Get in touch →
Legal

Privacy Policy

Last updated: 11 August 2026

This Privacy Policy explains how VAYOWEB (“we”, “us”, “our”) collects, uses, and protects your information when you visit vayoweb.com (the “Site”). We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR) and applicable data-protection laws.

1. Who we are

The data controller responsible for your information is Vayo (Prajuab Tunyu), operating as VAYOWEB, based in Chiang Mai, Thailand. For any privacy-related question or request, contact us at sillverpro@gmail.com.

2. Cookies & analytics

We use Google Analytics 4 to understand how visitors find and use the Site — which pages are read, roughly where visitors come from, and what needs fixing. We use no advertising, no remarketing, and no cross-site ad tracking, and we do not sell any data.

Google Analytics sets first-party cookies in your browser (typically _ga and _ga_<id>) that hold a randomly generated identifier used to count returning visits. They expire automatically after up to two years. You can block or delete them at any time in your browser settings, or install Google’s Analytics opt-out add-on; the Site works normally either way.

We also store a single technical flag in local storage that remembers you dismissed our privacy notice, so it is not shown to you again. This is not a cookie, contains no personal data, and never leaves your device.

3. Information we collect

Information you give us (contact form)

When you submit our contact form, we collect the details you provide: your first name, last name (optional), email address, and message. We use this only to read and respond to your enquiry.

Information collected automatically (server logs)

Like virtually all websites, our hosting server keeps standard technical logs that may include your IP address, browser type, and the date and time of a request. These logs are generated by our hosting provider and are used only to operate the Site securely, diagnose problems, and prevent abuse or spam.

Information collected by analytics

Through Google Analytics we receive aggregated usage data: pages viewed, time on page, approximate location (city/country level, derived from a truncated IP address), device and browser type, and the referring site. This data is pseudonymous — it is not used to identify you by name, and we do not combine it with the details you send us through the contact form.

4. How we use your information

  • To respond to enquiries and communicate with you about your project.
  • To operate, secure, and maintain the Site.
  • To measure how the Site is used, so we can improve its content and performance.
  • To detect and prevent spam, abuse, and fraudulent activity.

5. Legal basis for processing

Under the GDPR, we process your data on the following bases:

  • Consent (Art. 6(1)(a)) — when you voluntarily submit the contact form to reach us.
  • Legitimate interests (Art. 6(1)(f)) — to keep the Site secure, prevent abuse, and measure Site usage in aggregate, in a way that does not override your rights. You can opt out of analytics as described in section 2.

6. Sharing & third parties

We do not sell or rent your personal data. We only share it where necessary with service providers that help us run the Site, who act on our instructions:

  • Hosting provider — HostArmada stores the Site and generates the server logs described above.
  • Email delivery — contact-form messages are delivered to our inbox by mail server.
  • Analytics — Google Ireland Ltd. / Google LLC processes the usage data described above on our behalf, under Google’s own Privacy Policy. We may also disclose information if required by law.

7. Data retention

We keep contact-form messages only for as long as needed to handle your enquiry and any follow-up, after which they are deleted. Server logs are retained for a limited period by our hosting provider and then rotated or deleted in the normal course. Analytics data is retained by Google for up to 14 months and then deleted automatically.

8. International transfers

Our Site is hosted on servers located in Singapore, which is outside the European Economic Area (EEA). If you contact us from the EEA or another region, your information will be transferred to and processed in Singapore. Analytics data may additionally be processed by Google on servers in the United States under the EU Standard Contractual Clauses. We take reasonable steps to ensure your data remains protected to a standard consistent with the GDPR.

9. Your rights

If you are in the EU/EEA (or a region with similar laws), you have the right to:

  • Access the personal data we hold about you;
  • Request correction of inaccurate data;
  • Request erasure of your data (“right to be forgotten”);
  • Restrict or object to our processing;
  • Request portability of your data;
  • Withdraw consent at any time, where processing is based on consent;
  • Lodge a complaint with your local data-protection supervisory authority.

To exercise any of these rights, email us at sillverpro@gmail.com. We will respond within the timeframe required by law.

10. Children’s privacy

The Site is not directed to children, and we do not knowingly collect personal data from anyone under the age of 16.

11. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised “Last updated” date above.

12. Contact

Questions about this policy or your data? Email sillverpro@gmail.com.