LEGAL

PRIVACY POLICY

Last updated: 07 May 2026

Countercultural (“we”, “us”) is an independent music event promoter operating in Bangkok, Thailand. This policy explains how we collect, use, share, and protect personal data of visitors to hardtechnobangkok.com and customers who buy tickets to our events. We process data under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

1. Data we collect

You provide directly

  • Contact info: name, email, phone number, social handles (Telegram or Instagram) when you buy a ticket or join a waitlist.
  • Order details: event, ticket type, quantity, price.
  • Communication: messages you send us via email, Instagram DM, or Telegram.

Collected automatically

  • Technical data: IP address, browser type, device, pages visited, referral source.
  • Cookies and similar technologies: see Section 7 below.

From third parties

  • Payment processors (e.g. Ticketmelon, Stripe, Omise — depending on the event) confirm to us that your payment succeeded. We do not receive or store card numbers, CVV, or full bank account details.

2. Why we use your data

  • To deliver the ticket you bought and the event itself.
  • To contact you about the event you registered for (logistics, changes, cancellation).
  • To send you news about future events — only if you explicitly opt in.
  • To improve the site and understand traffic sources.
  • To prevent fraud and protect the security of our services.
  • To comply with legal obligations under Thai law.

3. Legal basis for processing (PDPA)

  • Contractual necessity — to fulfil your ticket purchase and provide the event.
  • Consent — for marketing communication. You can withdraw consent at any time.
  • Legitimate interest — for site analytics, security, and fraud prevention, balanced against your rights.
  • Legal obligation — when we must keep records required by Thai law.

4. Sharing with third parties

We share data only with parties that help us deliver our services:

  • Ticketing platforms (Ticketmelon and similar) that issue and validate your ticket.
  • Payment processors that handle the transaction.
  • Email and messaging providers we use to send you tickets and updates.
  • Analytics providers (e.g. Google Analytics, Meta Pixel) — once enabled, with cookie consent.
  • Authorities when required by Thai law or to protect rights and safety.

We do not sell your data. We do not share data with parties for their own marketing.

5. International transfers

Some of our service providers (e.g. hosting on Vercel, email services) operate outside Thailand. When data leaves Thailand we rely on standard contractual safeguards or your consent, in line with PDPA requirements.

6. How long we keep data

  • Order and ticket records: kept for as long as required by Thai accounting and tax law (typically up to seven years from the event).
  • Marketing list: until you unsubscribe or withdraw consent.
  • Analytics data: standard retention periods of each provider (Google Analytics defaults to 14 months unless changed).
  • Communication: kept while needed to handle the conversation, then deleted on a rolling basis.

7. Cookies and similar technologies

We use:

  • Essential cookies — required for the site to work. Always on.
  • Analytics cookies — measure traffic, page views, ad effectiveness. Loaded only with your consent.
  • Marketing cookies — Meta Pixel and similar, for ads measurement and remarketing. Loaded only with your consent.

You can control cookies in your browser settings. Blocking some cookies may break parts of the site.

8. Your rights under PDPA

You can ask us to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Delete data we no longer have a legal basis to keep (“right to be forgotten”).
  • Restrict or object to certain processing.
  • Withdraw consent for marketing or other consent-based processing.
  • Receive a portable copy of your data.
  • Lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand.

To exercise any of these rights, write to counterculturaltechno@gmail.com. We respond within 30 days.

9. Security

We protect your data with reasonable technical and organisational measures: encrypted connections (HTTPS), restricted access, vendor due-diligence. No system is perfectly secure, but we work to keep risk low.

10. Children

Our events are 20+ (Thai law for venues serving alcohol). We do not knowingly collect data from anyone under 20. If you believe we have such data, contact us and we will delete it.

11. Changes to this policy

We may update this policy as our services evolve or laws change. Material changes will be highlighted on this page. The “Last updated” date at the top tells you when we last revised it.

12. Contact

For privacy questions or to exercise your PDPA rights, write to counterculturaltechno@gmail.com.