Privacy Policy

1. Who we are

Drift Café operates the Drift Café Guest App and provides gaming café, booking, ordering and related customer services in Kampot, Cambodia.

For questions about this Privacy Policy or the handling of your personal data, contact:

Drift Café
Kampot, Cambodia
Email: support@driftcafe.app

2. Information we collect

We collect and process information that is necessary to provide and operate the Drift Café Guest App and our café services.

Account and profile information may include:

• first and last name
• email address
• phone number
• language and account preferences
• date of birth where provided or recorded
• profile image
• account and authentication identifiers

Where identity or age verification is carried out by Drift Café staff, we may also store:

• verification status
• verified date of birth or age information
• date and time of verification
• staff verification and audit information

Customers do not need to complete an in-app age verification process before making a booking or preorder. Where verification is required, it may be completed by Drift Café staff at the café.

Booking information may include:

• booking ID
• selected gaming room
• booking date and time
• booking duration
• number of guests where applicable
• booking status and price
• deposit amount and status
• cancellation information
• check-in and No-Show status

Order information may include:

• products ordered
• quantities and prices
• order totals and status
• booking, room, table or pickup information where applicable

Payment and refund information may include:

• payment amount and currency
• payment status
• deposit information
• refund information
• transaction or payment references
• ABA or KHQR transaction/reference information where applicable

Drift Café does not require or store a customer's online banking password or PIN.

Notification and technical information may include:

• push notification token
• device platform
• technical information necessary to provide app functions and notifications

When you contact support or send feedback, we process the information you choose to provide in that communication.

3. How we use your information

We use personal data as reasonably necessary to:

• create and manage customer accounts
• authenticate users
• manage customer profiles
• create and manage room bookings
• process food and drink orders
• manage deposits, payments and refunds
• confirm payments
• manage cancellations, check-ins and No-Shows
• record staff verification where required
• send requested or operational notifications
• provide customer support
• respond to feedback and enquiries
• prevent misuse, fraud and security incidents
• maintain transaction and accounting records
• comply with applicable legal and regulatory obligations

4. Service providers and data sharing

Drift Café uses third-party technical service providers where necessary to operate the Guest App.

Supabase
Supabase is used for services including authentication, database functions and data/storage infrastructure.

Expo
Expo infrastructure may be used for app services and push notifications. Where push notifications are enabled, push tokens and notification information required for delivery may be processed by Expo and the relevant mobile notification infrastructure.

Payment information may also be processed in connection with supported payment services such as ABA/KHQR where applicable.

We do not sell personal data.

We may disclose information where required by applicable law, a lawful request from a competent authority, or where reasonably necessary to protect users, Drift Café, or the security of our services.

5. International / cloud processing

Drift Café uses cloud service providers. Depending on the infrastructure and service provider used, personal data may be processed or stored on servers located outside Cambodia.

We do not represent that all Guest App data is stored exclusively in Cambodia.

We use service providers and technical safeguards intended to protect data during processing and transmission.

6. Push notifications

If you enable notifications, the app may register a push notification token for your device.

This token is used to deliver notifications such as booking, payment or service information.

You can control notification permissions through the app where available and through your device settings.

7. Data security

Drift Café uses reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse or alteration.

Measures include, where applicable:

• authenticated access
• database access controls
• restricted staff access
• server-side permission controls
• secure network transmission
• restricted access to verification and customer information

No electronic system can guarantee absolute security.

8. Data retention

We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required by applicable law.

Account and profile information is generally retained while the customer account remains active and for as long as necessary to operate the service.

Push tokens and similar account-specific technical information should be removed when they are no longer required or when the associated account is deleted.

Verification information should not be retained longer than necessary for verification, security or legal purposes.

When an account is deleted, personal account information is deleted or anonymised where it is no longer necessary.

Certain booking, order, payment, refund and transaction records may need to be retained after account deletion where they form part of records required for accounting, tax, fraud prevention, dispute resolution or other legal obligations.

Where Cambodian accounting requirements apply, relevant accounting records and supporting documentary evidence may need to be retained for at least ten years.

Retention of required transaction records does not mean that the customer's active Guest App account must remain available.

9. Account deletion

You may request deletion of your Drift Café Guest App account from:

Profile → Privacy & Data → Delete Account

Account deletion is permanent. When an account deletion request is completed, Drift Café will delete or anonymise personal data associated with the account where it is no longer required, including applicable profile information, account identifiers, push notification registrations and other account-specific personal data.

Personal profile or verification media that is no longer required should also be removed.

Some booking, order, payment, refund or accounting records may be retained where required for accounting, security, fraud prevention, legal compliance or the establishment, exercise or defence of legal claims.

Where records must be retained, Drift Café will limit the retained personal information to what is reasonably necessary for that purpose.

Users who cannot access the app may request account deletion through our public account deletion page:

https://driftcafe.app/delete-account

10. Your information

You may contact Drift Café if you want to:

• ask what personal information is held about your account
• correct inaccurate account information
• ask a privacy question
• request account deletion
• raise a concern about the handling of your information

Contact: support@driftcafe.app

11. Changes to this Privacy Policy

We may update this Privacy Policy when our services, data practices or legal obligations change.

When material changes are made, the updated policy will be made available through the Guest App and the effective date will be updated.

12. Contact

Privacy questions and requests:

Drift Café
Kampot, Cambodia
support@driftcafe.app