Privacy Notice  ·  ประกาศความเป็นส่วนตัว

The HydroNeo Group (“HydroNeo”, “we”, “us” or “our”) consists of HydroNeo Aquaculture Technologies Pte. Ltd. (Singapore) and its affiliated and subsidiary companies, including HydroNeo (Thailand) Co., Ltd. and PT PMA HydroNeo Teknologi Indonesia, and other HydroNeo entities operating from time to time.

We are committed to protecting personal data and respecting privacy rights. This Privacy Notice is prepared in accordance with applicable data protection laws including the Thailand Personal Data Protection Act B.E. 2562 (PDPA), the Indonesian Personal Data Protection Law (UU No. 27/2022, PDPL), Singapore's Personal Data Protection Act 2012 (PDPA SG), and the EU General Data Protection Regulation (GDPR) where applicable.

This Privacy Notice applies to all personal data collected through our IoT hardware devices (including the Mini Controller and connected sensors), the FarmOS application, our websites, and all related services and communications.

This Privacy Notice should be read together with HydroNeo's Terms & Conditions and applicable country addendums, available at www.hydroneo.net/legal. In the event of any conflict between this Privacy Notice and the Terms & Conditions on a data protection matter, this Privacy Notice shall prevail.

Depending on how you interact with the HydroNeo Group and which Services you use, your personal data may be processed by one or more of the following entities acting as data controllers:

(a) HydroNeo Aquaculture Technologies Pte. Ltd. — Singapore
Registered address: 160 Robinson Road #14-04, Singapore 068914

Acts as primary data controller for: the HydroNeo mobile applications distributed via the Apple App Store and Google Play Store; digital platforms, cloud systems, analytics, and user accounts; and international customers using HydroNeo's digital Services.

(b) HydroNeo (Thailand) Co., Ltd. — Thailand
Registered address: 141/8 Skulthai Surawong Tower, 9th Floor, Unit P9, Surawong Road, Suriyawong, Bangrak, Bangkok 10500
DBD Registration No.: 0105563083712

Acts as data controller for: customers, users, and business partners located in Thailand; local sales, operations, and support services; and compliance with the Thailand PDPA.

(c) PT PMA HydroNeo Teknologi Indonesia — Indonesia
Registered address: Surabaya, East Java, Republic of Indonesia
NIB: tbd

Acts as data controller for: customers, users, and business partners located in Indonesia; local sales, operations, and support services; and compliance with the Indonesian PDPL.

(d) Role Under GDPR. For customers in the EEA, UK, or Switzerland, HydroNeo may act as data controller or data processor depending on the Services provided. Where HydroNeo processes data on behalf of a customer, a separate Data Processing Agreement (DPA) under Article 28 GDPR applies.

Group privacy contact: HydroNeo Aquaculture Technologies Pte. Ltd.
Email: [email protected]
Website: www.hydroneo.net/legal
Thailand contact: HydroNeo (Thailand) Co., Ltd. — [email protected]
Indonesia contact: PT PMA HydroNeo Teknologi Indonesia — [email protected]
Data Protection Officer: [email protected]

We collect the following categories of personal data, depending on how you use our Services:

(a) Account and identity data. Name, surname, date of birth, age, occupation, work position, employer, nationality, identification document details (ID card, passport, tax identification number), and signature. This includes user account credentials generated through the HydroNeo applications and platforms.

(b) Contact information. Address, email address, telephone number, social media handles, and contact preferences. Also includes contact persons provided to us by business customers.

(c) Farm and aquaculture operational data. This is the primary data generated through use of our Products and Services. It includes: water quality sensor readings (dissolved oxygen, pH, temperature, salinity, ammonia); pond parameters and stocking records; feeding schedules and biomass estimates; harvest data and production records; automation settings and control commands; alert history and threshold configurations; and farm management notes entered into FarmOS.

(d) Device and technical data. Hardware device identifiers (device ID, serial number); firmware version and update history; connectivity logs (connection timestamps, data sync frequency, network type); device status and diagnostic data; and IoT sensor calibration records.

(e) Location data. Farm geographic coordinates (GPS location) provided during device installation or account setup. Approximate location derived from IP address for website visitors. We do not collect real-time tracking location data beyond what is necessary for farm mapping and regional compliance purposes.

(f) Financial and transaction data. Payment details, invoice records, transaction history, subscription plan information, billing address, and payment method type. Full payment card numbers are processed by our payment service providers and are not stored by HydroNeo.

(g) Usage and platform data. Browser type and version, IP address, pages and features accessed, time and date of access, time spent on the platform, menu interactions, log files, cookies, device model, and operating system.

(h) Communications data. Records of support requests, customer service interactions, email correspondence, and feedback submitted to HydroNeo.

(i) Chat and conversation data. Messages sent in the pond chat feature, including questions and responses involving the AI Pond Assistant; user identifiers associated with each message; timestamps; and, where consent has been given, anonymised interaction data used to improve the Pond Assistant. Chat messages are visible to all users within the same Customer organisation who have access to the relevant pond or group chat.

(j) Sensitive personal data. We do not intentionally collect sensitive personal data (including racial or ethnic origin, political opinions, religious beliefs, health data, genetic data, biometric data, or criminal records). If such data is inadvertently submitted, we will delete it promptly. We will only process sensitive personal data where required by law or with your explicit consent.

We use cookies and similar tracking technologies on our websites and applications to support core functionality, remember preferences, and improve our Services.

Essential cookies: Required for the website and application to function. Applied automatically and cannot be disabled without affecting core functionality.

Non-essential cookies: Analytics, performance, and preference cookies. Only applied after obtaining your consent.

You can manage or withdraw cookie consent at any time through your browser settings or our in-app cookie preferences.

We process personal data only where we have a valid legal basis. The table below sets out our main processing purposes and the legal basis for each:

In addition to personal data, we collect non-personal operational data generated by our IoT devices and platform — including aggregated sensor readings, anonymised farm performance benchmarks, platform usage statistics, and device performance metrics.

We use non-personal operational data for: improving sensor accuracy and device performance; developing aquaculture benchmarks; training HydroNeo's own internal analytical models; and product development and research.

AI training restriction. Customer data may not be used to train, fine-tune, or improve any third-party artificial intelligence or machine learning model without the Customer's explicit written consent. This prohibition applies to all third-party integrations and API connections and cannot be overridden by a third-party integration's own terms. For the avoidance of doubt, this prohibition does not prevent HydroNeo from using anonymised non-personal operational data to train and improve its own internal AI and analytical models, as described in Section 6, subject to the Customer's opt-out right. Use of chat conversation data to improve the AI Pond Assistant is subject to separate individual opt-in consent, as described in Section 6.

We do not sell your personal data. We may share personal data with the following categories of recipients:

(a) HydroNeo Group entities. We share data within the HydroNeo Group for the purposes described in this Notice, including between our Singapore, Thailand, and Indonesia entities. Intra-group transfers are subject to internal data sharing arrangements providing equivalent protections.

(b) Technology and infrastructure service providers. Our primary cloud infrastructure provider is Amazon Web Services (AWS). We also use third-party service providers for payment processing, email delivery, customer support, product analytics and session recording (including LogRocket), device management, and data storage. All service providers are bound by data processing agreements and process data only in accordance with our instructions.

(c) Authorised resellers and distributors. Where you purchase through an authorised reseller, we may share account setup data necessary to provision your account. Resellers do not receive ongoing access to your farm operational data or sensor data.

(d) Business transfers. In the event of a merger, acquisition, restructuring, or sale of our business, personal data may be transferred to the acquiring or successor entity, subject to equivalent privacy protections.

(e) Legal and regulatory disclosure. We may disclose personal data to courts, regulators, law enforcement, or government agencies where required by applicable law, court order, or legal process.

We do not share data with advertisers. HydroNeo does not share personal data with advertisers, advertising networks, or data brokers for marketing purposes. Our platforms are ad-free.

Your personal data may be transferred to, stored in, or processed in countries outside your country of residence, including Singapore, Thailand, Indonesia, and countries where AWS operates data centres.

We implement appropriate safeguards for all cross-border transfers, including: intra-group data transfer agreements; standard contractual clauses for third-party service providers; and compliance with PDPA, PDPL, and GDPR transfer requirements.

We implement appropriate technical and organisational security measures including encryption in transit (TLS) and at rest, access controls, regular security assessments, and staff training.

Security breach notification: In the event of a personal data breach posing risk to data subjects, HydroNeo will endeavour to notify affected individuals within 72 hours of discovery, and no later than the timeframe required by applicable law. We will notify the relevant supervisory authority (Thai PDPC or Indonesian KOMINFO) as required.

If you become aware of any actual or suspected security incident affecting your HydroNeo account or devices, please notify us immediately at [email protected].

We retain personal data only for as long as necessary. The following retention periods apply:

When a paid Subscription lapses to Free Tier, account and farm data remains accessible for the duration of Free Tier access, subject to Free Tier data limitations.

When an account is closed, the Customer's right to access cloud-hosted data ceases. HydroNeo retains data for a 90-day wind-down period during which the Customer may request a data export. After 90 days, personal data is deleted in accordance with the retention schedule.

Where a business Customer submits personal data of its employees or workers through our Services, the following roles apply:

Customer as data controller: The Customer controls the personal data of its employees and workers and is responsible for having a valid legal basis to share it with HydroNeo.

HydroNeo as data processor: HydroNeo processes such data only in accordance with the Customer's instructions.

HydroNeo as data controller: HydroNeo controls account holder data, billing data, and data generated by its own platform operations.

Where a DPA is required, please contact [email protected].

You have the following rights in respect of your personal data, subject to applicable law:

To exercise rights: [email protected] | We respond within 30 days (extendable to 60 days)

Thailand supervisory authority: Personal Data Protection Committee (PDPC) — pdpc.or.th

Indonesia supervisory authority: Ministry of Communication and Information Technology (KOMINFO) — kominfo.go.id

Your refusal to provide certain personal data may limit your ability to access some or all of our Services. We will inform you at the point of collection if providing specific data is mandatory or optional.

Our Services are not directed at individuals under 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, contact us at [email protected].

We may update this Privacy Notice from time to time. Where changes are material, we will provide at least 30 days advance notice via the FarmOS application, our website, or direct email. The current version is always available at www.hydroneo.net/legal.

This Privacy Notice is issued in the English language. The Thai translation is provided for convenience. In the event of any inconsistency or conflict between the English and Thai versions, the English version shall prevail and be legally binding.

Group privacy contact: HydroNeo Aquaculture Technologies Pte. Ltd.
Email: [email protected]
Data Protection Officer: [email protected]
Website: www.hydroneo.net/legal
Postal address: 160 Robinson Road #14-04, Singapore 068914
Thailand enquiries: [email protected]