Privacy Policy
Last updated: 29 October 2026
This policy explains how PAYA Nail Services (“PAYA”, “we”, “us”) collects, uses and protects personal data when you visit payanails.com, contact us or book an appointment. It also covers the internal reporting tool PAYA uses with Google APIs (section 8). We process personal data in accordance with Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”).
1. Who we are
PAYA Nail Services (data controller)
Ground Floor, Studio F, Sukhumvit Hotel, 22/3-4 Sukhumvit 21 Rd, Khlong Toei Nuea, Watthana, Bangkok 10110, Thailand
Phone / WhatsApp: +66 61 160 8563
LINE: @526xrgqf
We have not appointed a Data Protection Officer. For any privacy question, contact us directly using the details above.
2. Personal data we collect
When you contact us or book
You can contact us by WhatsApp, LINE, phone, Facebook or in person at the salon. We receive the information you send us, such as your name or display name, phone number or messaging account, your messages, and appointment details (service, date and time). We need your contact details to confirm and manage a booking; without them we cannot reserve an appointment for you.
If you tell us about allergies, skin sensitivities or other health information relevant to a treatment, we record it only if you explicitly agree, and use it only to provide the service safely.
When you visit our website
- Technical data. Our web server and our network provider Cloudflare process technical data such as your IP address, browser and device type, the pages you request and the time of the request, to deliver the website and protect it against abuse.
- Error reports. If a script or loading error occurs on our homepage, your browser automatically sends our server a short technical report containing the error message and technical details (file, line, stack trace or the address of a file that failed to load), the full address of the page (including any parameters in it, such as ad-click identifiers), your browser’s user-agent string and window size. Our server stores these reports together with your IP address.
- Google Ads measurement. Our homepage loads the Google tag (gtag.js) for every visitor to measure the results of our Google Ads. The tag sends Google a record of each visit to the homepage, and a conversion event when you tap a WhatsApp or LINE button. Google uses this to tell us how many enquiries came from people who clicked our ads. The tag may set cookies on payanails.com (for example
_gcl_au, and_gcl_awwhen you arrive from an ad), Google may use its own cookies or similar technologies, and Google receives data such as your IP address, device information, the pages you visit and ad-click identifiers. Google may also use this data to show our ads to people who have visited our website (remarketing). Learn more in how Google uses information from sites that use its services and the Google Privacy Policy. - Website statistics (Google Analytics). Our homepage also uses Google Analytics 4 to count visits and taps on our WhatsApp, LINE, phone and directions buttons, and to see where visitors come from (for example Google Search, Google Maps, our ads or social media). Google Analytics may set cookies such as
_ga, and Google receives data such as your IP address, device and browser information and the pages you view. We use these statistics only in aggregate, to improve our website and our services, and we have turned off Google Analytics’ optional data-sharing settings. - Fonts. Our pages load fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). To deliver them, your browser connects to Google’s servers, which receive your IP address and browser information. See the Google Fonts privacy FAQ.
- Storage on your device. The website saves your language choice (English or Thai) and a copy of our latest Google rating in your browser’s local storage. This information stays on your device and is not sent to us.
We do not ask for payment card details on this website, and the website has no contact form and no customer accounts.
3. How we use your data and why
- To answer you and manage your appointments: on the contractual basis, because it is necessary to take steps at your request before providing a service and to provide the service to you.
- To provide treatments safely: health information (sensitive data under Section 26 of the PDPA) is used only with your explicit consent. You may withdraw this consent at any time; we may then be unable to perform some treatments safely.
- To run, secure and improve our website, including error reports: based on our legitimate interests.
- To measure the performance of our advertising: based on our legitimate interests. You can refuse advertising cookies at any time as described in section 7.
- To comply with the law, for example accounting obligations or requests from authorities.
We do not sell your personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.
4. Who we share data with
We share personal data only with service providers that help us run our business, and only as needed:
- the messaging and social platforms you choose to contact us on: WhatsApp, Facebook (Meta) and LINE, under their own privacy policies;
- Google (Google Ads, Google Fonts, Google Maps and Google Business Profile);
- Cloudflare (website delivery and security) and our hosting provider.
We may also disclose data when required by law or to protect our rights. Some of these providers (such as Google, Meta, LINE and Cloudflare) process data outside Thailand, including in countries whose data protection standards may not be equivalent to the PDPA. These transfers take place because they are necessary to provide the service you requested, or under the safeguards those providers apply (such as standard contractual clauses or binding corporate rules), as permitted by Sections 28 and 29 of the PDPA.
5. How long we keep data
- Booking conversations and appointment records: for as long as you are our customer and as needed to answer later questions about a service.
- Web server access logs: deleted automatically after 14 days.
- Error reports: kept only as long as needed to find and fix technical problems.
- Data from Google APIs: see section 8.
We keep data longer only when the law requires it. Data is then deleted, destroyed or anonymised.
6. Your rights
Under the PDPA you have the right to:
- access your personal data and obtain a copy;
- ask us to correct inaccurate or incomplete data;
- ask us to delete, destroy or anonymise your data, or to restrict its use;
- object to the collection, use or disclosure of your data, including for marketing;
- receive your data in a commonly used, machine-readable format or have it sent to another controller (data portability);
- withdraw your consent at any time, without affecting processing carried out before the withdrawal;
- lodge a complaint with the Office of the Personal Data Protection Committee (PDPC), Thailand: pdpc.or.th.
To exercise these rights, contact us by WhatsApp, LINE or phone using the details in section 1. We will reply within the time limits set by the PDPA.
7. Cookies and your choices
You can block or delete cookies in your browser settings, and you can manage the ads Google shows you at My Ad Center. Even if you block cookies, you can still use our website and book with us as usual.
8. Google API services
PAYA uses an internal reporting tool, registered with Google under the name “PAYA Nail Services”, to read data from PAYA’s own Google accounts. It is used only by PAYA’s owner and staff; customers and website visitors are never asked to sign in with Google.
Google user data we access
- basic information about the Google Account used to sign in (name and email address), and the access tokens Google issues for it;
- Google Ads: account structure and performance reports of PAYA’s own Google Ads account (campaigns, keywords, search terms, ads, budgets, costs, clicks and conversions);
- Google Search Console: search performance data for payanails.com (search queries, pages, clicks, impressions and positions);
- Google Analytics, if PAYA uses it: aggregated traffic and conversion reports for payanails.com.
How we use it
We use this data only to analyse and manage PAYA’s own advertising and to improve our website. The tool reads data; any change to our Google Ads account is made only after the owner has reviewed and approved it. We do not use this data to advertise to anyone, we do not sell it, and we do not use it to develop, improve or train generalised AI or machine-learning models.
Sharing
We do not share or transfer this data, except with the service providers that help us analyse it for PAYA, namely the AI assistant Claude by Anthropic, used under settings that do not allow this data to be used for model training, or when required by law.
Storage, protection and retention
The data is downloaded over encrypted HTTPS connections to the computer PAYA uses for this analysis. Sign-in credentials are stored only on that computer and are never published or sent by email or chat. Reports are kept only as long as needed to manage our advertising and website, and are then deleted. Access can be revoked at any time at myaccount.google.com/permissions; you can also ask us to delete stored data using the contact details in section 1.
PAYA’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
9. Children
Our website is not directed at children, and we do not knowingly collect personal data from children through it. Bookings for a minor should be made by a parent or guardian.
10. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last updated, and we will announce significant changes on this page.
11. Contact
For any question about this policy or your personal data, contact PAYA Nail Services by WhatsApp or phone at +66 61 160 8563, on LINE at @526xrgqf, or visit us at the salon.
← Back to PAYA Nail Services