Privacy policy

Last updated: 26/10/2026

MintyID (“we”) respects your privacy. This policy explains how we collect, use, share and protect your personal data under Thailand’s Personal Data Protection Act B.E. 2562 (PDPA).

1. Data controller

MintyID is operated by MintyID. For privacy matters contact mintyid.com@gmail.com.

2. Data we collect

• Account data: name, email, phone number, password (stored as a one-way hash) and data from LINE or Google sign-in (name, email, user ID).
• Transaction data: order history, wallet balance, top-ups, transfer slips and crypto payment details (transaction ID, amount).
• Seller data (shop applicants only): full legal name, national ID number, ID card photo, a selfie holding the card and payout bank account details.
• Usage data: IP address, approximate country, device and browser type, pages visited and traffic source.
• Cookies: cookies needed for the site to work (sign-in, security) and analytics/marketing cookies used only after you consent.
• Support: messages you send to our team.

3. Purposes and legal bases

• Performing our contract with you: creating your account, delivering products, running your wallet, holding payments in escrow between buyers and sellers, and paying sellers.
• Verifying sellers and preventing fraud (our legitimate interest and that of other users).
• Meeting legal obligations, such as keeping accounting records and responding to lawful requests from authorities.
• Analytics, site improvement and marketing (based on your consent, which you can withdraw at any time).

4. Sharing

We do not sell your personal data. We share only what is necessary with service providers that help us operate:

• our website hosting and database provider;
• Google / Firebase (phone verification SMS, Google sign-in, email delivery and, with consent, Google Analytics);
• LINE (LINE sign-in);
• Cloudflare (bot protection);
• our transfer-slip verification provider and crypto payment provider;
• suppliers we order products from on your behalf (only what the order needs);
• authorities, where required by law or a lawful order.

On the marketplace, buyers see only a seller’s shop name and rating, and sellers see only the buyer’s display name. We never show one user’s ID number, identity documents, phone number or bank account to another user.

5. International transfers

Some of our providers store data on servers outside Thailand. We use providers with appropriate data-protection safeguards.

6. Retention

• Account data: while you use the service, or until you ask us to delete it.
• Transactions and payment evidence: for the period required by accounting and tax law.
• Seller identity documents: while you are a seller, and afterwards only as long as needed to resolve disputes or as required by law.
• Site usage statistics: no longer than 400 days.

7. Security

• HTTPS on every page.
• Delivered account details and seller identity documents are encrypted with AES-256 before storage; identity documents can be opened only by the reviewing admin.
• Passwords are stored as hashes; we cannot read them.
• Admin accounts are protected with two-factor authentication.

8. Your rights

You may request access to and a copy of your data, correction, deletion or anonymisation, restriction of use, objection to processing and data portability, and you may withdraw consent at any time (without affecting processing done before). Contact mintyid.com@gmail.com; we reply within 30 days.

If you believe we have not complied with the law, you may complain to Thailand’s Personal Data Protection Committee (PDPC).

9. Changes

We may update this policy and will show the last-updated date above. We will notify you of significant changes on the site or by email.