MewNam

Booking App: Privacy Policy

Last updated: June 23, 2026

This Privacy Policy explains how the MewNam product, operated by Space Salmon Co., Ltd. (a company registered in Thailand, Tax ID 0-1055-69100-32-5), referred to in this policy as “MewNam”, “we”, “us”, or “our”, and the venue operator you are booking with (“Venue Operator”) collect, use, store, and share personal data when you use the MewNam booking app (the “Booking App”) and the supporting back-end services (collectively, the “Service”). The Booking App runs as a LINE LIFF experience inside LINE, and booking notifications are sent through MewNam’s LINE Official Account on behalf of the Venue Operator.

The venue you book with is the data controller for your booking data and has its own privacy policy. This notice explains how the booking app handles your data and the limited data MewNam controls.

This policy covers how your data is collected and processed when you use the booking app, including your bookings, customer profile, and payment slips.

If you don’t provide required information. Some of the information below is required to make a booking. If you refuse to sign in with LINE, refuse to verify your phone number, or refuse to upload a payment slip, we may not be able to create or confirm your booking. You can use the Service without agreeing to any optional processing, but the required information cannot be skipped.

1. Roles under the PDPA

The Venue Operator is the data controller for personal data you submit when you make a booking with that venue (your name, phone, bookings, payments, and slip images). MewNam operates the Booking App on the Venue Operator’s behalf and acts as a data processor.

For technical operation of the platform (for example, managing the LIFF session, keeping the service secure, and recording diagnostic logs), MewNam also acts as a controller of certain limited data (see section 6).

2. Information we collect

When you use the Booking App we collect the following:

  • From LINE: your LINE user identifier, your LINE display name, and (where you have shared it) your LINE profile picture URL. We receive these through LINE Login inside the LIFF, to recognise you, pre-fill your name on a booking, and send notifications over LINE.
  • Phone number: the phone number you verify when booking, stored to identify you and your bookings.
  • Profile name: the name you choose to use with your bookings (which may differ from your LINE display name).
  • Bookings: the venue, branch, facility, time slot, status, source, and price of each booking, together with any cancellation reason recorded by you, the Venue Operator, or the system.
  • Payments: the amount, payment method (PromptPay, transfer slip, pay-at-venue, etc.), transaction reference, status, payment time, and any slip image you upload.
  • Device and connection data: IP address, user agent, and request times that our servers record for security, abuse prevention, and troubleshooting.
  • Activity records: actions taken on a booking are written to an internal activity log so that you and the Venue Operator have a reliable trail.

We do not collect your bank or card credentials, special-category personal data (such as health or biometric data), or your LINE password.

3. Why we use your personal data

We use the data described above to:

  • Authenticate your LIFF session and prevent unauthorised access to your bookings.
  • Verify your phone number and prevent abuse.
  • Create, modify, and cancel bookings, hold time slots while you complete payment, and verify or display payment slips.
  • Notify you about your bookings via LINE messages from MewNam’s LINE Official Account, sent on behalf of the Venue Operator.
  • Help the Venue Operator deliver service to you (for example, recognising you on arrival, applying loyalty rules, or contacting you about a problem).
  • Detect, prevent, and respond to fraud, abuse, or security incidents.
  • Comply with legal obligations and respond to lawful requests from public authorities.

Where applicable law requires a legal basis, we rely on:

  • Performance of a contract: to make and manage your bookings and payments.
  • Legitimate interests: to operate, secure, and improve the Service, and to prevent fraud and abuse, balanced against your reasonable expectations.
  • Legal obligation: to retain financial records and respond to lawful requests.
  • Consent: where required by law for specific purposes (for example, marketing). You can withdraw consent at any time.

5. Sharing and sub-processors

We share your personal data with:

  • The Venue Operator you booked with. They see your name, phone number, LINE display name, booking details, payment status, and any slip image you upload, in order to provide service to you, and they handle that data in line with their own privacy notice.
  • LINE Corporation: through LINE Login, LIFF, and the LINE Messaging API. LINE may process your LINE user identifier and message delivery information under LINE’s own policies. Your interaction with LINE itself (your profile settings, content you share inside LINE, and any data LINE collects independently of MewNam) is governed by LINE Corporation’s Privacy Policy. MewNam is not responsible for LINE’s independent processing.
  • An SMS provider: an SMS aggregator in Thailand that sends a message to verify your phone number.
  • An object-storage provider: a third-party object-storage provider that stores your payment-slip images. Slip images are not made publicly accessible to third parties.
  • A payment-slip verification provider: where automatic slip verification is enabled, your payment-slip image is sent to a third-party payment-verification provider to verify your payment. The provider returns only a verification result and does not use your data for any other purpose.
  • A cloud provider: our cloud hosting provider in the Asia-Pacific region.

Each provider is bound by a written agreement no less protective than this policy.

We do not sell your personal data to third parties.

6. Data MewNam uses as a controller

Independently of the Venue Operator, MewNam processes a small set of operational data as a controller, including login attempts, phone-verification records, request logs, and aggregated usage statistics. This data is used solely to operate, secure, and improve the platform.

7. International transfers

The Service is primarily operated from data centres in the Asia-Pacific region. Some third-party providers may process limited data outside Thailand under data-protection safeguards recognised by Thai law. Your booking and payment data as an end-customer is not shared with our subscription-billing payment processor and stays within the Service’s primary Asia-Pacific path during routine processing.

8. Retention

  • Bookings and payments: retained for as long as necessary to operate the Service and the relationship with the Venue Operator, and for any longer period required by Thai tax or accounting law.
  • Slip images: retained for the lifetime of the underlying booking, plus any retention period required by law.
  • Phone-verification and login data: kept for up to twelve (12) months for security investigations and abuse prevention.
  • Aggregated, non-identifying analytics: retained indefinitely.

When data is no longer needed for the purposes above, we delete or anonymise it.

9. Your rights under the PDPA

Subject to the PDPA you have the right to:

  • access the personal data held about you;
  • correct inaccurate or incomplete data;
  • request erasure or anonymisation, where applicable;
  • restrict or object to processing in defined circumstances;
  • request data portability for personal data you have provided to us;
  • withdraw consent where processing is based on consent;
  • file a complaint with the Office of the Personal Data Protection Committee.

For booking-related data, please contact the Venue Operator first using the contact details they provide (for example, the phone number or contact link shown on your booking or on the venue’s branch page); they are the data controller and best placed to act on your request. If you cannot reach the Venue Operator, contact MewNam at hello@mewnam.com and we will help route your request. For platform-level data that MewNam controls, contact us at hello@mewnam.com.

10. Security

We apply appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, and destruction. No system can be guaranteed to be perfectly secure, and you should report any suspected vulnerability to hello@mewnam.com.

Breach notification. Where required by Thai data-protection law, MewNam will notify the Office of the Personal Data Protection Committee within seventy-two (72) hours of becoming aware of a personal-data breach that is likely to result in a risk to your rights and freedoms, and will notify you (or assist the Venue Operator to notify you) without undue delay where the breach is likely to result in a high risk.

11. Minors

The Booking App is not directed to minors. If you are a minor, you confirm that you have your parent’s or legal guardian’s consent to use the Service and make payments, as required by the PDPA. We do not knowingly collect personal data from minors without verifiable parental or guardian consent; if you believe we have, please contact us so we can delete it.

12. Cookies and similar technologies

The booking app keeps you signed in during your session so you don’t have to re-verify your phone on every request. It does not use third-party advertising or analytics cookies.

13. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top reflects the latest version. Material changes will be communicated through the Booking App or through MewNam’s LINE Official Account before the change takes effect.

14. Contact

For privacy questions about the Booking App:

  • Email: hello@mewnam.com
  • For booking-specific matters, contact the Venue Operator using the contact details they provide (for example, the phone number or contact link shown on your booking).