1. What we collect
Account data: name, email, phone, preferred language. Job data: pickup/delivery addresses, vehicle details, photos you upload. Carrier verification: ID documents, driving licence, vehicle registration, insurance. Automatic data: IP address, device info, cookies (see our cookie policy), anonymised analytics.
2. Why we collect it
To operate the marketplace: match you with counterparties, process payments, manage disputes. To meet legal obligations: Thai PDPA, anti-fraud, accounting. With your consent: product updates, marketing emails (always opt-in).
3. Legal basis for processing
We process personal data on one of these grounds: (a) performance of a contract — when you create an account and use the platform; (b) legitimate interest — fraud prevention, platform integrity, service improvement; (c) legal obligation — Thai tax, accounting and anti-money-laundering requirements; (d) your consent — for marketing emails and optional analytics cookies, which you can withdraw at any time.
4. How we share it
With counterparties: your name, contact info and job details are shared with the matched carrier or customer. With service providers: payment processors (Stripe, SCB), hosting (Hetzner), email delivery. With authorities: only when legally required. We never sell your data.
5. Data retention
Account data: retained while your account is active plus 2 years. Job data and payment records: 7 years (Thai tax law). Verification documents: until account closure plus 1 year. Analytics: anonymised after 26 months.
6. Security
We encrypt data in transit (TLS 1.3) and at rest (AES-256). Access to production systems is restricted to named staff with 2FA. Verification documents are held in isolated encrypted storage and accessible only to our verification team. We run regular penetration tests and keep an incident response plan aligned with Thai PDPA and EU GDPR breach-notification requirements.
7. International transfers
Data is primarily stored in EU datacentres. Some service providers process data in other jurisdictions under standard contractual clauses or equivalent safeguards.
8. Automated decision-making
Our matching algorithm surfaces carriers to customers based on vehicle type, route coverage, rating and availability. This matching is not a binding decision — a customer still actively picks and accepts a bid, and every carrier goes through human verification. Significant decisions about account suspension or dispute outcomes are reviewed by a real person, not decided by algorithm alone. You have the right to request human review of any automated output that materially affects you.
9. Your rights
Under Thai PDPA and GDPR you can access, correct, delete, export or restrict processing of your personal data. Email hello@sendmoto.com with your request; we respond within 30 days. You can also complain to Thailand’s PDPC or your EU data protection authority.
10. Marketing communications
We only send marketing emails if you opt in at sign-up or later from your account settings. Every marketing email contains a one-click unsubscribe link; the preference is honoured immediately. Operational emails (verification, bids, receipts, payout notifications, disputes) are sent as part of the service and cannot be unsubscribed from while the account is active.
11. Children’s privacy
Sendmoto isn’t intended for users under 20 years old (Thai age of majority). We do not knowingly collect data from children. If you believe a child has provided us personal data, contact us to delete it.
12. Cookies
See our dedicated cookie policy for the full list of cookies we use and how to manage them.
13. Data-breach notification
If a personal-data breach presents a risk to your rights and freedoms we notify Thailand’s PDPC and affected users within 72 hours of becoming aware, as required by PDPA and GDPR. Notifications describe what happened, what data was involved, what we’re doing, and what you can do to protect yourself.
14. Changes to this policy
We may update this policy as our platform evolves. The last-updated date at the top reflects the most recent revision. Significant changes are communicated by email at least 30 days before they take effect.
15. Contact us
Turtla Co. Ltd., 41/11 Soi The Bell, Moo 5, Kamala, Kathu, 83150 Phuket, Thailand. Email: hello@sendmoto.com. Data protection queries: privacy@sendmoto.com.
