Data Privacy Notice
This Privacy Notice (the “Notice”) explains how We Are Scan Me (“WASM”, “we”, “us”) collects, uses, and discloses (“processes”) your personal data, in our capacity as a Data Controller. It applies to wearescanme.com, our web app, and the QR registration service for both our Pet Owners and Street Dogs & Cats programs.
Who we are. WASM is a street-animal welfare and pet-protection initiative based on Koh Samui, Thailand. We are not a registered charity or business, and 100% of proceeds go to animal care. You can reach us through wearescanme.com.
WASM provides QR-code tags for pets and street animals to help reunite lost pets with their owners and to support the care of street animals (traceability, medication, vaccines, and feeding). Pet owners register their animals and receive a QR tag for the collar; if a pet goes missing, a finder can scan the tag to help reunite it with its owner.
Who can use this service.” Both paid membership service and contributor services are intended for individuals who are representing themselves, are 20 years of age or older, and are legally competent. By registering, you confirm you meet these requirements and are providing your own personal data.
We process your personal data as follows.
We rely mainly on your consent, and in some cases on our legitimate interest in animal welfare:
– Consent — to register animals, issue QR tags, show your contact details to a finder when a tag is scanned (see §4.2), and communicate with you.
– Legitimate interest in animal welfare — to care for and protect street animals and pets, to keep health and vaccination records, and for system security and service improvement, where such interest does not override your fundamental rights in your personal data.
– Performance of a contract — for the one-time-payment lifetime membership (Bronze/Silver/Gold), to create your account and process payment.
2.1. Register pets, create member accounts, and verify identity.
2.2. Issue and manage QR tags, and enable finders to contact owners of lost pets.
2.3. Process payments and membership.
2.4. Communicate, provide customer service, and respond to contact forms.
2.5. Support street-animal care and improve our website and services.
3.1 Sources and items of personal data collected
Directly from you — registration & animal details
Name, email, phone, emergency contact, username/password, membership tier. Animal records: photo, name/description, breed, age, colour, location area, microchip number or QR tag ID, medical conditions / vaccination and treatment records, veterinary details.
Directly from you — contact form (Pet Owner, Street Dogs & Cats Account)
Name, email, message.
Via technology that detects your usage
Cookie data, IP address, browser type, browsing history.
Directly from you — proof of bank-transfer payment
Transfer slip, account name / transfer reference, amount and date.
Registration, account creation, identity verification
Pet Owner : Name, email, phone, username/password.
Street Dogs & Cats : Email, username/password.
Issue QR tag and let finders contact the owner
Owner and pet information you provided.
Payment and membership
Name, email, transfer slip / reference, membership tier.
Respond to contact forms and communications
Name, email, phone, message.
4.1. We disclose your personal data to the following parties:
4.1.1. Web hosting / platform providers — to store and operate the website system.
4.1.2. Government authorities or lawful authorities — as required by law.
4.1.3. Registered owners can log and view their own animal’s details in the web app. We do not sell your data, and we only share it where needed to deliver the service or where the law requires.
(Payment is made by direct bank transfer; we do not pass your data to any external payment provider.)
4.2. What is shown when a QR code is scanned
Owned pets: The QR tag exists to help reunite a lost pet with its owner. If your pet goes missing and a finder scans the tag, the contact details you entered are shown so the finder can reach you. We do not publish your information in any public directory or other channel. You choose what details to include — please enter only what you are comfortable showing a finder for the purpose of contacting you.
Street animals: Scanning a street animal’s QR code does not reveal any individual’s personal data.
You may exercise the following rights:
5.1 right to withdraw consent, unless your revocation of consent is restricted by law or contract to your benefits as a Data Subject;
5.2 right to access to the Personal Data and obtain a copy of your Personal Data under the Company care and responsibility as well as to request the disclosure of the acquisition of your Personal Data without your consent;
5.3 right to request for sending or transferring the Personal Data (Right to Data Portability);
5.4 right to object to the collection, use, or disclosure of Personal Data;
5.5 right to request the erasure of Personal Data (Right to be Forgotten);
5.6 right to restrict the use of Personal Data;
5.7 right to request for the correction, up-to-date, complete, and will not incur any misunderstanding of the Personal Data;
5.8 right to be informed in case of modification of this Policy;
5.9 right to complain to authorized officials or authorities as prescribed by the PDPA.
You may exercise these rights by contacting us (§9). You also have the right to lodge a complaint with the Personal Data Protection Committee.
Because pet owner membership is a one-time payment with lifetime validity, we retain your personal data for the lifetime of your membership and for as long as your QR tag remains in use, so that we can provide the service to you on an ongoing basis.
For contributor accounts, we retain your email address and username for as long as your account remains active. If you request deletion of your contributor account, we will delete your email address, username, and the records of any street animals registered under that account.
The name and postal address, We receive from you for the QR issue would be only for one time usage, and they will not be kept once the QR code tags are issued.
We will delete or destroy your personal data upon your request as the data owner. You may exercise your right to erasure under §5 by contacting us (§9).
We maintain appropriate technical and organizational measures to protect your personal data against loss, unauthorized access, destruction, use, alteration, or disclosure, preserving the confidentiality, integrity, and availability of personal data, and we review these measures and this Notice at appropriate intervals.
We may amend this Notice as we see fit and will notify you via our website, with the latest version date shown at the end. Continued use of the service after the amended Notice is posted constitutes acknowledgment of the changes.
For questions about this Notice or to exercise your rights, contact the Data Controller: – Name: We Are Scan Me – Contact: via our contact form at https://www.wearescanme.com/owners/
Effective date: 18 June 2026
Opt in: When you register a pet, sign up for a Street Dogs & Cats Account, or subscribe to updates, you actively choose to share your information with us — for example by ticking a consent box or completing a registration form. We only collect what we need to run the service: recovering lost pets, coordinating care, and keeping health and vaccination records. We’ll tell you what each piece of information is for before you give it.
Opt out: You can withdraw your consent at any time. That means you can stop receiving messages from us, ask us to correct or delete your information, or ask us to stop processing your data and close your account. To do any of these, contact us through wearescanme.com, and we’ll action it as soon as we reasonably can. Withdrawing consent won’t affect anything we lawfully did with your data beforehand. In a few cases we may need to keep limited records — for example an animal’s medical history for its ongoing welfare — and we’ll explain if that applies to you.
We take reasonable steps to protect your information from unauthorised access, loss or misuse — including [secure hosting, access controls, and encryption where appropriate]. No online service can promise it will never be breached, but we work to keep that risk low.
If a security incident does affect your personal data, we will act quickly to contain it and assess what happened, notify Thailand’s Personal Data Protection Committee (PDPC) where the law requires (normally within 72 hours of becoming aware, where feasible), and tell you directly if the incident is likely to put your rights or safety at high risk — along with what you can do about it.
