Privacy

Who is responsible

Varaporn Consulting Co., Ltd. (company no. 0205568079542), 666/66 Moo 5, Na Kluea, 20150 Bang Lamung, Chonburi, Thailand. Privacy questions: post@varapornconsulting.com. Processing follows the Thai Personal Data Protection Act (PDPA, B.E. 2562).

🔒 Most important: we never store your passport

Passport number, national ID, DUF number, home address and phone number are entered in your own browser. They are used there, locally on your machine, to fill in the forms — and are never sent to us. Our server rejects these fields if anything tries to send them. This also means we cannot retrieve them for you. Close the tab and they must be entered again. That is a deliberate trade-off: we also have nothing to lose in a breach.

What we store

• Your conversation with the assistant and the name you gave — encrypted.
• The summary of your case (type, difficulty, checklist) — encrypted.
• Your email address, if you give it — encrypted.
• Your purchases: amount, time, what was bought, and the files you received.
• Usage statistics: page views and which steps were completed, tied to a random id — not to your name.

Why

To deliver what you bought, to give you your files again later, for accounting (purchases), and to improve the service. We never sell data on, and we do not use it for anything else.

How long

Cases without an account are anonymised automatically after 90 days — the conversation is deleted, name and summary removed. This runs as a scheduled job every night, not by hand. Purchases are kept anonymously as accounting records. With an account, we keep your case until you delete it.

Where the data sits

On a server in Helsinki, Finland (Hetzner). Finland is in the EU and covered by GDPR. This is a transfer out of Thailand, made in order to deliver the service you ordered.

Who else sees anything

• Anthropic (USA) — your conversation is sent there so the assistant can answer.
• Stripe — payment. They receive your email and card details; we never see your card number.
• Google (Gmail) — the emails we send you.
• Meta and Google Ads — only if you say yes in the banner. Say no and nothing is sent. Our own statistics continue either way, but never leave the house.

Your rights

You may at any time ask what we hold about you, ask us to correct it, or ask us to delete everything. You can delete it yourself under "My page", or write to post@varapornconsulting.com. Purchases are kept anonymously because accounting law requires it. You can withdraw consent to ad tracking at any time.

Cookies

We use no tracking cookies without consent. Your browser stores locally: which case you are in, your language choice, and your answer to the consent question. That lives on your machine, not with us.

If something goes wrong

If we discover a security breach that could affect you, we notify the Thai data protection authority within 72 hours, and you directly if the risk is high.