Privacy Policy

1. Data controller

Dion Studio is operated by Disorn Jangsamsee, an individual based in Thailand.

Email: contact@dion-studio.com

2. Data collected

• Account: email, name, password (stored encrypted) and sign-up date. If you sign up with Google, your name and email come from your Google account.
• Orders: products bought or claimed, amount, currency, date and the Stripe payment reference. Card details are never sent to or stored on this website.
• Contact and project briefs: name, email, company, LINE ID or WhatsApp, project details, budget and reference links you enter.
• Technical: device, browser and IP address recorded by the hosting and error monitoring services.
• LINE: messages and your LINE profile name when you contact Dion Studio on LINE.

3. Purposes and legal bases

• Creating and maintaining your account, delivering products, sending order confirmations and providing the services you request (performance of a contract).
• Replying to you, estimating prices and preparing quotations when you send a brief or message (steps taken at your request before entering a contract).
• Preventing fraud, keeping the website secure and fixing errors (legitimate interests).
• Keeping payment records for accounting and tax (legal obligation).
• Dion Studio does not send marketing or newsletter emails unless you have given consent.

If you do not provide required data such as your email, an account cannot be created, products cannot be delivered and Dion Studio cannot reply to you.

4. Who receives your data

Dion Studio does not sell personal data. It is shared only with the service providers needed to run the website:

• Supabase: database and user accounts
• Stripe: payments, card details stay with Stripe
• Vercel: website hosting
• Resend: order confirmations and notification emails
• Cloudflare: domain management and email forwarding
• Google (Gmail, Google Sheets): the inbox used to reply to you and a backup of contact details
• Sentry: website error monitoring
• YouTube (Google): portfolio thumbnails and video playback, in privacy-enhanced mode (youtube-nocookie.com), loaded only when you press play
• Adobe Fonts: website fonts, which receives your IP address and the page viewed

LINE runs its own chat service, so data sent through LINE is also covered by LINE's policies.

Data may also be disclosed when required by law or by an authority with legal power.

5. International transfers

Some of these providers store or process data on servers outside Thailand, for example in the United States, Singapore or Japan. Transfers are limited to what is needed to provide the service you requested, and these providers apply internationally recognised data protection safeguards.

6. Retention

• Account data: while your account is active, and deleted within 30 days of a deletion request.
• Order and payment records: 5 years from the purchase date for accounting and tax, even if the account is deleted.
• Briefs and contact messages: 2 years from the most recent contact.
• Technical data and error logs: for the period set by each provider, generally no longer than 90 days.

7. Cookies and browser storage

The website only uses the browser storage needed to keep you signed in and to make the site work. There are no advertising cookies or marketing trackers. Portfolio videos play through YouTube in privacy-enhanced mode and load only when you press play; once playing, YouTube may store data in your browser under Google's policies.

8. Your rights

• Access your data and receive a copy
• Correct inaccurate data
• Have your data deleted or anonymised
• Restrict or object to the use of your data
• Receive your data in a portable format
• Withdraw consent at any time where consent was given
• Complain to the Personal Data Protection Committee

Send requests to contact@dion-studio.com from the email on your account. Dion Studio will reply within 30 days.

9. Security

Data is stored in encrypted systems with restricted access, and product files are only available to accounts entitled to them. If a data breach is likely to put your rights at risk, Dion Studio will notify the relevant authority and you as required by law.

10. Changes to this policy

Dion Studio may update this policy from time to time. The effective date is shown at the top of this page. The full terms of use are in the Terms & Conditions.