Cue

Privacy Policy for Cue

Last modified: Jul 16, 2026

Krueng Kao Company Limited ("Krueng Kao", "we", "us", or "our") operates Cue, an event ticketing platform in Thailand. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

This Privacy Policy describes how we collect, use, and disclose your information. Where required by the Thailand Personal Data Protection Act B.E. 2562 (2019) ("PDPA"), we process your personal data only on the legal bases described in Section 11.

1. Information We Collect

1.1 Personal Information

We may collect:

  • Name, email address, and phone number
  • Profile information for attendees and event organizers
  • Order, ticket, and payment information for ticket purchases
  • Attendance information when your ticket is checked in at an event
  • Account credentials

1.2 Usage Data

  • IP address, browser type, device information
  • Pages visited, time spent, and interactions
  • Error logs and performance data

1.3 Third-Party Login Data

We use third-party providers to let you sign in to Cue. When you log in through one of these, we receive basic profile information (such as your name, email address, and profile identifier) as permitted by that provider's policies:

  • Google
  • Facebook
  • Line
  • X (Twitter)

Signing in through a provider is optional. You may also register with an email address and password where that option is offered.

1.4 Phone Verification Data

We use phone number verification to confirm that accounts belong to real people and to protect the platform against fraud and abuse. When you verify your phone number, we collect the number and process a one-time password (OTP) sent by SMS. Verification may be required before you can complete certain actions, such as purchasing tickets.

2. How We Use Your Information

We use collected information to:

  • Provide and maintain our services
  • Process ticket orders, payments, and event check-ins
  • Verify your identity and phone number to prevent fraud and confirm real user accounts
  • Communicate with you about your account, transactions, and services
  • Send marketing communications and measure and improve our advertising, where you have consented
  • Improve our platform through analytics
  • Ensure security and prevent abuse
  • Comply with legal obligations

3. Cookies and Tracking Technologies

3.1 Cookies

We use cookies for essential functions like login and session management, and for analytics, measurement, and advertising as described below. You can control non-essential cookies through our consent controls and your browser settings.

3.2 Analytics, Measurement, and Error Tracking

We use the following tools to understand how our platform is used, measure the performance of our services and campaigns, and diagnose errors. Non-essential analytics and marketing tools are loaded only after you provide consent where required:

  • PostHog — product analytics and error tracking, including user interactions and performance metrics. PostHog is hosted in the United States, so this data is transferred to and processed there (see Section 10). We configure PostHog conservatively: session recording is disabled and analytics capture is opt-out by default until consent is given.
  • Google Tag Manager — manages measurement and marketing tags on our platform.
  • Google Analytics (GA4) — measures traffic and usage to improve our services.
  • Meta Pixel — measures advertising performance and, where you explicitly consent, supports retargeting (see Section 4.2); this may share limited event data with Meta.

3.3 Third-Party Services

  • Social login (Google, Facebook, Line, and X): For login purposes, we access basic profile information from these providers.
  • ThaiBulkSMS (1 MOBY CO., LTD.): We share your phone number with ThaiBulkSMS to deliver one-time password (OTP) messages for phone verification.
  • Cloudflare: We use Cloudflare for bot protection (Turnstile captcha), content caching, and static asset delivery (Cloudflare R2). Cloudflare may process standard web traffic data for security and performance.
  • Payment processors (Beam and Omise): We share the information necessary to process your payments securely with our payment providers. Card and payment credentials are handled by these processors under their own security standards.
  • Slip2Go (SLIPTOGO CO., LTD.): When you pay by bank transfer, we share your uploaded payment slip and the expected payment details (such as the amount and destination account) with Slip2Go to verify the transfer.

4. Marketing and Communications

4.1 Email and Notifications

We send two kinds of messages:

  • Transactional and service messages — such as order confirmations, issued tickets, payment receipts, security alerts, and account notices. These are necessary to provide the service and are sent regardless of marketing preferences.
  • Marketing messages — such as promotions, recommendations, and updates. We send these only where permitted, and you can opt out at any time.

You can choose which notifications you receive and how in the notification preferences in your account settings. You can also manage marketing emails using the unsubscribe link in each message or by contacting us.

4.2 Advertising and Retargeting

We use the Meta Pixel to measure the performance of our advertising. Where you have explicitly consented, we also use it for retargeting — showing you relevant Cue ads on Meta platforms based on your activity on Cue. This involves sharing limited event data with Meta. You can withdraw your consent at any time through our consent controls, after which we will stop retargeting you.

5. Sharing Your Information

We do not sell your personal information. We may share it:

  • With service providers and sub-processors (e.g., payment processors, SMS, analytics, and advertising providers) under confidentiality and data-processing agreements
  • To comply with legal requirements
  • In case of business transfers
  • With your consent

6. Data Security

We host our services primarily on Amazon Web Services (AWS) in the Singapore region, and we implement appropriate technical and organizational security measures to protect your information, including encryption in transit, access controls, and bot protection. However, no method of transmission over the internet is 100% secure.

7. Data Retention

We retain your information only as long as necessary for the purposes outlined, or as required by law. You can request deletion of your data at any time, subject to legal retention obligations.

8. Your Rights

Subject to applicable law, including the PDPA, you may have rights to:

  • Access, correct, or delete your personal information
  • Object to or restrict processing
  • Data portability
  • Withdraw consent at any time (without affecting processing carried out before withdrawal)
  • Lodge a complaint with the competent data protection authority

To exercise these rights, contact us using the details in Section 13.

9. Age Restriction

Cue is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected such information, we will take steps to delete it.

10. International Data Transfers

Your data is primarily stored and processed on AWS infrastructure in Singapore. Some service providers process data in other countries — in particular, PostHog analytics data is processed in the United States, and social login, SMS, payment, advertising, and content-delivery providers may process data in the regions where they operate. Where we transfer personal data across borders, we take steps to ensure an appropriate level of protection as required by applicable law.

Where the PDPA applies, we process your personal data on one or more of the following bases: your consent (such as marketing and retargeting); performance of a contract with you (such as processing ticket orders and payments); our legitimate interests (such as securing the platform and preventing fraud); and compliance with a legal obligation. You may withdraw consent at any time as described in Section 8.

12. Changes to This Privacy Policy

We may update this policy periodically. We will notify you of significant changes via email or platform notifications.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at [email protected] or through our support channels.

Krueng Kao Company Limited
70/150 Soi Phutthamonthon Sai 3 Soi 19, Salathammasop, Taweewattana, Bangkok 10170, Thailand

By using Cue, you acknowledge that you have read and understood this Privacy Policy.