Privacy Policy — RAVEE STUDIO

Last updated: October 5, 2026

1. Introduction

This Privacy Policy explains how RAVEE STUDIO ("RAVEE STUDIO", "we", "us", or "our") collects, uses, discloses, and protects personal information when you visit this website, browse products, make a purchase, or contact us. RAVEE STUDIO is operated as a one-person digital studio based in Thailand.

This policy is intended to reflect the requirements of Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA") and, where it applies to you, the EU and UK General Data Protection Regulation ("GDPR").

2. Who Is Responsible for Your Data

The data controller responsible for your personal data is:

Controller: Raveewan Srikhum, trading as RAVEE STUDIO
Address: Salinsiri Apartment, Chalongkrung Road, Lamplatiew, Ladkrabang, Bangkok 10520, Thailand
Privacy contact: support@raveestudio.com, or the Contact form with the "Privacy request" subject

3. Information We Collect

We collect information directly from you and, to a limited extent, automatically as you use the site:

Order information — your name, email address, billing country (and, where required for accurate tax calculation, state/province and postal code), the products purchased, license type selected, and a payment reference from our payment processor. We never see or store your full card number.
Account-free access information — RAVEE STUDIO does not use passwords. To access My Library, we send a one-time 6-digit code to your email address.
Contact and support information — anything you submit through the Contact form: your name, email, order reference, the product involved, your message, and any attachments you choose to add.
License Certificate details — if you buy an Extra Teacher License, the teacher's name, school, and optional message you enter for the License Certificate, plus the product's grade levels.
Review information — if you write a product review, we collect the name you provide, your star rating, your comment, any later update you add, and up to three optional photos (with location and other hidden data removed). We also store your email address and order with the review to confirm you own the product; these are never shown publicly.
Marketing information — if you sign up for a free resource or opt in to email updates, we collect your email address for that purpose only.
Technical and security information — your IP address and basic browser signals, used by our hosting provider and bot check (see Section 8) to deliver the site, limit abuse, and keep sign-in and orders safe. We don't run analytics on this site at the moment; if we add an analytics tool later, it will only run after you allow it in the cookie banner, and this policy will be updated first.

4. How We Use Your Information

We use the information above to: process and deliver your order; provide access to My Library and your purchased files; respond to support and contact requests; send receipts, download links, and product update notices; publish and manage reviews; send marketing email if you've opted in (with an unsubscribe link on every message); calculate applicable tax; detect and prevent fraud or misuse; and keep the site secure and working well.

5. Legal Bases for Processing

We only process personal data when the law allows it. Depending on the purpose, we rely on:

Performance of a contract — to process your order, deliver your files, provide My Library access, and handle replacements.
Legal obligation — to keep order, payment, and tax records required by accounting and tax law.
Legitimate interests — to answer your messages, publish reviews you submit, keep the site secure, and prevent fraud, including the automated bot check described in Section 8, where these interests are not overridden by your rights.
Consent — for marketing email, and for analytics cookies where the law requires consent. You can withdraw consent at any time, without affecting processing that took place before you withdrew it.

6. Payment Processing

Payments are processed by Stripe. You enter your payment details directly on Stripe's secure payment page; they are never sent to or stored on RAVEE STUDIO's own systems. Where tax applies, Stripe also calculates it. Stripe's own privacy practices apply to the payment information you give it directly.

7. Cookies and Similar Technologies

This website uses a small amount of browser storage and cookies that it needs to work: your cart and cookie choice are kept in your browser, and signing in to My Library sets a secure sign-in cookie that lasts 7 days. Our bot check (Cloudflare Turnstile) may also use similar technology to tell people from automated traffic. We don't use analytics or advertising cookies at the moment. If we add analytics later, it will only run after you allow it in the cookie banner, and you can change your choice at any time with "Cookie settings" in the footer. You can also control cookies through your browser settings; blocking them may affect how parts of the site work.

8. Service Providers

We share information with a small number of service providers who help us run RAVEE STUDIO, and only to the extent needed for them to provide their service:

Stripe — payment processing and tax calculation.
Cloudflare — website hosting, file storage and delivery, and security. We use Cloudflare Turnstile to protect My Library sign-in, free orders, and the Contact form from bots; it checks browser signals and your IP address, and most visitors never see it.
Resend — sending transactional email (receipts, download access, support replies) and, where you've opted in, marketing email.
Anthropic (Claude) — an AI assistant we use to help draft replies to messages sent through our Contact form, and to help write product and page text. For support drafts it sees your first name, your message (including anything you write in it), the names of any attached files, and the order or product it refers to (items, licenses, amount, and date); we don't give it your email address or card details. Every reply is reviewed and sent by us; the AI never contacts you.

We do not sell your personal information to anyone.

9. Data Retention

We keep different types of information for different lengths of time, based on what it's needed for:

Order, payment, tax, and account-related records — for as long as accounting rules, tax law, or a dispute require us to keep them.
Analytics data (only if we add analytics in the future and you allow it) — up to 12 months, after which it's kept only in an aggregated, non-identifying form.
Contact messages and their attachments — deleted or anonymized after 24 months.
Product reviews and their photos — while the review is published, or until you ask us to delete it.
Marketing email addresses — kept until you unsubscribe.
Security logs — kept only as long as needed for security purposes.

10. Children's Privacy

RAVEE STUDIO's products are designed for use by teachers, parents, and other adults, including for use with children under adult supervision. We do not knowingly collect personal information directly from children, and buyers are expected to be adults.

11. Your Rights and Privacy Requests

Under the PDPA and, where it applies, the GDPR, you have the right to:

Access the personal data we hold about you and receive a copy of it;
Correct data that is inaccurate or incomplete;
Delete your data, or have it anonymized, where we no longer have a lawful reason to keep it;
Restrict how we use your data in certain circumstances, for example while a correction request is being checked;
Object to processing based on our legitimate interests, and to direct marketing at any time;
Data portability — receive the data you gave us in a structured, commonly used, machine-readable format, or ask us to send it to another provider where technically feasible;
Withdraw consent at any time, where we rely on consent (for example, marketing email).

To make a request, submit the Contact form with the "Privacy request" subject, or email the privacy contact listed in Section 2. We may ask you to confirm your identity before acting on a request, and we will respond within 30 days. We do not charge a fee for reasonable requests. Some records — such as those needed for tax, accounting, or dispute purposes — may need to be retained even after a deletion request, as explained in our Customer Data Policy. At this time, RAVEE STUDIO does not offer self-service account or data controls; all requests go through Contact.

12. Complaints

If you are unhappy with how we have handled your personal data, please contact us first so we can try to put it right. You also have the right to lodge a complaint with a data protection authority:

In Thailand: the Personal Data Protection Committee (PDPC), Office of the Personal Data Protection Committee, www.pdpc.or.th.
In the EU, EEA, or UK: the data protection supervisory authority in the country where you live or work, or where you believe the issue occurred.

13. International Data Transfers

RAVEE STUDIO is based in Thailand, and our service providers operate internationally. Your personal data may therefore be transferred to, stored in, or processed in the following countries:

Stripe — United States and Ireland (European Union).
Cloudflare — United States, with content served from its global network of data centers, including locations near you.
Resend — United States.
Anthropic — United States.

Some of these countries may not provide the same level of data protection as Thailand or the country where you live. Where required by the PDPA or the GDPR, we rely on appropriate safeguards for these transfers, such as the providers' standard contractual clauses or equivalent data protection agreements, and only transfer the data each provider needs to perform its service.

14. Changes to This Policy

We may update this Privacy Policy from time to time, for example as the store's features change. The "Last updated" date at the top of this page will reflect the most recent revision.

15. Contact Us

Questions about this policy or how your data is handled can be sent to the privacy contact in Section 2, or through our Contact page.