Privacy policy

This policy explains what vayooem.com collects from visitors, what it is used for, how long it is kept, and how you can exercise your rights.

Effective from 7 August 2026

This is an English translation provided for convenience. The Thai version at vayooem.com/privacy-policy/ is the authoritative text.

1. Data controller

The data controller for this website is:

VAYO Products Co., Ltd.
78/6-7 Moo 8, Hua Toei Road, Tha It, Pak Kret, Nonthaburi 11120, Thailand
Telephone +66 2 116 5660 (Monday–Friday, 9.00–18.00)
LINE @vayooem

This policy applies to the website vayooem.com only. It does not cover third-party websites or applications you reach by clicking a link from our site.

2. What this website collects

It is quicker to start with what this site does not do:

There is no online form to fill in. All enquiries reach us by telephone or LINE.
There is no membership or login system.
No payments are taken through the website, so no card or bank account details are stored.
There are no advertising cookies, no remarketing, and no tracking pixels from any social platform.
We do not sell, rent or exchange visitor data with third parties for marketing.

2.1 Website usage data (collected only with your consent)

We use Google Analytics 4 to see which pages are useful to people looking for a cosmetics manufacturer. The data is aggregated statistics rather than information that identifies you directly, and includes:

Which pages are opened, in what order, and how long is spent on each.
How you arrived — from a search, from a link on another site, or by typing the address directly.
Device type, operating system, browser and approximate screen size.
Approximate location at country, province or city level, estimated from the IP address.
A random visitor identifier stored in a cookie, used to distinguish a returning visitor from a new one.

We have the anonymize_ip setting enabled, and analytics cookies are disabled by default until you accept them. If you decline, Google Analytics does not run and no analytics cookies are set at all.

2.2 Information you give us when you contact us

When you call or message us on LINE about manufacturing, the information we receive is whatever you choose to tell us — for example your name or brand name, telephone number, LINE account, the type of product you want to make, the quantity, and your budget. We use it to assess your requirement, prepare a quotation, and carry out the manufacturing work agreed.

Please note that LINE conversations take place on LINE's own systems, which are governed by LINE's own privacy policy. We recommend you do not send sensitive information such as copies of identity documents or health information through chat, unless it is necessary for a contract and we have specifically asked for it.

2.3 Server logs

As with any website, the server hosting this site automatically records page requests, including IP address, date and time, the page requested and the browser type. These logs are necessary for security, for diagnosing technical problems and for preventing misuse. They are not used for marketing and are not linked to Google Analytics data.

3. Legal basis for collection and use

Data	Legal basis
Usage statistics via Google Analytics	Consent, which you may withdraw at any time
Contact details and manufacturing enquiry details	Performance of a contract, or steps taken at your request before entering a contract
Server logs	Legitimate interest in maintaining the security of the system
Accounting and tax records for manufacturing orders	Compliance with applicable law

4. How long we keep data

Google Analytics data — kept for the retention period configured in our Google Analytics account. After that, user-level data is deleted automatically and only aggregated, non-identifying reports remain.
Cookies set by Google Analytics — expire two years after your most recent visit, and you can delete them yourself at any time.
Contact details of enquirers who have not placed an order — kept only as long as necessary to follow up an ongoing conversation.
Data of customers who place orders — kept for the duration of the business relationship, and afterwards for as long as accounting, tax and cosmetics legislation require the records to be retained.

5. Who we disclose data to

We do not sell your data. Disclosure happens only as necessary, and only to service providers working for us:

Google — as the provider of Google Analytics and Google Fonts. See Google's privacy policy.
LINE — when you choose to contact us through our LINE Official Account. See LINE's privacy policy.
Our web hosting provider — which stores the website files and server logs.
Government authorities — only where required by law or under a lawful order.

Google's and LINE's services process data on servers outside Thailand, so using them involves transferring data out of the Kingdom. Both providers maintain data protection measures as set out in their own policies.

6. Your rights under the law

Under Thailand's Personal Data Protection Act B.E. 2562 (2019) you have the following rights:

Right of access — to ask what data we hold about you and to obtain a copy.
Right to rectification — to have inaccurate or out-of-date data corrected.
Right to erasure — to have data deleted or anonymised, where the law permits.
Right to restrict processing — to have use of your data suspended while a matter is being examined.
Right to object — to object to the collection or use of your data in certain circumstances.
Right to withdraw consent — you may withdraw consent for analytics cookies at any time using the Cookie settings button at the foot of every page. Withdrawal does not affect processing already lawfully carried out.
Right to data portability — to receive your data in a machine-readable format where this is feasible.
Right to complain — to complain to the Office of the Personal Data Protection Committee if you believe we have not complied.

7. How to exercise your rights and contact us

Contact us by telephone on +66 2 116 5660, Monday to Friday, 9.00–18.00, through our LINE Official Account, or in writing to the company address in section 1.

For your own protection, we may ask you to verify your identity before acting on a request. We will respond within the period required by law.

8. Cookies

Every cookie this site uses, how long each is stored, and how to change your settings are set out separately in our cookie policy.

9. Data security

This website is served over HTTPS on every page, so data passing between your browser and the server is encrypted. Within the company, access to customer data is limited to staff who need it for their work. No system is one hundred percent secure, however, and we recommend avoiding sending sensitive information through online channels unnecessarily.

10. Children's data

This website is intended for business owners and brand owners. It is not designed to collect data from anyone under 20 years of age. If we find we have received a minor's data without valid consent, we will delete it as soon as we become aware.

11. Changes to this policy

We may update this policy when our services or the law change. The current version is always shown on this page together with its effective date. If a change significantly affects your rights, we will give notice on the website before it takes effect.