Ruea Phra

Privacy policy

How rueaphra.com collects, uses and discloses personal data under Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”).

Effective 30 August 2026. This is an English summary; the Thai version prevails.

In short

  • No accounts, no forms, no payments — we never collect your name, phone number or email.
  • Supporting the site happens by scanning a PromptPay QR in your own banking app. We never receive or store any transfer details.
  • We collect visit statistics through Google Analytics only.
  • We never sell, rent or trade visitor data.
  • Our photos were taken at a public festival. If you appear in one, you can ask us to remove it at any time.

1. Who we are and what this covers

  1. The Ruea Phra team, which runs rueaphra.com (“we”), is the data controller under the PDPA.
  2. This policy covers rueaphra.com and sites under the same domain only.
  3. Third-party sites and services we link to follow their own policies.

2. What we collect, and why

We use one service, Google Analytics (Google LLC). It gives us aggregate statistics that do not identify you:

  1. Pages visited, date and time, and time spent on each page
  2. How you arrived — for example from a search result or a social media link
  3. Device type, browser, operating system and screen resolution
  4. Approximate location (country or province), from an IP address Google has already truncated

We use this only to understand overall traffic and to improve the site. We see summary reports and cannot tell who viewed which page. We collect nothing else and do no individually targeted advertising.

3. Legal basis

We rely on legitimate interests under Section 24(5) of the PDPA, both for the statistics in clause 2 and for publishing festival photos under clause 5. We have weighed the public benefit of recording a local tradition against the rights of the people concerned, and apply the safeguards in clauses 5.2 and 5.4. You may object as described in clause 9.

4. Cookies

  1. We use analytics cookies set by Google Analytics to tell new visits from repeat visits. We use no advertising cookies and do not track you across other sites.
  2. You can refuse or delete cookies in your browser settings, or install the Google Analytics Opt-out Browser Add-on.
  3. Refusing cookies does not limit your access to any content.

5. Photos and 360° images showing people

5.1 What we publish. Photos and 360° images we took ourselves at the Chak Phra festival in Surat Thani, a public event open to everyone. Some — parades, performers, the crowd — naturally show people.

5.2 How we publish.

  1. To record and share a local tradition, not for commercial purposes.
  2. We do not name or identify anyone, and use no face recognition or tagging.
  3. We do not use images in ways that could harm anyone’s reputation or rights, and do not sell, rent or license them for advertising.
  4. Where a minor appears, we remove the image immediately on request from the minor, a parent or a legal guardian.

5.3 How long. Indefinitely, because the site is an archive of each year’s festival for education and cultural heritage. This never limits your right to removal under 5.4.

5.4 Asking for removal.

  1. If you appear in an image, you may ask us to remove it or blur your face through the channel in clause 10. Tell us the page and where the image is, as best you can. No reason is needed.
  2. We will act within 7 days of receiving your request and reply through the channel you used.
  3. Original files are kept in a private archive. On a removal request we delete both the published image and the original.

6. Disclosure to third parties

We never sell, rent, trade or disclose personal data for commercial purposes. Third parties involved:

  1. Google LLC, provider of Google Analytics, which processes the data in clause 2 under Google’s privacy policy and may transfer it to servers abroad.
  2. Our hosting provider, with access only as far as technically necessary.
  3. Government agencies or officials, only when the law or an order of a court or competent authority requires it.

Fonts are served from our own server, so your browser does not contact a third-party font server.

7. Retention

  1. Visit statistics are kept in Google Analytics for up to 14 months, after which detailed data is deleted automatically and only summary reports remain.
  2. Photos are kept as described in clause 5.3, unless removal is requested under clause 5.4.

8. Security

We serve the site over an encrypted connection (HTTPS), restrict access to the back end and the original photo archive to authorised team members, and review these measures as appropriate.

9. Your rights

Under Chapter 3 of the PDPA you have the right to access and obtain a copy of your data (Section 30), to object (Section 32), to erasure (Section 33), to restrict use (Section 34) and to rectification (Section 35).

Because we hold no data that identifies visitors, in practice this means asking us to remove an image you appear in (clause 5.4) and opting out of statistics (clause 4(2)).

We respond within 30 days of receiving a request — or within 7 days for clause 5.4 — and will give our reasons if we refuse.

10. Contact and complaints

To exercise your rights, ask a question or make a complaint, send a private message to our official Facebook page. This is our official contact channel.

Contact us on Facebook

If we fail to act on your request, you may complain to the Personal Data Protection Committee under Section 73 of the PDPA.

11. Changes to this policy

We may revise this policy as the law or our service changes. The effective date of the latest version is shown at the top of this page, and the version published here is the one in force.