Privacy notice (PDPA)

[Operator legal name] ("we") runs the Haze Buds point-of-sale and back office. This notice explains what we keep under Thailand's Personal Data Protection Act B.E. 2562.

What we keep

• Customers: name and phone number if you give them at the counter, and what you bought. Used for receipts and your purchase history.
• Business buyers: name, tax id, branch and address for a full tax invoice, as the Revenue Code requires.
• Staff: name, contact, position, PIN (stored only as a one-way hash), check-in and check-out times, and the sales credited to you. See the staff privacy notice.
• Bills: photos of receipts and slips, kept privately.

Why, and for how long

To make and account for sales, to meet tax and accounting law (we keep accounting records for at least 5 years), and to pay staff. Nothing is sold or used for advertising.

Who processes it

Supabase (database and storage, Singapore region), Vercel (hosting). No analytics or advertising trackers, so this site sets no tracking cookies; it uses only cookies needed to sign in, keep a register session, remember the tablet and your language.

Your rights

You may ask to see, correct, or delete your data, or object to its use, by writing to [privacy@example.com]. Some records (sales, tax documents) must be kept by law and can't be deleted early.