Privacy policy

Data controller

CREATE MEDIA STUDIO COMPANY LIMITED owns and operates Dear-Asia (www.dear-asia.com). Registered address: 74-75 Soi Borommaratchachonnani 39, Taling Chan, Bangkok 10170, Thailand. Company registration no.: 0105527042815.

This policy follows Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”).

What we collect

• Account data: username, email, password (stored encrypted) and your name, if you give it.
• Order data: the plan you bought, price, payment date, order status and your Premium expiry date.
• Payment data: Stripe processes PromptPay payments. We do not store card details or your PromptPay or bank account details. From Stripe we receive only the payment result and a transaction reference.
• Usage data: IP address, browser type, pages visited and cookies (see our Cookie Policy).
• Contact data: your name, phone, email and message when you contact us by email or phone.

Purposes and lawful bases

• To create and manage your account and give you access to Premium content (contract).
• To take payments, issue receipts or tax invoices, and keep accounts (contract and legal obligation).
• To keep the site secure, prevent fraud and keep the site working (legitimate interests).
• To answer messages you send us (legitimate interests).
• Analytics and marketing, only with your consent. None is in use at present.

Retention

• Account data: kept while your account is active and deleted within 90 days after you close it.
• Orders and accounting records: kept for at least 5 years, or longer where Thai tax and accounting law requires.
• Contact messages: 1 year.

Recipients and processors

• Stripe: payment processing.
• Hostinger: website and database hosting.
• Resend: account and order emails.
• ByteArk: video streaming (when you play a video, ByteArk receives your IP address and device and browser information to deliver it).
• Google: only if we add analytics later and you consent.
• Authorities, where the law requires it.

We do not sell your personal data.

Cross-border transfers

Some providers store or process data outside Thailand: Hostinger (website and database servers in Singapore), Resend (email delivery) and Stripe (payments, once Premium sales open). Where they do, we use the safeguards required by PDPA sections 28–29, such as the providers’ data-protection terms.

Your rights

You can ask to see or get a copy of your data. You can also ask us to correct it, delete it, restrict its use, object to its processing or move it to another service. You can withdraw consent at any time. You may also complain to Thailand’s Personal Data Protection Committee (PDPC) Office. We will answer requests within 30 days.

Privacy contact / DPO

Email: dearasia.th@gmail.com

Data Protection Officer: none appointed. Contact us about personal data at dearasia.th@gmail.com.

Changes

We may update this policy. Each update will show its effective date on this page. We will tell you about significant changes by email or on the site.