Welcome to Bondee (the "Platform"). The Platform is operated by Metadream Tech Pte. Ltd., with its registered address at 3 FRASER STREET #05-25 DUO TOWER SINGAPORE (189352) ("Bondee", "we" or "us").

We are committed to protecting and respecting your privacy. This Privacy Policy (this "Policy") explains what personal data we collect from you, or that you provide to us, as well as the practice concerning our use, retention and process of your personal data. Before using the Platform, please read carefully and agree to this Policy as well as the Supplemental Terms applied to the country/region you are located in, especially those highlighted in bold.

If you do not agree to this Policy or applicable Supplemental Terms, it may result in the failure of Platform features or you may not be able to have a better user experience. By using relevant features and services provided by the Platform, you confirm that you have read this Policy and that you understand and accept the way we collect, use and process your personal data and that you understand your rights to your personal data.

Please note that the features and services of the Platform as described in this Policy may vary depending on certain factors, such as the laws and regulations or regulatory requirements in the country or region where you are located, the model and system version of your device, and the application version of the Platform, etc. The actual delivery features and services of the Platform shall be subject to your actual use.

If you have any questions about how we process your personal data, please contact us at: bondee_global@bondee.net.

When you create an account and upload content to the Platform, we collect and process the personal data you give us, and the technical and behavioral data about your use of the Platform.

We use your personal data to provide the Platform services to you. In addition, we use your personal data to improve and develop the Platform and ensure your safety.

We share your data with third-party service providers who help us to deliver the Platform, such as cloud storage providers, SMS service providers, content review service providers, data analyzers, software performance analyzers, messaging service providers, CDN service providers, etc. Where and when required by law, we will share your data with law enforcement agencies, regulators, or third parties pursuant to a legally binding court order.

To provide you the services, security maintenance and other purposes specified in this Policy, we may need to store your personal data in servers located in the countries/regions (such as Japan, the U.S. and Singapore) other than where you are resided and transfer your personal data to our local affiliates, service providers or business partners in such countries/regions.

We will retain your personal data where we have an ongoing legitimate business need to do so. Where we no longer need your personal data in order to provide the service to you, we retain it only as long as we have a legitimate commercial purpose in keeping such data or where we are subject to a legal obligation to retain the data. We will also retain your data if we believe it is or potentially will be necessary for the establishment, exercise or defense of legal claims.

We will generally notify all users of any material changes to this Policy through the “Notice” feature or other similar functionalities on our Platform. However, you should look at this Policy regularly to check for any changes. We will update the "Last Updated" date at the top of this Policy, where you could find the effective date of this Policy.

We collect and use the following data about you:

Your Profile Information. Personal data you give us when you register and improve your profile on the Platform, including your mobile phone number, date of birth, username, customized Platform ID, password, and other information you disclose in your user profile such as your personal status. We may also collect your contact information when you submit feedback and make a complaint.

User Content. The content you upload and generate on the Platform, including the preferences you set, the text, photos, audio and video you upload or create, and the virtual image and virtual space you create ("User Content").

• We collect User Content through pre-loading at the time of your creation, import, or upload, whether you choose to save or upload the User Content, so that you can add effects to such User Content. If you apply an effect to your User Content, we may also collect the version of User Content that does not contain that effect.
• We may collect information about the images and audio that are parts of your User Content, such as identifying the objects and scenery, facial and physical features that appear in the User Content, objects and geographic locations that appear in the images, the nature of the audio, and the text of the words spoken in your User Content. We may use the above data for content review, user type statistics, and other non-person-identifying operations.
• We may access content, including text, images, and video, captured in your device clipboard, with your permission. For example, if you choose to initiate content sharing with a third-party platform, or choose to paste content from the clipboard into the Platform, we access this data in your clipboard in order to fulfill your request.

Data about Your Behavior. Data about your use of the Platform, such as how you interact with the Platform, how you interact with the content that your friends show to you, problems that you may encounter, and how your friends and you interact with friends. We may collect the data aforementioned through the feedback you submit, and surveys you participate in. We also use cookies and other similar technologies to collect such data. For more information on how we use cookies and other similar technologies, please see the "Cookies and other similar technologies" section below.

Technical Information about Your Device that We Collect. We collect certain data about the device that you use to access the Platform, such as your IP address, device manufacturer, device model, device memory, gravity sensor information, battery status, device system and system version, identifiers for advertiser, network type, network operator, device ID, IMEI, Android ID, time zone settings, phone language, phone region, screen resolution and brightness settings. Where you log-in the Platform with multiple devices, we will be able to use your profile data to identify your activity across different devices. In addition, we may also access the permissions on your device including camera, photo albums, microphone, contact list and message notifications, and collect and use relevant data. In order to access the aforesaid data stored on your device, we will implement the measures as required by relevant laws.

We may collect the personal data aforementioned directly from your device or through the use of a third-party software development kit ("SDK"). SDKs are third-party computer codes that we may apply to our mobile applications and other forms of our services. These SDKs enable third parties’ information collection from your device. We use such SDKs and work with the third parties to use the collected data primarily for data statistics, troubleshooting, application log processing, content sharing and functionality supporting, etc. We will conduct strict security tests on third-party SDKs and agree on strict data protection measures with our partners to ensure the safety of your data.

Collect Contacts to Find Other Users and Invite Your Friends. You can choose whether to find other users of the Platform using our 'Find Friends' function. This functionality allows you to see which of your friends from your telephone's contact list is using the Platform and offers you the option to follow them. You can also use this function to invite your contacts to join you on the Platform. We will collect and use the contact’s personal data you have in your telephone's contact list and at your option, to send them an SMS inviting them to view your profile.

We use cookies and other similar technologies (e.g., web beacons, flash cookies, etc.) ("Cookies") to automatically collect information for the measurement and analysis of how you use the Platform, enhancing your user experience, and improving our services. A cookie is a text file that is stored on your access device by a web server, which enables the Platform to provide certain features and functionalities.

You may be able to refuse or disable Cookies by adjusting your browser settings. Because each browser is different, please consult the instructions provided by your browser. Please note that you may need to take additional steps to refuse or disable certain types of Cookies. In addition, your opt-out selection is specific to the particular browser or device that you are using when you opt out, so you may need to opt-out separately for each of browser or device. If you choose to refuse, disable, or delete Cookies, some of the functionalities of the Platform may no longer be available to you.

We will use the data we collect about you for the following purposes:

• to notify you about changes to our service;
• to provide you with user support;
• to enable your sharing of User Content and interaction with other users;
• to provide you with our IM services;
• to communicate with you;
• to help us detect and combat abuse, harmful activity, fraud, data spam and illegal activity on the Platform;
• to ensure your safety and security, including reviewing User Content, messages and associated metadata for breach of our community guidelines and other inappropriate content;
• to ensure that content is presented to you and your device in the most effective manner;
• to improve, promote and develop the Platform;
• to conduct data analysis and testing of the Platform to ensure the stability and security of the Platform;
• to allow you to participate in the interactive functions of the Platform;
• to enable your engagement in social activities on the Platform, for example, by allowing other users to identify you through their telephone contacts;
• to ensure that you meet the minimum age standard to use our Platform (as required by law);
• to train our algorithms;
• to implement our Terms of Service and other agreements, statements and standards; and
• to manage the Platform, including troubleshooting.

We provide your personal data with the following specific third parties:

Social Network Platforms: If you choose to share a link or an image from our Platform on a social network platform, your username and virtual image will be provided to and displayed on that social network platform.

Service Providers: we will provide your personal data (including User Content) to service providers that support our business, such as cloud storage providers, SMS service providers, content review service providers, data analyzers, software performance analyzers, messaging service providers, CDN service providers, etc., for the purpose of providing our services to you and ensuring that the Platform is a safe and enjoyable site.

Law Enforcement Agencies: we will share your data with law enforcement agencies, public authorities or other organizations when required to do so by law and if such share is reasonable and necessary, such as

• to comply with a legal obligation, process or request;
• to implement our Terms of Service and other agreements, statements and standards, including investigating any possible violations;
• to detect, prevent or otherwise address security, fraud or technical issues; or
• to protect the rights, property or safety of us, our users, third parties or the public as required or permitted by law (including exchanging data with other companies and organizations for the purposes of fraud prevention and credit risk mitigation).

Third Parties: If we receive verified complaints from third parties that the content that you post or upload to our Platform constitutes as a violation of the third parties' legal rights, including their intellectual property rights, we may disclose your personal data to the third party for their further action.

Public Profile: please note that the profile you set up on the Platform is public and visible to anyone on the Platform; but only your friends can see the User Content you upload and generate, and they may further copy or share your User Content, except that when you use certain functions, users who are not your friends can also see the User Content uploaded or generated by you, without knowing your identity.

Sale or Merger: we will also disclose your data to third parties in the following circumstances:

• If we sell or purchase any business or assets (whether a result of liquidation, bankruptcy or otherwise), in which case we will disclose your data to potential sellers or buyers of such business or assets; or
• If we sell, purchase, merge, are acquired by or partner with another company or business, or sell some or all of our assets. In such a transaction, user data may be included in the transferred assets.

Retention location and international data transfer: to provide you the services, security maintenance and other purposes specified in this Policy, we may store your personal data in the servers in countries/regions (such as Japan, the U.S., Singapore, etc.) other than where you are resided and transfer your personal data to our affiliates, service providers or business partners in such countries/regions. These countries or regions may have different data protection rules than where you reside. When we transfer your personal data to the recipients in such countries/regions, we will take all necessary and appropriate measures to protect your personal data and ensure the security of your personal data in transit in accordance with this Policy and applicable data protection laws. We will also require the recipients of your personal data to provide adequate protection to safeguard the security of your data. For example, we may enter into appropriate data processing agreements with the recipients or complete other formalities as required by applicable data protection laws or regulatory authorities.

Retention period. We will retain your personal data where we have a proper business need or any legitimate commercial purpose to do so, for example, to fulfill our Terms of Service or provide you with our service. However, there are occasions where we are likely to keep this data for longer in accordance with our legal obligations or where it is necessary for the establishment, exercise or defense of legal claims. After you have terminated your use of our Platform (i.e., deregistering your account), we will delete your personal data or process it in an anonymized way.

Under applicable data protection laws, you have certain rights to your personal data, which may include the right to access, delete, update or correct your personal data, the right to know how your personal data is processed, and other rights as conferred by applicable data protection laws.

You can access, update and correct most of your personal data by signing into the Platform. You can delete the User Content you uploaded on the Platform. We also provide a number of tools in “Settings” that allow you to manage your personal data.

You can also deregister your account in "Settings" if you wish. Please note that after your confirmation of deregistration, your account will be deactivated for 30 days, during which you may reactivate your account at any time. If you do not reactivate your account within 30 days, unless otherwise required by applicable laws, your account and associated data will be permanently deleted (while data that is not only belonging to your account may still be visible to other users on the Platform, such as chat messages), and you will not be able to log back into your deregistered account and uploaded information or content.

If you have any questions on how to use the above tools or are unable to use such tools to exercise certain rights, want to know about what rights you may have or want to exercise them, or have any other requests, inquiries, or complaints, please contact us at: bondee_global@bondee.net.

We will respond to all requests on the exercise of personal data we receive from the user according to the applicable data protection laws. To protect the security of your account and your personal data, we may verity your identity before we respond to your requests. Under some circumstances, we may refuse to comply with your request as permitted by applicable laws. In such cases, we will explain why we refuse to respond to your request in our reply. In addition, we may charge a reasonable fee for responding to your request in accordance with applicable laws.

We take measures to ensure that your data is processed securely and in accordance with this Policy, such as processing under encryption. We have appropriate technical and organizational measures to ensure a level of security appropriate to the risk of varying likelihood and severity for the rights and freedoms of you and other users, including developing internal data protection management programs, granting access on a need-to-know basis, and controlling access to personal data. We maintain these technical and organizational measures and will adjust them from time to time to improve the overall security of our systems.

Although we have taken reasonable and effective measures as described above and comply with the standards required by applicable laws and regulations, since the data transmission through the internet is not completely safe, we still cannot guarantee the security of your personal data transferred through the Platform. Any transmission is at your own risk and you should take active measures to ensure the security of your personal data, such as: regularly changing your account password and not disclosing your account password and other personal data to others.

In the event of a security incident involving personal data, we will report to the competent authorities in accordance with the law, conduct a timely investigation into the incident and initiate contingency plans. At the same time, we will send notifications to relevant users through effective channels to prevent or control any data breach.

This Platform is not directed at children under the age of 13. In certain cases, this age may be higher due to local regulatory requirements, please see the Supplemental Terms applicable to the country/region you are located in for details. If you are a child under that age, please do not use this Platform.By using the services, you confirm that you are over the relevant age specified herein or you have got the prior consent of your parent or legal guardian or you have the legally capacity to sign a binding contract with Bondee in accordance the applicable laws and regulations, and you have legally capacity to provide your personal data to Bondee.

If you believe that we hold personal data about or collected from a child under such specific age, please contact us at bondee_global@bondee.net and we will take steps to delete the account and associated personal data under that account.

In the event that you wish to make a complaint about how we process your personal data, contact us immediately at: bondee_global@bondee.net. We will endeavor to deal with your request as soon as possible. This is without prejudice to your right to launch a claim with relevant data protection authority.

We may update this Policy from time to time. When we update the Policy, we will notify you by updating the "Last Updated" date at the top of this Policy, posting the new Policy and providing any other notice required by applicable laws. Your continued access to or use of the Platform after the date of the updated Policy constitutes your acceptance of the updated Policy. If you do not agree to the updated Policy, you must stop accessing or using the Platform.

In the event of any conflict between the different language versions of this Policy, the prevailing language shall be determined in accordance with the following rules.

• If you are a user located in the Republic of Korea, the Korean version shall prevail.
• If you are a user located in Japan, the Japanese version shall prevail.
• If you are a user located in Thailand, the Thai version shall prevail.
• If you are located in other countries or regions, the English version shall prevail.

If any court of law, having jurisdiction to decide on this matter, rules that any provision of this Privacy Policy is invalid, then that provision will be removed from this Privacy Policy without affecting the rest of the terms herein, and the remaining provisions of this Privacy Policy will continue to be valid and enforceable.

If you have questions, comments, or requests regarding this Policy and how we process your personal data, please contact us at: bondee_global@bondee.net.

Republic of Korea. If you are using the Platform in the Republic of Korea (“South Korea”), the following Supplemental Terms shall apply. In the case of conflict between the Supplemental Terms and the main body of this Policy, the Supplemental Terms shall prevail.

As a foreign operator, we will transfer and store your personal data overseas.

• The personal data we collect from you will be used in accordance with the purposes specified in this Policy, and will be transferred to Bondee data centers in Japan, Singapore, and the U.S. via communication networks upon its collection. The personal data so transferred (stored) overseas will be retained for the period specified in this Policy.

How do we entrust others to process your personal data

• Unless otherwise set forth in the main body of this Policy, if we use data (such as the user-generated virtual image and usernames) as part of our advertising and marketing campaigns, your personal data contained in the data aforementioned may be disclosed to the recipients of such advertising or marketing content.
• We will provide your data (including User Content) to the following service providers who support our business to provide our services to you.
• When concluding entrust agreements with service providers, in addition to specifying the contents of the entrusted business in the entrust agreements and relevant documents, we will expressly prohibit the service providers from processing personal data for purposes other than those of the entrusted business, and specify the technical and organizational measures the service providers should adopt, the restrictions on sub-entrustment, as well as matters relating to the management and supervision of services providers and compensation for damages. We will supervise whether the service providers process your personal data in a secure method.
• Our entrustments of business to domestic and overseas companies are as follows. In particular, when companies outside South Korea are entrusted to handle relevant business, we will transfer your personal data outside of South Korea through the communication network in the following manner.

How Do We Provide Your Personal data to Third Party. In principle, we will not provide your personal data to third parties without your consent. However, the provision of your personal data is limited to cases where you have directly agreed to provide your personal data in order to enable your access of services provided by an external partner; where we are subject to an obligation of submitting your personal data in accordance with the applicable laws and regulations; where it is necessary for the settlement of the costs of information communication services; or where it is significantly necessary for the emergency concerning the life, physical or property interests of you or a third party.

How Do We Destroy Your Personal Data. We will immediately destroy your personal data in the following circumstance: the purpose for which the personal data is collected has been fulfilled; the retention period specified in this Policy has expired; or when you withdraw your consent to the collection and use of your personal data.

Retention Period of Your Personal data. In principle, we will keep your personal data until you deregister your account.

We will destroy your personal data according to the following procedure and method:

• Destruction procedures: we will select the personal data for which the cause of destruction occurs and destroy the personal data upon the approval by the Personal Data Protection Officer.
• Destruction methods: personal data recorded and saved in the form of electronic documents will be destroyed in a way that cannot be recovered, and personal data recorded and saved in paper documents will be destroyed by shredding in a shredder or incineration.

However, we will continue to retain your personal data within the period required by laws and regulations, including but not limited to:

For members who have not used the service for 1 year, we will keep their personal data separately or delete it.

Your Rights to Your Personal data. Under the South Korean personal data protection law, you have the following rights with respect to your personal data:

• Right of Access. You have the right to request access to your personal data held by us, and you can exercise your rights by contacting us at bondee_global@bondee.net. However, we may deny your request for access if one of the following conditions applies:
  • the access is prohibited or restricted by relevant laws and regulations;
  • responding to your request would cause harm to the life or physical condition of a third party, or infringe on the property or other interests of third parties.
• Right of Correction and Right of Deletion. You have the right to request us to correct any inaccurate information in our possession or to delete your personal data. You may correct or delete some personal data within the Platform by yourself, and for other personal data that you are unable to correct or delete by yourself, you may exercise your rights by contacting us at bondee_global@bondee.net. If we are required by applicable laws or regulations to retain certain personal data, you will not be able to request us to delete such personal data.
• Right to Withdraw Consent. You have the right to request us to correct any inaccurate information in our possession or to delete your personal data. You may correct or delete some personal data within the Platform by yourself, and for other personal data that you are unable to correct or delete by yourself, you may exercise your rights by contacting us at bondee_global@bondee.net. If we are required by applicable laws or regulations to retain certain personal data, you will not be able to request us to delete such personal data.
• Right to Stop Data Processing. You may request us to stop processing your personal data. However, we may refuse your request to stop processing if one of the following conditions applies:
  • The processing of your personal data is unavoidable due to special provisions of the law or in order to fulfill legal obligations.
  • Stop processing of your personal data may cause damage to the life or physical condition of a third party, or infringe on the property or other interests of third parties.
  • The processing of your personal data is unavoidable for the performance of a contract with you, but you have not expressly indicated your intention to terminate the contract.

Personal data of children. The Platform is not intended for children under the age of 14. If you are a child under such age, you cannot use the Platform.

Matters related to the security protection of personal data. To ensure the security of personal data, we are taking the following measures:

• Managerial measures: developing and implementing internal management programs, operating specialized organizations, and conducting regular training
• Technical measures: managing the access rights to personal data processing systems, etc., installing access control systems, encryption, and installing and updating security software;
• Physical measures: controlling access to server rooms and servers, etc.

Installation, Operation and Rejection of Automatic Personal data Collection Devices. To improve your experience on the Platform and improve our services, we will use cookies that store usage information and are loaded at any time; please refer to "Cookies and other similar technologies" in the main body of this Policy for information on the installation, operation and rejection of such cookies.

Personal Data Protection Officer. In order to protect your personal data and handle your complaints and requests for infringement remedies, we have appointed the following Personal Data Protection Officer to be solely responsible for personal data processing related operations.

• Personal data Protection Officer: Ben Jonson
• Department: Security Department of the Technology Center
• Position: Security Director
• Email: Ben@bondee.net

Remedies for Infringement: If you need to seek remedies related to the infringement of personal data, you can apply for dispute resolution to or consultation with organizations such as the Personal Data Dispute Mediation Committee and the Personal Data Infringement Reporting Center of the Korea Internet Promotion Institute. If you have any other need to report or consult about infringement of personal data, you can also consult with the following organizations:

• Personal Data Infringement Report Center (privacy.kisa.or.kr / () - 118)
• Personal Data Dispute Mediation Committee（www.kopico.go.kr / () - 1833-6972）
• Network Investigation Department of the Supreme Prosecutors' Office: (www.spo.go.kr / www.kopico.go.kr / () - 1301）
• National Police Agency (ecrm.cyber.go.kr / () - 182)

Japan. If you are using the Platform in Japan, the following Supplemental Terms shall apply. In the case of conflict between the Supplemental Terms and the main body of this Policy, the Supplemental Terms shall prevail.

Accepting this Policy. The Platform is operated by Metadream Co., Ltd. (Metadream株式会社, the "Company"). When providing relevant services, the Company will collect and process your personal data. By expressly agreeing to this Policy in the services provided by the Company, you confirm that you are legally competent to accept this Policy. If you are a minor, you must obtain the consent of your parents or other legal representatives.

Provision of your personal data to third parties. You agree that the Company may provide your personal data to third parties for the purposes of use as described in the main body of this Policy. Such third parties may be located within Japan or overseas (the United States, Singapore, and Korea). Please refer to the website of the Personal Information Protection Commission for laws and regulations on personal data protection in different countries: https://www.ppc.go.jp/personalinfo/legal/kaiseihogohou/#gaikoku

Personal Data Protection Officer. In order to protect your personal data and handle your complaints and requests for infringement remedies, you can contact the Company via the following contact information:

Personal data Protection Officer: Ben Jonson

Email:bondee_global@bondee.net

Singapore. If you are using the Platform in Singapore, the following Supplemental Terms shall apply. In the case of conflict between the Supplemental Terms and the main body of this Policy, the Supplemental Terms shall prevail.

Contacting the Singapore Data Protection Officer

For users in Singapore who have specific questions, comments or requests in relation to this Privacy Policy, or have any questions or complaints as to how your personal data is being collected, used, disclosed and/or processed by us, please contact our Singapore Data Protection Officer at Ben@bondee.net.

Please also contact our Singapore Data Protection Officer if you are a user in Singapore that would like to exercise your rights relating to your personal data under the Singapore Personal Data Protection Act 2012, such as:

• making an access request for access to a copy of personal data that we hold about you, or information about the ways in which we had used or disclosed your personal data; or
• making a correction request to correct or update any of your personal data which we hold about you.

Cross-border transfer of personal data

Where personal data is transferred by us to any third parties outside of Singapore, we will take such necessary measures to ensure that such overseas recipients are bound by legally enforceable obligations to ensure that these overseas recipients provide a standard of protection to the personal data so transferred that is comparable to the protection under the Singapore Personal Data Protection Act 2012.

Philippines.If you are using the Platform in the Philippines, the following Supplemental Terms shall apply. In case of conflict between the Supplemental Terms and the main body of this Policy, the Supplemental Terms shall prevail.

1. Privacy Policy

I hereby acknowledge that I have read and understood the Privacy Policy as set out, and by clicking the consent box on the Platform, hereby give my voluntary, explicit and unambiguous consent to the collection, use, disclosure, processing and transfer of my personal data.

2. The age of children under which Bondee shall obtain consent from guardians to process children's personal data

This Platform is not directed at children under the age of 18. If you are under the age of 18, please do not use our services without the direct and express consent of your parent or legal guardian.

3. Disclosure on Data Retention Period

We will retain your personal data where we have a proper business need or any legitimate commercial purpose to do so. In general, after achieving the intended purpose/s, we shall dispose the personal data in a secure manner that would prevent any unauthorized processing and disclosure. For this purpose, we retain data in accordance with allowable retention periods under the law or as provided in our retention schedule.

4. Reasonable Fees for Exercise of Data Subject Rights

When you request information about your personal data or make requests to exercise your rights as a data subjects, we shall recognize these free of charge. However, we may charge a reasonable fee if the request is manifestly unfounded (i.e., no legal basis) or excessive.

5. Breach and Security Incidents

We shall develop and implement policies and procedures for the management of personal data breach, including security incidents. We shall maintain a back-up file for all personal data under our custody. In the event of security incident or data breach, we shall compare the backup with the affected file to determine the presence of any inconsistencies or alterations resulting from the incident or breach. We shall notify you and the competent authorities such as the National Privacy Commission in accordance with the law, conduct a timely investigation into the incident and implement measures to control such data breach or security incident.

6. Other security measures

To provide additional safeguards for the protection of your data, we shall implement reasonable and appropriate physical, technical and organizational measures for the protection of personal data, including the appointment of a designated Data Protection Officer who shall ensure compliance with Philippine data privacy laws, as well as conduct trainings or seminars to keep personnel, especially the Data Protection Officer updated vis-à-vis developments in data privacy and security.

Malaysia.If you are using the Platform in Malaysia, the following Supplemental Terms shall apply. In the case of conflict between the Supplemental Terms and the main body of this Policy, the Supplemental Terms shall prevail.

Data relating to children

If you are below the age of 18 years old, please ensure that your parent or guardian has given you the permission to use our Platform and to provide your personal data to us. Otherwise, please do not use this Platform.

Contact information

In you have any questions, comments, or requests regarding this Policy and how we process your personal data, please contact our Security Director of the Security Department of the Technology Center at: Ben@bondee.net or +65 98905459.

Kingdom of Thailand.If you are using the Platform in the Kingdom of Thailand, the following Supplemental Terms shall apply. In the case of conflict between the Supplemental Terms and the main body of this Policy, the Supplemental Terms shall prevail.

Legal bases for collecting, using and disclosing your personal Data

When we collect, use and/or disclose your personal data for the purposes provided in the above “Purposes that we use your personal data for” and “How do we disclose your personal data” sections in the main body, we may rely on the following legal bases:

• Performance of a contract. We may process your personal data when it is necessary to fulfill our contractual obligations to you, including providing our services or at your request prior to entering into a contract with you.
• Legitimate Interests. We may process your personal data when it is necessary to achieve the legitimate interests of us or the third parties, and those interests do not override your interests and fundamental rights and freedoms.
• Legal obligations. We may process your personal data where it is necessary for compliance with our legal obligations.
• Consent. We may process your personal data if you have given us your consent to use or disclose your personal data for a specific purpose. You can withdraw your consent at any time.

We may also use your personal data for other lawful purposes that may arise. In such event, we will inform you of any such purpose, and will obtain your consent to that use, if required by the applicable laws.

In certain circumstances, you may need to provide your personal data in order to comply with legal requirements or contractual obligations, or where it is necessary to conclude a contract. Failure to provide such personal data, under such circumstance, may constitute failure to comply with legal requirements or contractual obligations, or inability to conclude a contract with you, as the case may be.

Your Additional Rights

In addition to the rights as stated in the Policy, you may be entitled to the following rights:

• to request us to provide you with a copy of your personal data;
• to request receipt or transmission to another organization, in a machine-readable form, of your personal data where we are using your personal data based on consent or performance of a contract;
• in certain cases, to request the restriction of the processing of your personal data, or object to that processing; and
• to withdraw your consent to the processing of your personal data, where we are processing your personal data based on your consent. You can withdraw your consent at any time.
• to lodge a complaint to the expert committee appointed by the Personal Data Protection Committee in accordance with the rules and methods prescribed under the laws on personal data protection of Thailand, if you believe that we are in breach of Thailand’s laws on personal data protection.

Children’s Privacy

If you are under the age of 20 years old, you represent and warrant that you are using the Platform with the consent of your parent(s) or legal representative(s). However, for certain activities that you can act alone under the Civil and Commercial Code, your consent alone is sufficient.