Privacy policy: tsoundman.com store

Who is responsible

T Sound Man (Thailand) is the controller of the personal data collected through this website. Contact us at the e-mail address at the bottom of this page.

What we collect, why, and for how long

Account: name, e-mail, password (stored as a bcrypt hash that cannot be reversed), page language

Logging in, showing your keys in “My library”, sending order e-mails in your language (contract)

While the account exists; deleted on request

Orders: products, prices, discount code, order time, payment status

Selling the product, issuing licence keys, answering questions (contract); accounting and tax records (legal obligation)

5 years from the order, as Thai accounting and tax law requires

PromptPay transfer slips you upload (may show a name, bank, part of an account number, amount and time)

Confirming payment and preventing a slip from being reused (contract / legitimate interest)

With the order, 5 years

Card payments: the payment result, amount, e-mail and Stripe reference. We never see or store the card number

Confirming payment and issuing the key automatically (contract)

With the order, 5 years

Licences: key, product, machine ID (a one-way value derived from the device) and activation time

Checking the licence, counting computers, letting you release a computer yourself (contract)

For the life of the licence

Support: messages you send by e-mail, LINE or Facebook, and attached pictures

Answering and solving problems (contract / legitimate interest)

Up to 2 years after the case is closed

Visit statistics: pages opened, counted once per visitor per day with a code made from the IP address and browser, hashed with the date (the IP address itself is not stored; the code changes daily)

Knowing which pages are read (legitimate interest)

Daily totals that cannot identify you

Cookies and browser storage

• cps_session — keeps you logged in (necessary)
• lang — remembers your language · cur — remembers the currency for approximate prices
• The cart is kept in your own browser’s localStorage, and a closed update pop-up in sessionStorage
• No advertising cookies, no third-party trackers or analytics; fonts are served from our own site

Who receives data (processors)

• Stripe — card payments. Stripe receives your card details directly, under its own privacy policy
• A Thai slip-verification service (when automatic slip checking is on) — receives the slip image to check it is genuine
• Our e-mail service provider — sends order and licence-key e-mails
• Telegram — notifies the shop’s staff of new orders and slips (order code, amount and your e-mail)
• LINE / Facebook — when you contact us there
• Cloudflare — carries connections to the website (sees your IP address and country)
• YouTube (youtube-nocookie.com) — only when you play a video on a product page
• We do not sell personal data or share it for advertising

International transfers

The shop’s server is in Thailand. Some of the providers above (for example Stripe, Cloudflare and Telegram) may process data outside Thailand, under their contractual safeguards and policies.

Your rights

• Access your data and get a copy, including in a machine-readable format (portability)
• Have inaccurate data corrected
• Have data deleted or anonymised, except what the law requires us to keep (such as sales records)
• Restrict or object to processing based on legitimate interest
• Complain to Thailand’s Personal Data Protection Committee (PDPC), or to the data-protection authority of your country if you are in the EU / UK

Send requests to the e-mail address below; we answer within 30 days. If you delete your account, keys you bought can no longer be managed on the website, but keep working in the programs where they are activated.

Security

Passwords are hashed, every connection uses HTTPS, order and slip pages open only for the order’s owner and the shop’s administrators, and the database is backed up daily on the shop’s own machines.

Changes

If we change how we use personal data in a significant way, we update this page and the date above.