Privacy
Policy.

1. Who We Are

This Privacy Policy is issued by Phawadon Nasareerut, the data controller for The Soul Atelier. We determine how and why your personal data is processed.

2. What Data We Collect

• Account data: name, email address, login credentials
• Usage data: interactions with the service, feature usage, session duration
• Device data: IP address, browser type, device identifiers
• Support data: messages and communications sent to our support team
• Payment data: processed by Stripe — we do not store card details

3. Why We Collect It (Legal Basis)

• Contract performance: to provide the service, manage your account, and process subscriptions
• Legitimate interests: to improve the service, ensure security, and prevent fraud
• Consent: for marketing communications and non-essential cookies
• Legal obligation: to comply with applicable laws and regulations

4. How We Share Data

We do not sell your personal data. We share it only with:

• Service providers: hosting, analytics, and support tooling
• Stripe: for payment processing, subscription management, tax compliance, fraud protection, and invoicing
• Professional advisers: legal and accounting where necessary
• Authorities: where required by law or to protect our rights

5. Data Retention

We retain your personal data for as long as necessary to provide the service and comply with legal obligations. When data is no longer needed, we securely delete or anonymize it. Account data is retained while your account is active and for a reasonable period afterward for legal and operational purposes.

6. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Request erasure of your data ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

To exercise these rights, contact us via our support page. We aim to respond within one month.

7. Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), access controls, and regular security reviews. No system is completely secure, and we cannot guarantee absolute protection.

8. Cookies

We use cookies and similar technologies to operate the service, analyze usage, and remember your preferences. Essential cookies are necessary for the service to function. Analytics and marketing cookies are used only with your consent. You can manage cookie preferences through your browser settings.

9. International Transfers

Your data may be processed in countries outside your own. When we transfer data internationally, we use appropriate safeguards such as Standard Contractual Clauses or adequacy decisions to ensure your data remains protected.

10. Children

The Soul Atelier is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe we have inadvertently collected such data, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or through the service. The effective date is shown at the top of this page.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please reach out through our support page.