Privacy Policy

1.Who we are

Little Zoo Cafe ("we", "us", "our") is an exotic pet cafe operating in Bangkok, Thailand, with branches at Asiatique The Riverfront and On Nut. For the purposes of the PDPA, we are the data controller of the personal data described in this policy.

2.What information we collect

Information you give us. When you book a visit, register at the counter, sign our entry waiver, join our newsletter or contact us, we may collect:

• Your name and the names of guests in your group;
• Your email address and phone number;
• Your booking details — branch, date, time slot, party size and number of children;
• Your acceptance of our entry waiver and visit terms (date, time and method of acceptance);
• Any notes or messages you send us, including special requests.

Payment information. Online payments are processed securely by our payment provider (Stripe). We do not receive or store your full card number — we only receive confirmation that a payment succeeded and limited details such as a reference and the amount.

Information collected automatically. Like most websites, our server keeps basic technical logs (such as IP address, browser type and pages requested) for security and to keep the site running. Some pages embed third-party services that may collect data as described in section 6.

3.How we use your information

• To take and manage your booking, and to send your confirmation and check-in QR code;
• To send service messages about your visit, such as a reminder and, after your visit, an invitation to leave a review;
• To check guests in at the cafe and record your entry waiver;
• To answer your enquiries and provide customer support;
• To take payment and prevent fraud;
• To send you marketing updates, where you have asked to receive them (see section 5);
• To keep our records, improve our service, and meet our legal obligations.

4.Our legal basis under the PDPA

We rely on one or more of the following lawful bases when we process your personal data:

• Performance of a contract — to provide the booking and visit you have requested;
• Consent — for marketing emails, and for any data you choose to give us beyond what a booking requires (you can withdraw consent at any time);
• Legitimate interest — to run and secure our business, prevent fraud and improve our service, in a way that does not override your rights;
• Legal obligation — where the law requires us to keep certain records.

5.Marketing & our newsletter

If you sign up for our newsletter, we use your email address to send occasional updates about the cafe, new residents and special offers. We will never sell your details. You can unsubscribe at any time using the link in any marketing email, or by contacting us — and we will stop. Service messages tied to a booking (such as your confirmation, QR code and reminder) are not marketing, and are sent so we can deliver the visit you booked.

6.Cookies & third-party services

This website uses only the cookies needed for it to work. We do not use advertising or cross-site tracking cookies. Some pages rely on trusted third-party services that may set their own cookies or receive your IP address when their content loads:

• Google Maps — embedded maps on our location pages;
• Google Fonts — to display the site's typography;
• Stripe — to process payments and help prevent fraud during booking.

These services have their own privacy policies governing how they handle data.

7.Who we share your information with

We share personal data only with service providers who help us run the cafe, and only as far as they need it to do so:

• Our payment processor (Stripe), to take and verify payments;
• Our email provider (Resend), to deliver your confirmation, reminders and other messages;
• Hosting and IT providers that keep our website and booking system running.

We may also disclose data if required by law, or to protect the rights, safety or property of our guests, staff or animals. We do not sell your personal data.

8.International transfers

Some of our service providers are based outside Thailand, so your data may be transferred and stored abroad. Where this happens, we take reasonable steps to ensure your data continues to be protected to a standard consistent with the PDPA.

9.How long we keep your information

We keep your personal data only for as long as we need it for the purposes above — for example, to manage your booking and visit history, support you, and meet legal and accounting requirements. When we no longer need it, we securely delete or anonymise it. You can ask us to delete your data sooner (see section 12).

10.How we protect your information

Our website and booking system use encryption (HTTPS), access controls and other reasonable technical and organisational measures to protect your data against loss, misuse and unauthorised access. No system can be guaranteed completely secure, but we work to keep your information safe.

11.Children's data

Bookings are made by an adult on behalf of their group. Where a booking or waiver includes children, the responsible adult provides that information on their behalf and confirms they are entitled to do so. We do not knowingly collect data directly from children.

12.Your rights under the PDPA

Subject to the conditions of the PDPA, you have the right to:

• Access a copy of the personal data we hold about you;
• Ask us to correct data that is inaccurate or incomplete;
• Ask us to delete or anonymise your data;
• Object to, or ask us to restrict, certain processing;
• Ask us to transfer your data, where applicable;
• Withdraw consent at any time, without affecting processing already carried out;
• Lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before acting on a request.

13.Changes to this policy

We may update this policy from time to time. When we do, we will change the "last updated" date at the top of this page, and significant changes will be made clear on the website.

14.How to contact us

For any question about this policy or your personal data, or to make a privacy request, please contact us: