← Back to Home

Privacy Policy

Last updated: March 2026

1. Who We Are

BOXX Boxing Studio (“BOXX”, “we”, “us”) operates a boutique boxing and personal training studio located at 89/2 Bumruang Road, Wat Ket, Chiang Mai 50000, Thailand. This policy explains how we collect, use, and protect your personal data when you use our website and services.

2. Data We Collect

We collect the following information when you register, book classes, or interact with our services:

  • Account information: Name, email address, phone number, password (hashed)
  • Profile data: Avatar image, bio, preferences
  • Booking data: Class bookings, cancellations, attendance history
  • Payment data: Transaction records (processed securely by Stripe — we do not store card details)
  • Usage data: Login times, pages visited, device/browser information

3. How We Use Your Data

  • Managing your account, bookings, and credits
  • Sending booking confirmations, class reminders, and important updates
  • Processing payments through Stripe
  • Improving our services and user experience
  • Communicating about schedule changes or studio announcements

4. Data Sharing

We do not sell your personal data. We share data only with:

  • Stripe: For secure payment processing
  • Supabase: For secure data storage
  • Resend: For transactional email delivery
  • Vercel: For website hosting

5. Data Retention

We retain your data for as long as your account is active. When you delete your account, we anonymize your personal data and remove identifiable information. Booking and payment records may be retained in anonymized form for business reporting purposes.

6. Your Rights (PDPA Compliance)

Under the Thailand Personal Data Protection Act (PDPA), you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Withdraw consent for data processing
  • Object to certain types of data processing

You can exercise these rights through your account dashboard (data export and account deletion are available in Account Settings) or by contacting us directly.

7. Security

We implement security measures including password hashing (bcrypt), HTTPS encryption, rate limiting on authentication endpoints, and row-level security on our database. While we strive to protect your data, no method of transmission over the internet is 100% secure.

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.

9. Contact

For privacy-related questions or to exercise your data rights:

  • Email: hello@boxxthailand.com
  • Phone: +66 93 497 2306
  • Address: 89/2 Bumruang Road, Wat Ket, Chiang Mai 50000, Thailand