Privacy Notice

LIFE AND HEALTH INNOVATION CO., LTD. is the data controller for this site under the Personal Data Protection Act B.E. 2562. For anything in this notice, write to hello@keep1st.com.

Account: your email address, and a display name if you give one. Listing: the title, description, destination link, category, and country you enter, all of which are public by design.

Payment: the amount, currency, time, and the reference Stripe returns. We never receive your card number, and no card data reaches our servers.

Usage: clicks on listings, and standard request data such as IP address, user agent, and time, which our host records to serve and protect the site.

Preferences: your language and theme choice are kept in your own browser's local storage. They stay on your device and are not sent to us.

To run the board and your listing, and to take payment: performance of our contract with you.

To prevent fraud, abuse, and click manipulation, and to keep the service secure and working: our legitimate interest in operating a service that is not being gamed.

To keep accounting and tax records: compliance with a legal obligation.

To send you marketing, if we ever do: your consent, which you may withdraw at any time.

Stripe processes payments and receives what it needs to charge you. Cloudflare hosts the site and the database. Both act as our processors under contract. We do not sell your data and we do not share it for anyone else's advertising.

Your listing itself — title, description, link, category, country, rank, and accumulated total — is published on the public board. That is the point of the service.

Stripe and Cloudflare operate internationally, so your data may be processed outside Thailand. We rely on their contractual data protection commitments to meet the cross-border requirements of the PDPA.

Payment and accounting records are kept as long as tax law requires. Listing and account data are kept while your account is open and for a reasonable period afterwards to settle disputes and chargebacks. Aggregated statistics that identify no one may be kept indefinitely.

Under the PDPA you may ask for a copy of your data, correct it, delete it, restrict or object to how we use it, ask for it in a portable form, and withdraw consent where consent is the basis. Write to hello@keep1st.com and we will respond within the statutory period.

Some data cannot be deleted on request where we must keep it by law, such as tax records of payments you made.

If you are not satisfied with our answer, you may complain to the Personal Data Protection Committee.

We use local storage for your language and theme, which is necessary for the site to behave the way you set it. Stripe sets its own cookies on its checkout pages under its own privacy policy. If we ever add analytics or advertising cookies we will ask for your consent first.

Traffic is encrypted in transit. Card data never touches our systems. Access to the database is limited to what runs the service. No system is perfectly secure, and if a breach affects your rights we will notify you and the regulator as the PDPA requires.

We update this notice when the service changes. This version is dated 2026-08-23.