Who we are
Noom Studio Co., Ltd. (Noom Sound Studio) runs noomsound.studio and is responsible for your personal data. 206/1 Moo 4, Maret Sub-district, Koh Samui District, Surat Thani, Thailand. Email noomsoundstudio@gmail.com.
What we collect
- Bookings: your name, WhatsApp number, email if you give it, the session, date, group size, location for private sessions, and any notes you add.
- Shop orders: your name, email, phone, delivery address, what you ordered, and the payment result. For our dispute records we also keep the time of the order, your IP address, browser type, the terms you agreed to and the card security check result.
- Custom order requests: your name, email, WhatsApp if given, country and what you are looking for.
- Noom Learn (our practice course at /learn/): your email, your first name if you give it, the days you tick as practised, the gates you tick, your tempos and the answers you type in. We email you a sign-in link and keep a cookie in your browser that keeps you signed in.
- Messages: what you send us by email or WhatsApp.
- Site use: anonymous clicks, scrolls and time on page (see Analytics below).
Card payments
Card payments are handled by Omise (Opn Payments), a licensed payment provider. You type your card details into Omise's secure form. They go straight to Omise and never reach our server, and we never see or store your full card number. We only receive the result, the card brand and the last four digits. Omise handles your card data under its own privacy policy and PCI DSS rules.
Why we use it
- To confirm and run your booking or lesson, and to message you about it.
- To take payment, ship your order, send you the video of your handpan, tracking and delivery updates, and handle the guarantee.
- To keep accounts and records that Thai law requires.
- To deal with disputes, chargebacks and fraud.
- To understand which pages help people, so we can improve the site.
The legal basis is the contract with you (your booking or order), our legal duties (accounts and tax), and our legitimate interest in preventing fraud and improving the site. We do not sell your data, and we do not send you marketing unless you ask for it.
Who we share it with
Only what each one needs to do its job:
- Omise (Opn Payments): to process card and Thai QR payments.
- Our partner workshop in China: your name, delivery address and phone, when your handpan ships directly from the workshop.
- Couriers (EMS, UPS, DHL) and customs: your name, address and phone, to deliver your parcel.
- Cloudflare: hosts this website and our booking and order records.
- Google: our email, calendar and the spreadsheet where bookings and orders are listed.
- Microsoft Clarity: site analytics (see below).
- WhatsApp (Meta): when you message us there.
- Authorities: when the law requires it.
Some of these providers store data outside Thailand, including in China, Singapore, the United States and the EU. We only use providers that protect personal data to recognised standards.
Analytics and browser storage
Most public pages use Microsoft Clarity to record clicks, scrolls and time on page, without your name or contact details. Clarity is not used on the checkout page. The shop also saves your chosen country and currency, and your cart, in your own browser so the next page remembers them. You can clear these at any time in your browser settings.
How long we keep it
Booking and order records are kept for up to 5 years, as Thai accounting law requires. Messages and custom order requests that do not lead to an order are deleted within 2 years. A Noom Learn account and its practice log are kept until you ask us to delete them. Analytics data is kept by Clarity for up to 13 months.
Your rights
Under the PDPA you can ask to see your data, get a copy, correct it, have it deleted, limit or object to how we use it, and withdraw any consent you gave. Email us and we reply within 30 days. Some records we must keep by law until the retention period ends. If you are unhappy with our answer, you can complain to Thailand's Personal Data Protection Committee (PDPC).
Security
The site runs on HTTPS. Only Noom Sound Studio can open booking and order records, behind a login.
Changes
If we change this policy, we update the date at the top of this page.