Privacy and analytics

Data controller: SaiSanam. Contact us through the private privacy-request form below. Updated 14 October 2026.

Anonymous statistics that always operate

To understand usage and improve the site, we count public page and eligible product views, broad referral categories such as Google or other websites, confirmed newsletter signups, and confirmed orders with actual items. We retain daily totals, language, event type, page/product key and referral category for 180 days. These statistics store no individual visit records, visitor identifiers, analytics cookies, IP addresses, device fingerprints, full referral URLs or URL query text. They do not measure unique visitors or sessions. To improve speed and visual stability, first-party browser measurements also retain daily timing buckets for LCP, INP and CLS, grouped by broad page template, language, mobile/desktop category and software release for 180 days. No measurement IDs, page URLs or browser-observer details are retained.

Conversion totals are not linked to visitors or referral sources. Confirmed COD orders do not establish cash collection. Unknown automated traffic may affect counts. Search Console operates independently and provides Google’s aggregate search impressions, clicks, query, average-position and indexing reports, without requiring website analytics cookies.

Optional Google review invitation

Google Customer Reviews is currently off.

If enabled after account and privacy review, a separate choice will appear on genuine order-confirmation pages. If you choose to continue, we share your order number, email, delivery country and reviewed expected delivery date with Google to show its survey opt-in. Declining does not affect your order and does not automatically grant GA4 consent. We do not invent emails or delivery dates for reviews. Our original order records follow the transaction-data retention described below; information transferred to Google is handled under Google’s own policy. Google Privacy Policy

Optional Google Analytics

When enabled, choose “Accept & Close” to allow Google Analytics or “Cancel” to decline. Before acceptance, no Google Analytics tag loads or events are sent. Your browser saves the choice for 180 days; declining does not create a tracking identifier. Acceptance uses a consent-receipt cookie for 180 days and Google Analytics cookies limited to 180 days. Reopen “Analytics preferences” to change your choice or withdraw. Withdrawal stops new events, suppresses queued events and removes the site’s Google Analytics cookies.

After acceptance, GA4 measures page/product views, cart changes, checkout steps, accepted orders, completed refunds, newsletter signups and contact-link clicks, using relevant product/order IDs and transaction values. Our event payloads exclude names, email addresses, telephone numbers, postal addresses, typed form/search values and order-access tokens. Google receives browser network requests after acceptance and processes data under its policies and account settings, potentially outside Thailand. Google Signals, personalized advertising and Enhanced Measurement are disabled.

Local retention: consent receipts 180 days, event-delivery records 30 days, aggregate reports 180 days. Google settings verified on 14 October 2026: event data retention is 2 months and user data retention is 14 months, resetting user retention on new activity. Provider retention is separate from website retention. Disabling optional analytics in admin disables both the panel and GA4; anonymous totals, Search Console and essential functions continue.

Essential cookies and service information

Laravel session and CSRF cookies support security, login, carts and checkout regardless of analytics choice. Sessions expire after 120 minutes of inactivity. If you choose to remember your login, the remember cookie can last up to 400 days. Security session records may contain IP addresses and browser information; we do not use them in anonymous analytics.

When available services are used, we receive account details, newsletter email addresses, cart and order information, contact/shipping details and payment references to fulfil services and handle requests. Necessary details are shared with payment and shipping providers when you transact. These personal details are excluded from analytics event payloads. Newsletter subscription consent is separate from analytics; unsubscribe through the newsletter link. A suppression record remains to prevent further newsletters.

The current system does not apply a fixed automatic deletion period to accounts, carts, orders, payments or newsletter suppression records. Request access, correction or deletion below; we review records needed for services, security or applicable obligations. Separate web-server security logs may retain IP addresses, times, URLs and browser information, with daily rotation and 14 retained rotations. They are not used as the anonymous analytics database.

Privacy requests retain your email, request type and encrypted message to handle the request. Resolved requests are deleted after 30 days; unresolved requests remain until handled. Withdrawal does not reverse prior processing. Other rights depend on applicable law.

Privacy requests

Use this private request form for access, correction or deletion enquiries. SaiSanam reviews requests. Form contents are excluded from analytics events.