Privacy Policy

Last modified: Sep 10, 2026

Kruengkao Company Limited ("the Company" or "Cue") places great importance on protecting the personal data of all our users and is committed to handling the information we receive appropriately, transparently, and securely.

This Privacy Policy has been prepared to explain our practices regarding the collection, use, disclosure, and retention of personal data, as well as the rights of data subjects, in accordance with the Personal Data Protection Act B.E. 2562 (2019) ("PDPA") and other applicable laws.

Personal data will be used only to the extent necessary for providing our services, developing the platform, communicating with users, and performing related operations. The Company maintains appropriate data security measures so that users can use Cue's services with confidence.

1. Purposes of Collecting Personal Data

The Company may collect users’ personal data to the extent necessary to provide services efficiently, develop the platform, and enhance the users’ experience. Personal data will be collected, used, or disclosed for the following purposes:

1.1) To provide services requested by users.
Including membership registration, identity verification, purchasing or collecting event tickets, coordination and communication, and other related services.
1.2) To develop the Company's website and services.
To analyze usage, improve system performance, develop functionality, and enhance the users’ experience.
1.3) To promote news and benefits.
To send news, activities, promotions, or information about the Company's services and business partners. This will be carried out in accordance with users’ consent where required by law.
1.4) To comply with applicable laws and obligations.
To comply with the law, enforce the terms of service, prevent fraud, maintain system security, and exercise legal rights or duties under the law.

2. Personal Data We Collect

To provide services efficiently, the Company may collect users’ personal data to the extent necessary, depending on the nature of use, as follows:

2.1 Information provided directly by users

When registering as a member, purchasing tickets, contacting the Company, or using various services on Cue, the Company may collect information such as:

Name and surname
Email address
Phone number
User account information
Profile information of event attendees or organizers
Order, payment, and ticket information
Event attendance information, such as check-in or ticket usage at events
Other information users choose to provide to the Company through the use of the service

2.2 Information collected automatically

When accessing Cue's website or services, the Company may automatically collect certain technical information, such as:

IP address
Browser type, operating system, and device information
Website usage data, such as pages visited, time spent, and interactions with the system
System logs, error records, and performance data for analysis and service improvement

To facilitate login, users may choose to log in via third-party service providers supported by the Company, such as Google, Facebook, LINE, and X (Twitter).

If users choose to use such services, the Company may receive basic information from that provider, such as name, email, profile picture, or other information the users have authorized to be disclosed, in accordance with each provider's own privacy policy.

Logging in via a third-party service provider is optional; users may also register using an email address and password (if supported by the system).

2.4 Phone number verification

In certain cases, the Company may ask users to verify their phone numbers using a one-time password (OTP) to confirm identity, prevent fraud, and maintain account security. The Company will retain phone numbers and related verification information only to the extent necessary to provide the service.

2.5 Cookies and similar technologies

The Company uses cookies and similar technologies to enable the website to function properly, remember user preferences, analyze website usage, and improve the user experience. Users may manage or disable certain cookies through their browser settings or the website's cookie consent management system. However, disabling certain types of cookies may cause some services to not function normally.

2.6 Data retention period

The Company will retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Once this period has passed, the Company will delete, destroy, or anonymize the data in accordance with appropriate standards.

2.7 Organizer information

For users who register as event organizers, the Company may collect additional information necessary for creating events, selling tickets, payment processing, and complying with applicable laws, such as:

Name of the contact person or authorized representative
Company name, organization name, or shop name
Contact address
Tax identification number (if any)
Bank account information or payout information
Identity verification documents or business documents (if necessary)
Information about the event, ticket sales, and revenue from ticket sales
Other information necessary for providing the service and complying with the law

2.8 Content created by users on the platform (User Content)

The Company may collect data, content, or files that users create, upload, or publish through the Cue platform in order to provide the service in full. Such data may include:

Event names, descriptions, and details
Images, banners, logos, videos, or other promotional media
Text, contact details, or information used to promote events
Website links or social media accounts
Other content, files, or information users choose to upload or publish through the platform

Users should avoid uploading personal data of others unless they have obtained consent from the data subject or otherwise have the legal right to disclose such data. The Company will use such data to provide services in line with the platform's purposes and will process such data in accordance with this Privacy Policy.

3. Cookies and Similar Technologies

3.1 Use of cookies

The Company uses cookies and similar technologies to enable Cue's website and services to function efficiently, remember user preferences, maintain system security, analyze usage, and improve the user experience.

Certain cookies are necessary for the website to function, such as for login, session management, and account security. For cookies used for analytics, measurement, or marketing, the Company will process them based on users' consent where required by law.

Users can manage or adjust their cookie preferences through the website's cookie consent management system or through their web browser settings. However, disabling certain types of cookies may cause some website functions to not function properly.

3.2 Analytics and usage measurement

The Company may use analytics and usage measurement tools to help understand user behavior, improve website performance, develop functionality, and enhance service quality.

Such tools may include data analytics systems, usage measurement systems, website error tracking systems, or marketing measurement tools. The Company will only activate tools requiring users' consent once such consent has been obtained as required by law.

4. Marketing and Communications

The Company may contact users to provide information related to the use of the service, such as membership confirmation, order confirmation, ticket issuance, payment, refunds, security alerts, changes to terms of service, or other important information necessary for providing the service. Such communications are considered part of the service, and users may not be able to opt out of receiving certain types of messages.

4.2 Marketing news and activities

The Company may send news, promotions, special offers, activities, or information about Cue's services to users through various channels, such as email, SMS, in-platform notifications, or other contact channels provided by the user. This will be carried out in accordance with users’ consent where required by law.

Users may unsubscribe from marketing news or communications at any time through their account settings, unsubscribe links included in messages, or by contacting the Company through the channels specified in this policy.

4.3 Advertising and advertising measurement

The Company may use tools to measure the effectiveness of advertising and to present content or advertisements relevant to users’ interests. The use of tools related to advertising or interest-based advertising (retargeting) will be carried out in accordance with user consent where required by law, and users may change or withdraw their consent at any time through the website's consent management system.

5. Disclosure of Personal Data

The Company places great importance on maintaining the confidentiality of personal data and will not sell, exchange, or disclose users’ personal data to third parties, except where necessary for providing services, conducting business, or as required by law.

The Company may disclose users’ personal data in the following circumstances:

5.1 Service providers supporting the Company's operations

The Company may disclose personal data, to the extent necessary, to external service providers engaged to support the Company's operations, such as payment service providers, cloud and infrastructure service providers, system security service providers, data analytics service providers, messaging or identity verification service providers, and other technology service providers related to Cue's services.

The Company requires such service providers to use personal data only to the extent necessary to perform their duties and to protect personal data in accordance with applicable security standards and laws.

5.2 Organizers

Where users purchase tickets or register to attend an event through Cue, the Company may disclose certain personal data to the relevant organizer for the purposes of event management, verifying eligibility to attend, coordination, providing services at the event, or other actions related to that event.

The data disclosed will be limited to what is necessary based on the nature of the event and the service provided.

5.3 Government agencies or legal authorities

The Company may disclose personal data where required by law, or when ordered by a court, government agency, or authority with legal power, including where necessary to prevent or stop an act that may cause damage to a person, property, or the system security.

5.4 Transfer of rights or changes to business structure

In the event the Company undergoes a merger, business transfer, corporate restructuring, or sale of some assets, the Company may disclose or transfer personal data, to the extent necessary, to the counterparty or transferee. The Company will ensure that the recipient has personal data protection measures in accordance with the law and processes the data solely for the purposes set out in this policy.

In addition to the circumstances described above, the Company will disclose users’ personal data when consent has been obtained from users, or when there is another legal basis supporting such action.

6. Data Security Measures

The Company places great importance on maintaining the security of personal data and has implemented appropriate technical, administrative, and physical measures to prevent unauthorized access, use, disclosure, alteration, or destruction, or loss of personal data.

Measures adopted by the Company may include encryption of data in transit, access control based on job responsibilities, user authentication, security monitoring and system audits, protection against cyberattacks, and regular review of security measures.

The Company will store personal data on systems or with service providers that maintain appropriate security standards, and will ensure that personnel, contractors, and related external service providers comply with confidentiality and personal data protection measures as required by law.

Although the Company implements appropriate measures to protect the security of personal data, the transmission of data over the internet or electronic systems may involve risks that cannot be entirely prevented. The Company therefore cannot guarantee complete data security. However, the Company will act appropriately and promptly should an incident occur that may affect the security of personal data.

7. Retention Period for Personal Data

The Company will retain users’ personal data only for as long as necessary for the purposes of collection, use, or disclosure specified in this Privacy Policy, or for the duration required by law.

Once applicable retention period has expired or once personal data is no longer necessary for such purposes, the Company will safely delete, destroy, or anonymize the data, except where the Company has a legal obligation or legitimate grounds to continue retaining the data.

In certain cases, users may request that the Company delete their personal data. Such requests will be processed in accordance with the criteria, restrictions, and conditions required by law.

8. Rights of the Data Subject

The Company respects the rights of data subjects under the Personal Data Protection Act B.E. 2562 (2019) (PDPA). Users may exercise the following rights as provided by law:

8.1) Right to access. Users have the right to request access to, request a copy of, or request disclosure of details regarding their personal data held by the Company, in accordance with the criteria required by law.
8.2) Right to rectification. Users have the right to rectify their personal data to ensure it is accurate, up-to-date, and complete, if they find that the data held by the Company is incorrect or has changed.
8.3) Right to erasure. Users have the right to request that the Company delete, destroy, or anonymize their personal data, in cases required by law.
8.4) Right to restriction of processing. Users have the right to request that the Company suspend or restrict the use of their personal data in certain cases, in accordance with the criteria required by law.
8.5) Right to object. Users have the right to object to the collection, use, or disclosure of their personal data, in cases where the law grants the right to object.
8.6) Right to data portability. Users have the right to request their personal data in a readable or commonly used format, or to request that such data be transferred to another data controller, in cases required by law.
8.7) Right to withdraw consent. Where the Company relies on consent as the basis for processing data, users may withdraw their consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out based on consent prior to its withdrawal.
8.8) Exercising rights. Users may exercise the rights described above by contacting the Company through the channels specified in Section 13 of this Privacy Policy. The Company will consider and act on such requests within the period required by law. The Company may refuse a request where permitted by law or where there is a lawful reason for refusal.

9. Age Restriction

Cue's services are intended for individuals who are 18 years of age or older, or who are otherwise legally able to consent to the processing of their personal data.

The Company does not intend to collect personal data from minors under this age without the consent of a parent or legal guardian. If the Company becomes aware that it has collected personal data from a minor in violation of the law, the Company will delete or destroy such data as soon as possible.

If a user believes that the Company may have inadvertently collected personal data of a minor, please contact the Company through the channels specified in Section 13 so that the Company can investigate and take appropriate corrective action.

10. Cross-Border Transfer of Personal Data

In providing the Cue service, the Company may need to store or process personal data through system or technology providers located overseas, or process data in other countries. This may include providers of infrastructure, cloud systems, data analytics systems, payment systems, identity verification systems, or other services related to providing the service.

When personal data is transferred overseas, the Company will ensure that the transfer complies with the criteria required by law and will implement appropriate personal data protection measures to ensure that users’ personal data is adequately protected.

Where certain service providers are located in countries whose personal data protection standards may differ from those of Thailand, the Company will implement appropriate measures under the law to ensure that users’ personal data continues to be adequately protected.

11. Legal Basis for Processing Personal Data

The Company will process users’ personal data based on the legal grounds set out under the Personal Data Protection Act B.E. 2562 (2019) (PDPA), which may include the following legal bases:

Consent: Where the law requires the Company to obtain consent from the user, such as for sending marketing communications or using certain types of cookies.
Performance of a contract: To act on a user's request or to provide services under a contract with the user, such as membership registration, ticket purchase, payment, and related services.
Legitimate interests: To maintain system security, prevent fraud, improve service quality, analyze usage data, and conduct the Company's business, without adversely affecting the users’ fundamental rights and freedoms.
Legal obligation: To comply with the law, orders of government agencies, or the Company's legal duties.

Where the Company relies on consent as the basis for processing data, users may withdraw their consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out based on consent prior to its withdrawal.

12. Changes to This Privacy Policy

The Company may update or amend this Privacy Policy from time to time to reflect changes in its services, technology, laws, or related requirements.

If there is a material change to this policy, the Company will notify users via the website www.cueeee.com or other communication channels the Company deems appropriate, before or on the date the revised policy takes effect.

Continued use of Cue's website or services after the revised policy takes effect will be deemed as the users’ acknowledgment and acceptance of the revised Privacy Policy.

13. Contact Us

If users have any questions about this Privacy Policy, wish to exercise their rights as data subjects, or have any suggestions regarding personal data protection, please contact the Company using the details below:

Kruengkao Company Limited

Website: www.cueeee.com

Email: info[at]kruengkao.com

Address: 800 Banthat Thong Road, Wang Mai Sub-district, Pathum Wan District, Bangkok