Formosa Policy

Privacy Policy

How Formosa Potetato collects, uses and protects customer personal data.

Last updated: 2026-07-14.

Data controller and contact

Formosa Potetato is the data controller for the services on this website. For privacy questions or rights requests, contact us through the restaurant's official LINE account.

Information we collect

When you order Lunch Box, make a reservation or contact us, we may collect your name, phone number, LINE ID, email, delivery address, order details, reservation details, payment slip image, language preference and other information needed to provide our service.

How we use the information

We use the information to confirm orders, verify payment, arrange delivery or pickup, manage reservations, contact customers, send LINE updates and improve our service.

Legal bases

Our legal bases are performance of your request or contract, compliance with legal obligations, and legitimate interests in security and service improvement. We rely on consent for non-essential analytics or advertising; you may withdraw consent at any time without affecting essential services.

Retention

Order data, reservation data and payment slip images are retained as needed for operations, currently designed for about 90 days, unless legal, tax, dispute or security reasons require a longer period.

Third-party services

We may disclose necessary data to providers such as Vercel, Firebase/Google, LINE, Google Maps or address services. Some providers may process data outside Thailand; for cross-border processing, we apply appropriate contractual and security measures where applicable.

Music-policy acceptance evidence

For bookings involving karaoke, music or performances, we may keep a separate minimal evidence record containing the booking reference, name and contact details you provide, language, policy display and acceptance times, acceptance method, policy version and content snapshot, hash, digital signature and transaction ID. We use it to evidence notice, perform the contract, protect security, and handle disputes or legal claims. This flow does not verify the natural person's identity and does not retain IP addresses or full user-agent strings for this purpose. The evidence retention period remains subject to necessity and applicable Thai law (LEGAL/PDPA REVIEW REQUIRED).

Your rights

Subject to applicable law, you may request access and a copy, correction, deletion, restriction or objection, data portability, and withdrawal of consent. We may verify identity and applicable exceptions first. You may lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).

Effective date and version

Privacy Policy version 3 is effective from 12 August 2026. We will announce material changes through the website or another appropriate channel.

Contact us

For service and refunds, please contact us via LINE Official.