Privacy policy

Effective from 15 October 2026.

This policy explains what personal data the website mixfightpattaya.com collects, why, how it is kept and what rights you have. It follows Thailand's Personal Data Protection Act B.E. 2562 (2019) (PDPA).

1. Who processes your data

The data controller is the fight club MixFight Pattaya, 338/337 Village No. 12, Mueang Pattaya, Chonburi 20150, Thailand.
For any question about personal data: contact@mixfightpattaya.com.

2. What data we collect

  • Data from the request forms: first and last name, email, messenger and your contact in it (WhatsApp number, Telegram or LINE name), and what you state in the request: discipline, format, coach, preferred time, who will train (adult or child), level, camp dates, accommodation, transfer, weight and fight experience, your message and the camp calculator's estimate.
  • Account data (for club students and coaches): name, email, profile photo and nickname, class attendance, coach notes.
  • Technical data: IP address, browser and device type, time of the request. They protect the forms from spam and keep the site running.
  • Cookie data and similar technologies — see section 7.

We do not ask for or collect sensitive data (health, religion, biometrics, etc.). Please do not include it in your messages.

3. Why and on what legal basis

  • To answer your request, book a class, a camp or a fight and contact you — to enter into and perform a contract (Section 24(3) PDPA).
  • To run the member account, the schedule and attendance — to perform the contract with a student (Section 24(3)).
  • To protect the site and forms from spam and abuse — our legitimate interest (Section 24(5)).
  • Analytics and marketing cookies — only with your consent (Section 19), which you can withdraw at any time.
  • To comply with Thai law — legal obligation (Section 24(6)).

4. Who we share data with

We do not sell your data. Only club staff who handle your request and services that process data on our behalf have access to it:

  • Vercel — website hosting and anonymous visit statistics (no cookies).
  • Supabase — database of the member account.
  • Telegram — the club team's work chat where requests arrive.
  • Beget and Google (Gmail) — the club's email, where requests are copied.
  • Cloudflare (Turnstile) — checks that a person sends the form.
  • Google (Tag Manager, Analytics, Maps, YouTube) — only with your consent, see section 7.

5. Transfers outside Thailand

The servers of these services are located outside Thailand (including the USA and Europe). We choose services that provide an adequate level of data protection and share only what the stated purposes need (Sections 28–29 PDPA).

6. How long we keep data

  • Requests — up to 2 years after our last contact with you, then deleted.
  • Account data — while you train at the club and up to 2 years after, unless the law requires longer.
  • Your cookie choice — 12 months, then the site asks again.
  • Technical data for spam protection — no longer than a few hours.

7. Cookies

Cookies are small files a website stores in your browser. We group them into categories:

  • Necessary — running the site, signing in to the account, protecting forms from spam (Cloudflare Turnstile). Always on; no consent is needed.
  • Analytics — help us understand how visitors use the site (for example, Google Analytics). Only with consent.
  • Marketing — advertising and measuring it (for example, Google Ads, Meta). Only with consent.
  • Third-party services — the Google map on the contacts page and YouTube videos. These services set their own cookies, so they load only with consent.

On your first visit the site asks for your consent. You can change your choice at any time with the “Cookie settings” link at the bottom of every page. Vercel statistics work without cookies and collect no personal data.

8. Your rights

Under the PDPA you may:

  • access your data and get a copy;
  • correct inaccurate data;
  • request erasure or restriction of processing;
  • receive your data in a machine-readable form and transfer it to another controller;
  • object to processing;
  • withdraw your consent at any time — this does not affect processing before the withdrawal;
  • lodge a complaint with the Office of the Personal Data Protection Committee of Thailand (PDPC), www.pdpc.or.th.

To exercise your rights, write to contact@mixfightpattaya.com. We reply within 30 days.

9. Children

Requests for kids' classes are made by parents or legal guardians. If you are under 20, please send a request with your parents' consent.

10. Security

The site works over a secure connection (HTTPS) only, access to data is restricted, and the forms are protected from spam and automated attacks.

11. Changes to this policy

We may update this policy. A new version is published on this page with its effective date. If the changes are significant, we will announce them on the site.