Privacy Policy

Last updated: 21 October 2026

This Privacy Policy describes how Mustacheseven Co., Ltd. (“the Company”, “we”, “us”) collects, uses, discloses and protects personal data in connection with the website mustachebangkok.com, the purchase of tickets and table reservations, and attendance at events operated under the names Mustache Bangkok and Mustache Takeover. This Policy is issued in accordance with the Personal Data Protection Act B.E. 2562 (2019) of Thailand (“PDPA”).

1. Data Controller

The data controller is Mustacheseven Co., Ltd., 2, 1 and 2/2 Decho Road, Suriya Wong, Bang Rak, Bangkok 10500, Thailand. Email: info@mustachebangkok.com.

2. Personal Data Collected

We may collect the following categories of personal data:

• Identity and contact data: name, email address and telephone number.
• Transaction data: event, ticket type, table reservation, amounts paid, order history and check-in records.
• Payment data: payment status, card type, last four digits of the card and country of issue. Full card details are processed exclusively by our payment service provider and are not received or stored by the Company.
• Communication data: messages sent to us by email, chat or messaging applications.
• Technical data: IP address, browser type, device information, pages visited and cookie identifiers.
• Images: photographs and video recorded at our events.

3. Purposes and Legal Basis

Personal data is processed for the following purposes:

• to perform our contract with you, including issuing tickets, managing reservations, verifying entry and providing customer support (contractual basis);
• to comply with legal obligations, including tax, accounting and age-verification requirements (legal obligation);
• to maintain the security and proper operation of the website and to prevent fraud (legitimate interest);
• to send information about upcoming events where you have subscribed to our mailing list (consent);
• to measure website performance and the effectiveness of our communications through analytics and advertising cookies (consent).

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

4. Cookies

The website uses cookies that are strictly necessary for its operation, including the shopping cart and checkout session. With your consent, the website also uses analytics and advertising cookies provided by third parties. You may refuse or delete non-essential cookies through your browser settings at any time. Disabling strictly necessary cookies may prevent the checkout from functioning.

5. Photography and Video

Events may be photographed and recorded. By attending, you acknowledge that your image may be captured and used by the Company on its website, social media channels and promotional materials. You may request the removal of any image in which you are identifiable by contacting us with a link to or copy of the image.

6. Disclosure of Personal Data

We disclose personal data only to the extent necessary for the purposes set out above, to the following categories of recipients: payment service providers, ticketing and e-commerce service providers, website hosting and security providers, email and messaging service providers, analytics and advertising service providers, and government authorities where required by law. We do not sell personal data.

7. International Transfers

Some of our service providers may store or process personal data outside Thailand. Where this occurs, we take reasonable steps to ensure that an adequate level of protection is provided in accordance with the PDPA.

8. Retention

Order and payment records are retained for a minimum of five (5) years in accordance with Thai tax and accounting laws. Mailing list data is retained until you unsubscribe. Communication data is retained for up to two (2) years. Other personal data is retained only for as long as necessary for the purposes for which it was collected, after which it is deleted or anonymised.

9. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure.

10. Your Rights

Subject to the conditions of the PDPA, you have the right to: access and obtain a copy of your personal data; request correction of inaccurate data; request deletion, destruction or anonymisation; object to or restrict processing; request data portability; withdraw consent; and lodge a complaint with the Personal Data Protection Committee. To exercise these rights, contact us at the address below. We will respond within thirty (30) days.

11. Age Restriction

Our events and services are intended exclusively for persons aged twenty (20) years or older. We do not knowingly collect personal data from persons under this age. If we become aware that such data has been collected, it will be deleted.

12. Changes to this Policy

We may amend this Policy from time to time. The current version is published on this page with the date of the latest revision.

13. Contact

Mustacheseven Co., Ltd.
2, 1 and 2/2 Decho Road, Suriya Wong, Bang Rak, Bangkok 10500, Thailand
Email: info@mustachebangkok.com