HubSwitch Co., Ltd. ("Company") is the data controller under the Personal Data Protection Act B.E. 2562 (PDPA). HubPro Customer is a consumer platform for personal inventory management, service bookings, and e-wallet functionality.
2. Purposes of Data Collection
User registration and identity verification
Personal Inventory management
Service bookings and appointments
E-wallet payments and transactions
Notifications and status tracking
Product search and matching via PIM (Product Information Management)
Service improvement analytics (with consent)
3. Types of Data Collected
PIIPersonal Identifiable Information
Full name
Email, phone number
Profile photo
Shipping address (if applicable)
INVENTORYPersonal Inventory Data
Items, rooms, storage locations
Product and receipt photos
Barcodes/GTIN
Expiry dates, lot numbers
FINANCIALFinancial Data
Wallet balance, transaction history
Payment information
Purchase history
4. Legal Basis
Consent (PDPA S.19) — for marketing and analytics
Contract (PDPA S.24(3)) — for service delivery
Legal obligation (PDPA S.24(6)) — for financial records per Accounting Act
Legitimate interest (PDPA S.24(5)) — for fraud prevention
5. Data Retention Periods
Account data: until deletion request + 30-day grace period
Inventory data: until item/account deletion
Financial data: 5-7 years per Thai Revenue Code S.87
Cookie data: 1 year or until consent withdrawal
Support session data: 90 days
6. Data Subject Rights (Articles 30-36)
You have the following rights under PDPA:
Right of access — request a copy of your personal data
Right of rectification — correct inaccurate or incomplete data
Right of erasure — request deletion (except legally required data)
Right of data portability — receive data in machine-readable format (ZIP download)
Right of restriction — restrict certain data processing
Right to object — object to processing for marketing purposes
Exercise your rights at Profile > Settings or contact DPO at dpo@hubswitch.com
7. Cookies and Similar Technologies
We use cookies and localStorage as follows:
Essential cookies — Firebase Authentication and i18n
Analytics cookies — Google Analytics (with consent)
You can manage cookie consent at any time via the cookie banner at the bottom of the page.
8. Data Storage
Data is stored on Google Cloud Platform (GCP) region asia-southeast1 (Singapore) for production and us-central1 for staging. All data is encrypted in transit (TLS 1.3) and at rest (AES-256).