Privacy Policy

When you use the Thai with Nariss website, book a lesson, or purchase a product, we may collect the following information:

• Contact details (name, email address) when you fill out a form, book a consultation, or create an account
• Payment information processed securely by Stripe. We never store your card number on our servers.
• Usage data (pages visited, time on site) through Vercel Web Analytics, only if you allow statistics in the cookie banner. It works without cookies.
• Ad campaign details when you reach us through one of our ads and join the Listening Challenge waitlist: the campaign tags from the link (utm tags), saved with your signup. Meta's click ID is saved too, but only if you choose Accept all.
• Messages you send us through the contact form or email

We use your personal information to:

• Schedule and deliver your lessons
• Process payments and send receipts
• Respond to your questions or requests
• Send lesson reminders or account-related emails (not marketing, unless you opt in)
• Improve the website based on anonymous usage patterns
• See which of our ads bring people to the waitlist, using the campaign tags in the link (and Meta's measurement only with your consent, section 5)

We do not sell or rent your personal data. The only data we share for advertising goes to Meta, as described in section 5, and only if you choose Accept all.

Thai with Nariss relies on a small number of trusted third-party services to operate:

• Stripe for payment processing. Stripe Privacy Policy
• Supabase for user authentication and account management. Supabase Privacy Policy
• Resend for transactional emails (booking confirmations, contact form replies). Resend Privacy Policy
• Vercel for hosting the website and, if you allow statistics, anonymous visit statistics without cookies. Vercel Privacy Policy
• Meta for measuring our ads on Facebook and Instagram, only if you choose Accept all (section 5). Meta Privacy Policy
• Cloudflare for hosting and content delivery. Cloudflare Privacy Policy

Each service processes data according to their own privacy policy, linked above.

Here is what we store in your browser:

• Authentication cookies (if you create an account) to keep you logged in
• Your cookie choice so the banner does not ask again on every page
• Quiz progress for the Thai Quiz, so you can pick up where you left off
• Ad campaign tags from the link you arrived on, kept only until you close the tab
• Meta cookies (_fbp and _fbc), only if you choose Accept all. They last up to 90 days.

Visit statistics and the Meta Pixel start only after you choose in the banner. Decline keeps both off, and Statistics only keeps Meta off. To change your choice later, use Cookie settings at the bottom of any page.

If you choose Accept all, we use the Meta Pixel (in your browser) and the Meta Conversions API (from our server) to measure our ads on Facebook and Instagram. When you join the Listening Challenge waitlist, both report the same signup to Meta, which counts it once. That tells us which ads bring people to the waitlist, and Meta uses it to show our ads to people more likely to be interested.

What Meta receives:

• Your email address, scrambled into a code on our server (hashed), so Meta can match it to an account it already knows without ever receiving the address itself
• Your IP address and browser details (user agent)
• Meta's cookie identifiers (_fbp and _fbc)
• The address of the first public page you view with the Pixel on, and of the page where you join the waitlist. No other page is reported, and never an account, login or admin page.

Legal basis: your consent. Without it, nothing reaches Meta: the Pixel does not load and our server sends no event. To withdraw, click Cookie settings at the bottom of any page and choose Decline or Statistics only. The Pixel stops right away and its cookies are deleted. Events sent before you withdrew stay with Meta.

Meta Platforms receives this data as a separate company and handles it under its own Privacy Policy and Business Tools Terms, possibly outside your country, including in the United States. Meta's cookies last up to 90 days, and Meta keeps event data according to its own retention rules. We do not keep a copy of what we send.

Your data is stored securely through our third-party providers. Account data is stored in Supabase (hosted in the cloud with encryption at rest). Payment data is processed and stored by Stripe, which is PCI-DSS compliant.

We take reasonable measures to protect your information, but no system is completely secure. If you suspect unauthorized access to your account, contact us immediately.

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate information
• Delete your account and associated data
• Export your data in a portable format

To exercise any of these rights, email contact@thaiwithnariss.com. We will respond within 30 days.

Thai with Nariss does not knowingly collect data from children under 17. If you are a parent and believe your child has provided personal information, contact us and we will delete it.

We may update this privacy policy as our services evolve. The "last updated" date at the top of the page reflects the most recent revision. We encourage you to check back occasionally.

The entity responsible for your personal data is: