DUCPIC Privacy Policy (Thailand)

Effective date: June 4, 2026 | Last updated: June 4, 2026 | Version: TH v1.1

This Policy is issued in accordance with the Personal Data Protection Act B.E. 2562 (2019) (the "PDPA").

Note on language: A Thai-language version of this notice is recommended for Thai users and should be published alongside this English version.

1. Introduction

PICTOREAL Inc. ("DUCPIC," "we," "us," or "our"), as data controller, operates the DUCPIC mobile application, website, and related services (the "Service") — a K-content fandom travel platform offering user-generated spot discovery, an in-app community, and location-based features. PICTOREAL Inc. is a company organised under the laws of the Republic of Korea.

This Policy explains how we collect, use, disclose and protect the personal data of users in Thailand, consistent with the PDPA. Your use of the Service is also governed by our Terms of Service, which include provisions on limitation of liability and dispute resolution.

2. Contact, representative and data protection officer

You may contact us regarding your personal data at [email protected] (Attn: Data Protection). As a controller based outside Thailand offering services to users in Thailand, we appoint a representative in Thailand as required by the PDPA; where a representative and/or data protection officer is appointed, their contact details will be provided here and notified to the PDPC as required.

3. Personal data we collect

We collect: account and registration data (email, nickname, hashed password, social-login identifier, age or date of birth for age verification); optional profile data (profile photo, favourite artists); user-generated content (posts, reviews, photos, comments, route plans); location data (your device's precise location, only when you use location features); technical and usage data (IP address, cookies, device information, usage history, access logs); event and promotion data (name, contact, delivery address, if you participate); and commerce data (payment, billing/delivery address, transaction history, if and when paid features launch).

We do not seek to collect special categories of personal data (such as data on race, ethnicity, political opinions, religious or philosophical beliefs, sexual behaviour, criminal records, health, disability, trade-union membership, genetic or biometric data). If you include such data in UGC, you do so voluntarily.

4. Purposes and lawful bases

We collect, use and disclose personal data on the following lawful bases under the PDPA:

• Performance of a contract — to create and manage your account and provide the core Service;
• Consent — for location-based features, personalised recommendations, and any future marketing; our consent requests are explicit and granular, and you may withdraw consent at any time;