Sandbox · Test payments only. No real charges.
templyTH
EN/ TH
Temply TH

Privacy Policy

Effective 12 October 2026

We collect only what we need to run your account, process orders, and deliver files. We do not sell data, use advertising cookies, or track you for marketing.

1. Data controller

  • Temply TH (templyth.com) is operated by an individual in Thailand, who is the data controller under the Thai Personal Data Protection Act B.E. 2562 (PDPA).
  • Privacy contact: support@templyth.com

2. Data we collect

  • Account data: email address and password (stored as a one-way hash; we never see your password).
  • Order data: items purchased, prices, payment status, timestamps, and payment reference IDs.
  • Payment data: PromptPay payments are processed by Omise (Opn Payments). We do not receive or store your bank account or card details.
  • Technical data: IP address and request details in our hosting provider's logs, for security and troubleshooting.

3. Purposes and legal bases

  • To create and maintain your account, verify your email, and sign you in (contract).
  • To take payment, deliver files, and let you download them again (contract).
  • To prevent fraud and abuse and keep the service secure (legitimate interests).
  • To keep transaction records required by Thai tax and accounting law (legal obligation).
  • We do not use your data for advertising or marketing unless we ask for separate consent in the future.

4. Cookies and browser storage

  • We use only the cookies needed to keep you signed in. There are no analytics or advertising cookies.
  • Your shopping bag is kept in your browser (localStorage) and is not sent to us until you check out.

5. Service providers

  • Supabase: database, accounts, confirmation emails, and file storage (servers in Singapore).
  • Vercel: website hosting (processing in Singapore, served through a global network).
  • Omise (Opn Payments): PromptPay payments (Thailand).
  • Data is transferred abroad only as needed to provide the service, to providers that apply recognised data-protection safeguards.

6. Retention

  • Account data is kept while your account is active and deleted within 30 days of a deletion request.
  • Order and payment records are kept for at least 5 years as required by tax and accounting law, even after account deletion.
  • Hosting logs are kept according to the provider's automatic deletion schedule.

7. Your rights

  • Under the PDPA you may request access to and a copy of your data, correction, deletion, restriction, objection, data portability, and withdrawal of consent.
  • Send requests to support@templyth.com from the email address on your account. We respond within 30 days.
  • You may also complain to the Personal Data Protection Committee (PDPC) of Thailand.

8. Security

  • All connections use HTTPS. Product files are stored privately and delivered through short-lived links to entitled buyers only.
  • If a data breach puts you at risk, we will notify you and the authorities as the law requires.

9. Changes

We may update this policy and will show the new effective date above. We will announce significant changes by email or on the website.