Privacy Policy (PDPA)

1. Data Controller

The data controller for this website is White Label Adventure CO., Ltd., operating the Ananas Insider brand.

• Registered address: 476 Moo 1, Hin Lek Fai, Hua Hin, Prachuap Khiri Khan 77110, Thailand
• Tax ID: 0775565004458

2. Personal Data We May Collect

Depending on how you interact with the site, we may collect identity, contact, technical, usage, communications, and preference data.

• Contact details such as name, email address, and any details you submit through forms or account access features.
• Technical data such as IP address, browser type, device identifiers, operating system, referring URLs, and approximate location derived from technical signals.
• Usage data such as page views, session behavior, saved-post actions, login state stored in the browser, and interactions with premium or subscription-related pages.
• Communications data such as messages, requests, complaints, legal notices, or support inquiries you send to us.

3. How We Collect Personal Data

• Directly from you when you contact us, sign in, request information, save content, or otherwise interact with features on the website.
• Automatically through cookies, analytics tools, local storage, server logs, and similar technologies when you browse the website.
• From third-party service providers that support hosting, analytics, security, email, or other website operations.

4. Purposes of Processing

• To operate, secure, maintain, and improve the website and user experience.
• To provide access to saved content, account-related features, premium content flows, and site functionality.
• To communicate with you about your requests, account access, legal notices, or service-related matters.
• To measure performance, understand audience behavior, detect misuse, and improve editorial and commercial operations.
• To comply with legal obligations, enforce our policies, protect our rights, and respond to lawful requests from regulators or authorities.

5. Legal Bases

Where required by applicable law, including the PDPA, we rely on one or more lawful bases for processing, depending on the context.

• Consent, where you actively choose to provide information or accept specific optional processing.
• Contractual necessity, where processing is needed to provide a requested service or account-related function.
• Legitimate interests, such as site security, analytics, fraud prevention, operational administration, and content performance analysis, provided such interests are not overridden by your rights.
• Legal obligation, where retention, disclosure, or recordkeeping is required by law or regulatory process.

6. Disclosure of Personal Data

We may disclose personal data on a need-to-know basis to service providers and professional advisors that help us operate the website and business lawfully and securely.

• Hosting, infrastructure, analytics, security, and technical service providers.
• Professional advisors such as legal, accounting, compliance, or audit advisors.
• Regulators, courts, law enforcement, or government authorities where disclosure is legally required or reasonably necessary to protect rights and interests.
• Successors or transaction counterparties in the event of a restructuring, merger, asset transfer, or similar corporate event, subject to applicable law.

7. International Transfers

Because our readership is international and some of our service providers may operate outside Thailand, personal data may be processed in or accessed from jurisdictions outside Thailand. Where applicable, we take reasonable contractual and organizational steps to protect personal data in cross-border transfers.

8. Data Retention

We keep personal data only for as long as reasonably necessary for the purposes described in this policy, or as required for legal, accounting, dispute-resolution, tax, security, or recordkeeping reasons.

9. Your Rights

Subject to conditions and limitations under applicable law, including the PDPA, you may have rights in relation to your personal data.

• To request access to, or a copy of, your personal data.
• To request correction of inaccurate or incomplete personal data.
• To request deletion, anonymization, or restriction of processing in certain circumstances.
• To object to certain processing based on legitimate interests.
• To withdraw consent where processing is based on consent, without affecting prior lawful processing.
• To request data portability where the law provides that right.
• To complain to the Personal Data Protection Committee or another competent authority if you believe your rights have been infringed.

10. Security

We use reasonable administrative, technical, and organizational safeguards designed to reduce the risk of unauthorized access, alteration, disclosure, or loss of personal data. No internet-based system is completely secure, and we cannot guarantee absolute security.

11. Children

The website is intended for a general audience and is not designed for children. We do not knowingly request or market our editorial content to minors as a primary audience. If you believe a child has provided personal data to us unlawfully, please contact us so that we can review and take appropriate action.

12. Contacting Us

For privacy-related questions, rights requests, or legal notices, please use the dedicated contact details below and identify your request clearly. We may need to verify your identity before acting on a request.

• Privacy contact email: privacy@ananasinsider.com
• Data subject rights email: rights@ananasinsider.com
• Postal contact: White Label Adventure CO., Ltd., 476 Moo 1, Hin Lek Fai, Hua Hin, Prachuap Khiri Khan 77110, Thailand
• Tax ID reference: 0775565004458

13. Data Subject Request Process

To submit a PDPA-related request, send an email with the subject line “PDPA Request” or “Data Subject Request” and describe the right you wish to exercise. We may ask for enough information to verify identity, locate records, and assess whether any legal limitation or retention requirement applies.

• Include your full name, contact email, relationship to the site, and the specific request you are making.
• If you are requesting access, correction, deletion, restriction, objection, withdrawal of consent, or portability, describe the relevant data or interaction as clearly as possible.
• We aim to acknowledge valid requests within a reasonable time and respond within the period required by applicable law or, where no specific period applies, within a commercially reasonable time.
• We may decline or limit a request where the law allows us to do so, including where identity cannot be verified or where legal retention obligations apply.