Privacy Policy

Last Updated: 6 January, 2026

SceneAccess Company Limited ("SceneAccess", "we", "our", or "us") is committed to safeguarding your privacy. This Privacy Policy explains how we collect, use, and disclose your information when you use our digital location booking platform and services (the "Service") available at www.sceneaccess.io. It reflects our compliance with Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and relevant platform-specific operations.

1. Who We Are

SceneAccess is a digital marketplace that connects location Hosts with Creatives (filmmakers, photographers, etc.) seeking spaces for shoots across Thailand and Southeast Asia.

Company: SceneAccess Company Limited

Business ID: 0105568098050
Address: 700/16 Regent Srinakarin Tower, Srinakarin Road, Patthanakan, Suan Luang, Bangkok 10250, Thailand
Contact: admin@sceneaccess.io

2. What Data We Collect

We collect various types of personal data to provide and improve our Service. "Personal data" refers to any information relating to a person which is identifiable, directly or indirectly.

2.1 Data You Provide:

Name, email, phone number
Address and identity documents (if required for verification)
Note on Sensitive Personal Data: Identity documents may contain "sensitive personal data" as defined by the PDPA, such as biometric data (e.g., photographs) or religious beliefs. If such sensitive data is collected, we will obtain your explicit consent for its processing, as required by Thai law.
Payment-related information (e.g., transfer account, PromptPay, PSP sub-merchant details via Omise)
Booking details and preferences
Communications with SceneAccess (e.g., support messages, live chat inquiries via tawk.to)

2.2 Automatically Collected Data:

IP address, browser/device data
Pages visited, session activity
Cookies and other tracking technologies (see Section 7 for details)

For Analytics & User Behavior: User numbers, session statistics, approximate geolocation, browser and device information, client IDs (via first-party cookies), and advertising IDs collected by tools like Google Analytics and Hotjar.

For Live Chat: IP address, device information, and technical data related to your chat session via tawk.to.

2.3 Data from Third Parties:

Login data from social logins (Google, Facebook)
KYC data via PSPs such as Omise, for verification and compliance with anti-money laundering (AML) and know-your-customer (KYC) protocols.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds as permitted by the PDPA:

Consent: For specific purposes where you have given us your explicit, freely given, and informed consent (e.g., for certain marketing activities or the use of non-essential cookies via Google Analytics, Hotjar, or tawk.to). Implied consent is not valid.

Contract Performance: When processing is necessary for the performance of a contract (e.g., to create and manage your account, facilitate bookings, process payments, provide customer support via live chat).

Legal Obligations: When processing is necessary for compliance with a legal obligation (e.g., AML/KYC verification, tax compliance).

Legitimate Interests: When processing is necessary for platform fraud prevention, improving user experience, or ensuring IT and system security.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience.

4.1 Detailed Cookie Table

In accordance with our latest audit, the following services are active on the platform:

| Service | Provider | Purpose | Type | | --- | --- | --- | --- | | Sharetribe | Sharetribe Oy | Maintains user session and login tokens (st-f7b...-token).

| Necessary |

4.2 Your Consent for Cookies

Under the PDPA, we require your explicit opt-in consent before setting any non-essential cookies. You have the option to Accept All, Reject All, or Manage Preferences.

Managing Your Preferences: You can change or withdraw your consent at any time. Because we utilize a clean UI, the floating consent icon is hidden once a choice is made. To change your settings, click the "Cookie Settings" link located in the footer of our website.

5. International Transfers

Some third-party services we use may store or process your personal data outside Thailand (e.g., USA, Ireland, Germany). We rely on Standard Contractual Clauses (SCCs) or other appropriate safeguards to ensure these providers offer adequate protection aligned with PDPA standards.

6. Your Rights Under Thai Law

Under the PDPA, you have the following rights:

Right to Access: Obtain a copy of your personal data.

Right to Receive/Port: Receive your data in a readable electronic format.

Right to Object: Object to collection or use for direct marketing.

Right to Delete/Erasure: Request deletion when data is no longer necessary.

Right to Restrict Processing: Limit how we use your data in certain circumstances.

Right to Correct: Update inaccurate or incomplete data.

Right to Withdraw Consent: Withdraw consent at any time.

To exercise these rights, please contact us at admin@sceneaccess.io.

7. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: admin@sceneaccess.io

Contact Page: https://www.sceneaccess.io/contact

SceneAccess Company Limited is a private limited company registered in Thailand operating as a neutral digital marketplace.