Privacy Policy

2B Boston Group Co., Ltd. ("2B Global," "we," "us," or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, share, and retain your personal data when you use our website at www.2bglobal.info and our car transfer services. This policy complies with Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA").

1. Information We Collect

We collect the following personal data when you make a booking or interact with our services:

• Identity information: Full name, nationality
• Contact information: Email address, phone number (including WhatsApp)
• Booking details: Service type, pickup and drop-off locations, date and time, number of passengers, luggage requirements, special requests
• Payment information: Credit/debit card details (processed securely by Stripe; we do not store your full card number)
• Technical data: IP address, browser type, device information, and cookies (see our Cookie Policy)

2. How We Use Your Information

We use your personal data for the following purposes:

• Booking processing: To confirm, manage, and fulfil your car transfer bookings
• Communication: To send booking confirmations, reminders, driver details, and respond to your enquiries
• Payment processing: To process payments securely through our payment provider
• Service improvement: To analyse usage patterns, improve our services, and enhance user experience
• Legal compliance: To comply with applicable laws, regulations, and legal processes
• Safety and security: To protect the safety of our passengers, drivers, and operations

3. Data Sharing

We do not sell your personal data. We share your information only with the following trusted third parties as necessary to deliver our services:

• Stripe: For secure payment processing. Stripe is PCI DSS Level 1 certified.
• Resend: For sending transactional emails such as booking confirmations and receipts.
• LINE Notify: For internal operational notifications to coordinate driver assignments.
• Google Analytics (GA4): For anonymous website usage analytics.

Each third party is bound by their own privacy policies and data protection obligations. We require all third parties to handle your data in accordance with applicable data protection laws.

4. Data Retention

We retain your personal data as follows:

• Booking data: Retained for 2 years from the date of the completed service, after which it is anonymised or deleted.
• Payment records: Retained as required by Thai tax and accounting regulations (typically 5 years).
• Technical/cookie data: Retained according to our Cookie Policy.

After the retention period, personal data is securely deleted or irreversibly anonymised.

5. Your Rights Under PDPA

Under Thailand's PDPA, you have the following rights regarding your personal data:

• Right of access: Request a copy of your personal data that we hold.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data, subject to legal obligations.
• Right to restriction: Request that we limit the processing of your personal data in certain circumstances.
• Right to data portability: Request your personal data in a structured, commonly used, machine-readable format.
• Right to object: Object to processing of your personal data for direct marketing purposes.
• Right to withdraw consent: Withdraw your consent at any time where processing is based on consent. This does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at support@2bglobal.info. We will respond to your request within 30 days.

6. Cookies

Our website uses cookies and similar technologies to enhance your browsing experience. For detailed information about the cookies we use and how to manage them, please visit our Cookie Policy.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit (SSL/TLS), secure payment processing via Stripe, and access controls for our internal systems.

8. International Data Transfers

Some of our third-party service providers may process your data outside of Thailand. In such cases, we ensure that adequate safeguards are in place to protect your personal data in accordance with the PDPA.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us: