Privacy Policy

We collect the following types of information from our users:

• Personal Information: Your name, email address, phone number, physical address, and payment information.
• Usage Data: IP address, browser type, pages visited, and cookies.
• Profile Photo: Images you upload as your account profile picture, stored on Cloudflare R2.
• Booking Details: Event date, location, special notes, and package details you provide when making an online booking.

We collect personal information through the following means:

• Contact Forms: When you fill out a form to inquire about our services.
• Account Registration: When you create an account with us.
• Google Sign-In: If you log in via Google, we receive your name and email address from Google.
• Cookies and Tracking: Through cookies and similar tracking technologies to monitor site activity.
• Infrastructure: Cloudflare Workers automatically logs IP addresses and basic HTTP data with every web request.

We use the collected information for the following purposes:

• To Contact You: To communicate about our services, respond to inquiries, and provide customer support.
• To Send Newsletters: If you have subscribed, we will use your email to send updates and promotional content.
• To Make Offers: We may send special offers and promotions related to our services.
• To Analyze Site Usage: To understand how our website is being used and improve our services.
• Facebook Pixel: We use Facebook Pixel to collect data about user interactions for analytics and targeted advertising.
• Google AdSense: We use Google AdSense to display ads on our blog. AdSense may collect information about your activity to show relevant ads.

We may share user data with the following third parties:

• Facebook: Through Facebook Pixel, data may be shared with Facebook for ad targeting on their platform.
• Google: Google AdSense collects data from visitors for advertising purposes.
• Agoda: If you click an Agoda affiliate link on our website, Agoda may track your activity on their platform.
• Stripe: Online payment data is processed directly by Stripe. Win Wedding never stores your card details.
• Cloudflare and Supabase: Your data is stored and processed through these providers, each with their own privacy policies.
• Law Enforcement: Win Wedding may disclose personal data, including IP addresses, to Thai authorities if required by a court order or official legal request.

We use cookies, web beacons, and similar technologies provided by third parties including Facebook, Google, and Agoda to collect information about user behavior. This information is used to improve the user experience and to serve relevant advertisements and affiliate content.

Your IP address is automatically logged by Cloudflare Workers whenever you visit our website. This data is used for system security, protection against cyberattacks, and monitoring for unusual activity. IP data is not sold or shared for commercial purposes. However, Win Wedding may disclose this information to law enforcement authorities if required by a legal order in Thailand.

We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, or alteration. These measures include:

• Data Encryption: Sensitive data is encrypted in transit using SSL.
• Access Controls: Only authorized personnel have access to personal information.
• Regular Security Audits: We conduct regular reviews to identify and address potential vulnerabilities.

We retain your personal data for as long as necessary for the purposes described in this policy. As a general guide:

• Account and booking data: For as long as your account remains active.
• Profile photos: For as long as your account remains active.
• Contact inquiry data: Up to 1 year.

When you delete your account or request data deletion, we will process your request within a reasonable timeframe, unless we are legally required to retain the data.

You have the following rights regarding your personal information, in line with Thailand's Personal Data Protection Act B.E. 2562 (PDPA):

• Access: You can request a copy of the personal data we hold about you.
• Modification: You can request that we correct any inaccuracies in your data.
• Deletion: You can request that we delete your personal data, subject to certain conditions.
• Opt-Out: You may unsubscribe from marketing emails at any time.
• Complaint: If you believe your data has been mishandled, you have the right to lodge a complaint with Thailand's Personal Data Protection Committee (PDPC).

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

We take the security and privacy of all user data seriously. Information collected is used solely for the purposes of Win Wedding Studio and SM Makeup, as both businesses are under the same ownership.