Privacy Policy

Last updated: 2026-07-27 | Version 1.0

⚠️ Draft — the bracketed [ ] parts must be filled in with the operator's real information before being published or enforced

ℹ️ This English text is an unofficial translation provided for convenience. The Thai version is the binding version — in case of any discrepancy, the Thai text prevails.

1 Data controller

[Legal entity / business owner name], address [___], contact [phone / email] ("we") operates the Auction Orbit platform — Mahanakhon Bird Nest Auction.

2 What we collect, and why

Data	Collected from	Purpose / legal basis
Full name, phone number	All roles (at registration)	Necessary for the contract — used to sign in and to contact you
13-digit national ID number	All roles	Necessary for the contract — identity verification, preventing impersonation and fake auction accounts
Photo of ID card	All roles	Necessary for the contract — used by admins to verify before approving an account
Email	All roles (optional)	Consent — used for notifications and additional contact
Account number, bank name, bank book	Sellers	Necessary for the contract — paying out sale proceeds
Delivery address	Buyers	Necessary for the contract — delivering goods
Farm location / livestock registration number	Sellers	Necessary for the contract — verifying the origin of goods
Requested credit limit	Buyers	Necessary for the contract — assessing bidding eligibility

We do not intentionally collect sensitive data (religion, health, ethnicity, etc.). If any appears incidentally in a photo of an ID card, we will not process it in any way.

3 What we use the data for

Verifying identity before approving an account
Carrying out auction transactions, sales and payments
Preventing fraud, such as multiple accounts or impersonating a seller/buyer
Contacting you about your application result and auction status

We will not use your data for third-party marketing, nor sell it to anyone.

4 Who can access the data

System admins — they see identity data only in order to approve accounts
[Necessary external service providers, e.g. hosting providers — list them here if any]

5 How long we keep data

Account and transaction data is kept for as long as you are a member and for [X years] after the account is closed, in line with accounting and tax requirements. Photos of ID cards and bank books are kept only as long as needed for identity verification, and deletion will be considered after the account has been closed for [___].

6 Your rights

You have the right to access your data, ask for corrections, ask for erasure once there is no legal need to keep it, object to processing, and withdraw consent (only for data processed on the basis of consent, such as your email) — to exercise these rights, contact [contact channel]

7 Security measures

We limit data access by user role (role-based access) and keep logs of access to sensitive data. [Add further details, e.g. encryption — to be completed by the system administrator]

8 Changes to this policy

If there are material changes, we will notify you through [notification channel] before they take effect.

← Back to registration