Affiliate login
TH
Affiliate login

Data Protection & Privacy (GDPR & PDPA Compliance)

laridea

1. Definitions

1.1 For the purposes of this section:

  • “Personal Data” means any information relating to an identified or identifiable natural person.
  • “Data Controller” means the entity that determines the purposes and means of processing Personal Data.
  • “Data Processor” means the entity that processes Personal Data on behalf of the Data Controller.

1.2 For Affiliate Program activities, LariDea - Kids' Café acts as the Data Controller, and the Affiliate may act as an independent Data Controller or Data Processor, depending on the nature of the data shared.

2. Personal Data Collected

2.1 LariDea may collect and process the following Personal Data in connection with the Affiliate Program:

  • Affiliate name, contact details, and identification information
  • Social media handles or business information
  • Referral tracking data (codes, QR scans, booking references)
  • Payment and tax-related information (where applicable)
  • Communications related to the Program

2.2 No sensitive personal data is intentionally collected.

3. Purpose of Processing

3.1 Personal Data is processed solely for:

  • Administering and managing the Affiliate Program
  • Tracking referrals and calculating commissions or rewards
  • Making payments and issuing incentives
  • Legal, accounting, and compliance obligations
  • Program communication and performance reporting

3.2 Personal Data shall not be used for unrelated marketing purposes without explicit consent.

4. Legal Basis for Processing

4.1 Processing of Personal Data is carried out in accordance with:

  • Article 6(1)(b) GDPR - performance of a contract
  • Article 6(1)(c) GDPR - compliance with legal obligations
  • Article 6(1)(f) GDPR - legitimate business interests
  • Thailand Personal Data Protection Act (PDPA B.E. 2562)

4.2 Where required by law, consent will be obtained.

5. Affiliate Responsibilities

5.1 Affiliates agree that:

  • They will process Personal Data lawfully, fairly, and transparently
  • They will not share or sell Personal Data to third parties
  • They will only collect customer data where necessary and with proper notice
  • They will comply with GDPR, PDPA, and any applicable local data protection laws

5.2 Affiliates must immediately notify LariDea in the event of a data breach or suspected unauthorized access.

6 Data Sharing & Third Parties

6.1 Personal Data may be shared with:

  • Payment service providers
  • Accounting or legal advisors
  • IT or referral-tracking service providers

6.2 All third parties are required to implement appropriate technical and organizational safeguards.

7. International Data Transfers

7.1 Where Personal Data is transferred outside the Kingdom of Thailand or the European Economic Area (EEA), LariDea ensures appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions where applicable

8. Data Retention

8.1 Personal Data is retained only for as long as necessary to :

  • Fulfill Program obligations
  • Comply with legal, accounting, or tax requirements

8.2 After this period, data will be securely deleted or anonymized.

9. Data Subject Rights

9.1 Affiliates and referred individuals have the right to:

  • Access their Personal Data
  • Request correction or update
  • Request deletion (“right to be forgotten”)
  • Restrict or object to processing
  • Data portability (where applicable)
  • Withdraw consent at any time

9.2 Requests may be submitted via the contact details below and will be handled within legally required timeframes.

10. Security Measures

10.1 LariDea implements appropriate technical and organizational measures to protect Personal Data, including:

  • Access controls
  • Secure storage systems
  • Limited access to authorized personnel only

10.2 Affiliates must apply equivalent safeguards when handling Personal Data.

11. Breach Notification

11.1 In the event of a Personal Data breach:

  • Affiliates must notify LariDea without undue delay
  • LariDea will notify relevant authorities and affected individuals as required under GDPR and PDPA

12. Privacy Policy

12.1 Further details on data processing practices are available in LariDea’s Privacy Policy, which forms an integral part of these Terms.