security of information systems
• Managing the Company’s internal operations
• Preventing, managing, or resolving disputes and complaints

4. Disclosure of Your Personal Data

The Company may disclose your personal data to relevant individuals, organizations, or service providers where necessary and where permitted by your consent or an applicable legal basis, including:

• Employees and authorized representatives of the Company
• Third-party service providers involved in providing services to you or the Company
• Table reservation system providers and information technology service providers
• Payment service providers
• Marketing and public relations service providers
• Website hosting, cloud, and technology service providers
• Business partners involved in providing relevant services
• Government authorities or other persons authorized by law

Any individual or organization receiving personal data from the Company will be required to process such data only within the necessary scope and in accordance with applicable laws and relevant data protection requirements.

5. International Transfers of Personal Data

The Company may need to transfer your personal data to countries outside Thailand where technology service providers, cloud service providers, reservation systems, marketing platforms, or other relevant service providers store or process personal data outside Thailand.

Where personal data is transferred internationally, the Company will carry out such transfers in accordance with applicable personal data protection laws, regulations, and appropriate safeguards.

6. Retention of Personal Data

The Company will retain your personal data for as long as necessary to fulfill the purposes for which the data was collected, used, and/or disclosed, or for such period as required by applicable law.

Once the personal data is no longer necessary to retain, the Company will delete, destroy, or anonymize such data in accordance with appropriate procedures, unless the Company has a lawful basis or legal obligation to retain the data for a longer period.

7. How the Company Protects Your Personal Data

The Company recognizes the importance of maintaining the security of personal data and has implemented appropriate technical and organizational measures to protect personal data against loss, unauthorized access, use, alteration, disclosure, or other unauthorized processing.

The Company will periodically review and update its personal data security measures as appropriate and in accordance with the risks associated with the processing of personal data.

Employees, contractors, agents, consultants, and service providers who have access to or are involved in processing personal data are required to maintain confidentiality and comply with the Company’s personal data protection measures and requirements.

8. Your Rights Regarding Personal Data

Subject to the conditions and limitations prescribed by applicable law, you may have the following rights in relation to your personal data:

The exercise of these rights may be subject to certain legal limitations and conditions. In some circumstances, the Company may not be able to fulfill your request. Where applicable, the Company will inform you of the reasons for such refusal or limitation.

9. Exercising Your Data Subject Rights

If you wish to exercise any of your rights relating to your personal data, you may contact the Company through the contact details provided in this Privacy Policy.

The Company may verify your identity before processing your request in order to prevent unauthorized access to or disclosure of personal data.

The Company will respond to and process your request within the period prescribed by applicable law.

10. Cookies

The Company’s website may use cookies and similar technologies to ensure that the website functions properly, analyze website usage, remember user preferences, and improve the overall user experience.

The Company may use information collected through cookies to analyze website performance and improve marketing communications, where permitted by applicable law.

You may manage or disable cookies through your browser or device settings. However, disabling certain types of cookies may affect the functionality or performance of the website.

11. Changes to This Privacy Policy

The Company may amend or update this Privacy Policy from time to time to reflect changes in its business operations, technology, applicable laws, regulations, or other relevant requirements.

The Company will communicate material changes through appropriate channels. The date of the most recent update will be stated at the beginning of this Privacy Policy.