Trattoria by Andreas — Hua Hin

Privacy Policy

Effective date: 1 January 2026 · Last updated: 1 January 2026

This Privacy Policy describes how Trattoria by Andreas ("we", "us", "our") collects, uses, and shares information about you when you use our mobile application (the "App"). The App is operated by Trattoria by Andreas, 110/1 Naebkehardt Road, Hua Hin, Prachuap Khiri Khan 77110, Thailand.

If you have any questions, contact us at info@trattoria-huahin.com.

1. Information we collect

Information you provide directly

Data	Purpose	Required?
Phone number	Account creation and SMS one-time-password (OTP) verification	Required
First name & surname	Personalising your account and rewards communications	Required
Email address	Welcome email, birthday voucher delivery, account recovery	Required
Date of birth	Determining your birthday week so we can send your annual birthday voucher	Required

Information generated by your use of the App

• Loyalty points & transaction history — points you earn and redeem, the bills you scan, vouchers you receive or use.
• Device identifier / push token (only if you enable notifications) — used to send transactional messages such as "your voucher was redeemed".
• Crash and diagnostic logs — technical data that helps us fix bugs.

We do not collect: your location, your contacts, your photos (other than ones you choose to upload as a profile picture), payment card or banking details (all payments occur in person at the restaurant), or any behavioural advertising identifiers.

2. How we use your information

• Operate and improve the loyalty programme (point accrual, tier promotion, voucher issuance and redemption).
• Send SMS one-time passwords for sign-in via Twilio Inc.
• Send transactional emails (welcome, birthday voucher, redemption receipt) via Resend, Inc.
• Comply with applicable laws and prevent fraud.

We do not sell, rent, or trade your personal information.

3. Third-party service providers

Provider	Purpose	Privacy policy
Twilio Inc. (USA)	SMS OTP delivery	link
Resend, Inc. (USA)	Transactional emails	link
MongoDB, Inc.	Database hosting	link
Weeloy SAS (France)	Restaurant table booking widget	link
Expo (650 Industries, Inc.) (USA)	App framework infrastructure	link

When you tap "Book a table" the booking takes place inside Weeloy's widget and is governed by Weeloy's own privacy policy.

4. Data storage and security

• All data is transmitted over HTTPS / TLS 1.2+.
• Admin PIN is stored as a bcrypt hash and never logged.
• OTP codes are managed by Twilio Verify — we never store them.
• We retain your account data for as long as your account is active. Inactive accounts (no scans or logins for 24 months) may be archived or deleted.

5. Your rights

You may at any time:

• Access the personal data we hold about you.
• Correct inaccurate data (from the Profile screen, or by emailing us).
• Delete your account and associated data — use our Account Deletion Request page or email info@trattoria-huahin.com.
• Withdraw consent for marketing emails by replying STOP or contacting us.
• Lodge a complaint with the Thai Personal Data Protection Committee (PDPC).

We will respond to verifiable requests within 30 days.

6. Children

The App is not intended for users under 17 years old. The App contains references to alcoholic beverages (wine and aperitivo menus). If we learn that we have inadvertently collected information from a child under 17, we will delete it promptly.

7. International transfers

Our sub-processors are located outside Thailand (primarily in the United States and the European Union). By using the App you consent to your data being transferred to and processed in these jurisdictions, subject to appropriate safeguards.

8. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email and a notice inside the App at least 14 days before they take effect.

9. Contact

Trattoria by Andreas
110/1 Naebkehardt Road
Hua Hin, Prachuap Khiri Khan 77110, Thailand
Phone: +66 32 532 989
Email: info@trattoria-huahin.com