Legal
Privacy policy
Version 2026-01-01
Draft. This is a plain-language summary while our full legal text is being prepared and reviewed. It will be replaced before launch.
This policy explains what personal data OnYou collects, why, and the rights you have under Thailand's Personal Data Protection Act (PDPA).
01What we collect
- Account details: name, username, email, phone number and profile photo.
- Lenders: identity verification documents and bank details for payouts.
- Rentals: delivery addresses, booking history, rental chat messages and hand-over photos.
- Payments are processed by our payment provider; OnYou does not store full card numbers.
- With your consent only: analytics about how the site is used, and marketing cookies (see the cookie policy).
02Why we use it
- To run your account and your rentals, take payments and pay lenders.
- To keep OnYou safe: verifying lenders, hiding contact details in chat, and resolving problems and disputes.
- To meet legal duties such as tax and accounting records.
- To improve the site, only if you agree to analytics.
03Who sees it
- The other person in a rental sees what they need for it: name, profile, rating and the delivery details you share.
- Service providers who work for us (payment, hosting, couriers you choose), under contract.
- Authorities, where the law requires it.
- We never sell your personal data.
04How long we keep it
- For as long as your account is open, then only as long as the law requires (for example, financial records).
05Your rights
- You can ask to access, correct, delete or receive a copy of your data, object to or restrict its use, and withdraw consent at any time.
- To use any of these rights, write to hello@onyou.studio.