Privacy policy

This policy explains how Tier Sport Club (“we”) collects, uses, shares, and protects your personal data in line with Thailand’s Personal Data Protection Act B.E. 2562 (PDPA). It applies whenever you use our website, LINE mini-app, or visit the club.

We collect only what we need to provide and improve the Service:

• Account: name, email, phone number, profile photo (if you use LINE login), membership tier.
• Authentication: Google UID or LINE UID — used to sign you in. We do not receive your Google or LINE password.
• Bookings: facility, date, time, coach selection, promo code usage, amount paid.
• Wallet and payments: top-up amounts, transaction history. Card details are held by our payment gateway (Omise); we store only payment references and the last four digits of your card, if any.
• Technical: device type, browser, IP address, timestamps of requests — used to operate the Service and prevent abuse.

• Contract: to provide the Service you asked for — bookings, wallet, notifications about your bookings.
• Legitimate interest: fraud prevention, security, analytics on aggregate usage to improve the product.
• Legal obligation: tax, accounting, and responses to lawful requests.
• Consent: marketing messages (LINE broadcast, promotional emails). You can opt out anytime.

We share data only with the third parties needed to run the Service:

• Google Firebase (authentication, database, hosting, functions) — data may be processed in the US and other Google Cloud regions.
• Omise (payment processing) — handles card and PromptPay payments in Thailand.
• LINE (login, messaging) — when you sign in via LIFF or receive booking notifications via LINE.
• Google reCAPTCHA (App Check) — fraud prevention on callable endpoints.

We do not sell your personal data to anyone.

Account and booking records are retained for as long as your account is active, plus up to seven years afterwards to satisfy Thai tax and accounting obligations. Marketing preferences are kept until you change them. Technical logs are typically kept for 90 days.

You have the right to:

• Access the personal data we hold about you and request a copy.
• Correct data that is inaccurate or out of date.
• Delete your account and associated personal data, subject to our retention obligations.
• Withdraw consent for marketing at any time.
• Object to certain processing, or ask us to restrict it.
• Lodge a complaint with Thailand’s Personal Data Protection Committee (PDPC).

To exercise any of these rights, email privacy@tiersportclub.com. We will respond within 30 days.

We use industry-standard measures to protect your data: TLS in transit, encryption at rest (via Firebase), role-based access controls, App Check to prevent abusive requests, and daily backups. No system is perfectly secure, but we treat security as an ongoing responsibility and will notify affected users and the PDPC of material breaches as required by law.

The Service is not directed at children under 13. We do not knowingly collect data from them. If you believe a child has given us their data, contact privacy@tiersportclub.com and we will remove it.

When we update this policy we will bump the version string at the top of this page and — for changes that expand how we use your data — prompt you to re-accept before your next booking or top-up.

For privacy questions or to exercise your rights, email privacy@tiersportclub.com. You may also contact us via the LINE Official Account.