Privacy Policy
What we collect about you, why, how long we keep it, and what you can tell us to do with it. Written to the Personal Data Protection Act B.E. 2562 (2019).
1 What we collect
When you join: your name, email address, mobile number, password (stored only as a one-way hash — we cannot read it), date of birth and sex, and an emergency contact.
Optionally: a profile photo, a bio, a username and your country.
As you use the club: the sessions you reserve, attend, withdraw from or miss; match results and your win/loss record; your Play DNA and Court Level answers; your Coin balance and every transaction; messages you send our assistant; and anything you post in the community.
Automatically: your LINE account identifier if you use the LINE app, and technical logs kept for security and to fix faults.
2 We do not use facial recognition
When you submit a profile photo, an automated check asks one question: is this a photograph of a human face? It does not try to identify who you are. No facial template or biometric identifier is created, and your photo is never compared against anyone else's.
3 Marketing
If you tick the marketing box, we may contact you about events, offers and news. It is not ticked for you, it is never required to join, and you can withdraw it at any time without affecting your membership.
Messages about a session you have booked, your money, or your account are not marketing and are sent regardless.
4 Who else sees it
Other members see your display name, photo, bio and username if you have chosen to be visible. Your email, phone, date of birth, emergency contact and Coin balance are never shown to other members.
Staff see only what they need to run a session or answer you, and every export of member data is logged.
Service providers act only on our instructions: LINE for messaging, Amazon Web Services for hosting, ThaiBulkSMS for SMS, Google for sign-in and email, and an AI provider for the assistant and the photo check.
We do not sell your data.
5 Your rights
You may ask to access your data, correct it, delete it, object to or restrict how we use it, ask for a portable copy, and withdraw any consent you have given.
Email contact@theset.life and we will reply within 30 days. Some records we must keep even if you ask us to delete them — money records the law requires — and we will tell you if that applies and why.
You may complain to the Personal Data Protection Committee if you believe we have handled your data wrongly.
6 How long we keep it
We keep your data while your membership is active. If you leave, we delete or anonymise what we hold about you, except records the law requires us to keep — financial and tax records above all — which are kept for the legally required period and then deleted.
Community posts you delete are removed at once. Technical logs are kept only as long as security and fault-fixing need them.
7 Security, children, and changes
Passwords are hashed and never stored in readable form. Data in transit is encrypted. Access to member data is limited to staff who need it. If a breach puts your rights at risk we will notify the authorities and tell you where the law requires it.
THE SET. is for members aged 18 and over. We do not knowingly collect data from children.
If we change this policy we will publish a new version with a new date, and ask you to agree again where the change is significant. We never edit a published version in place — the version you agreed to stays on record.