Privacy Policy

1. Data Controller

BamBite (operated by Totals Inc.) is the data controller responsible for your personal data. For any privacy matter, you can reach us at BamBite@Totals-Inc.com. Our locations are in Pathumwan and Udom Suk, Bangkok, Thailand.

2. Personal Data We Collect

We may collect: (a) identity and contact data you provide — such as your name, email address, phone number, and the content of your messages or reservation details; and (b) technical and usage data collected automatically — such as your device type, browser, IP address, and pages visited. We do not intentionally collect sensitive personal data (as defined by the PDPA); please do not submit it to us.

3. Purposes and Lawful Basis for Processing

We process your personal data only where we have a lawful basis under the PDPA:

• Consent — to send you updates or marketing you have asked to receive, and for non-essential cookies. You may withdraw consent at any time.
• Contractual necessity — to manage your reservations, orders, and enquiries.
• Legitimate interests — to operate, secure, and improve our website and services, where not overridden by your rights.
• Legal obligation — to comply with applicable laws and lawful requests.

4. Disclosure of Personal Data

We do not sell your personal data. We may disclose it to service providers (data processors) who help us operate — for example, website hosting, image hosting, and messaging platforms — under agreements that require them to protect your data and use it only on our instructions. We may also disclose data where required by law or to protect our legal rights.

5. International Data Transfers

Some of our service providers may store or process data outside Thailand. Where personal data is transferred abroad, we take steps to ensure it receives an adequate standard of protection in accordance with the PDPA and any conditions set by the Personal Data Protection Committee (PDPC).

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by law, after which it is deleted or anonymised.

7. Data Security

We apply appropriate technical and organisational measures to protect your personal data against loss, unauthorised access, alteration, or disclosure.

8. Your Rights Under the PDPA

Subject to the conditions of the PDPA, you have the right to:

• access your personal data and obtain a copy;
• request rectification of inaccurate or incomplete data;
• request erasure (deletion or anonymisation) of your data;
• request restriction of processing;
• object to the processing of your data;
• request data portability (transfer of your data in a machine-readable format);
• withdraw consent at any time, where processing is based on consent; and
• lodge a complaint with the Personal Data Protection Committee (PDPC).

To exercise any of these rights, contact us using the details below. We will respond within the timeframes required by the PDPA.

9. Cookies

We use essential cookies to make the site work and, with your consent, analytics cookies to understand how the site is used. You can manage cookies through your browser settings.

10. Children’s Privacy

Our website is not directed at children. Where consent is required and the data subject is a minor under the PDPA, we will seek consent from a parent or legal guardian as required by law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

12. Contact and Complaints

For any questions, requests, or complaints about your personal data, contact us at BamBite@Totals-Inc.com. If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) in Thailand.