Privacy
Privacy Policy
Last updated: 20 June 2026
This English translation is provided for convenience. In the event of any conflict, the Thai version shall prevail and be legally binding. Read the binding Thai version
This policy explains how I collect, use and protect your personal data when you use boomleverage.com, under Thailand's Personal Data Protection Act B.E. 2562 (2019) — the PDPA.
1. Data controller
This site (boomleverage.com) is operated by me, Varanchai Yingkhamnueng. For any question about personal data, contact contact@boomleverage.com.
2. What I collect
Data you give me directly
- Your email address — when you join a waitlist, or register and sign in.
- Proof of payment — for example a bank transfer slip (PromptPay) when you pay for a service. For card payments, the transaction is handled directly by Stripe and I do not store your card number.
Data collected automatically
- Usage and device data — pages visited, time spent, browser type and referrer — through analytics tooling.
3. Purposes and lawful bases
- Providing the tools and your account — performance of a contract.
- Sending news and service updates (waitlist) — consent, withdrawable at any time.
- Processing payment and confirming entitlements — performance of a contract.
- Improving the site and its content — legitimate interest.
- Complying with the law — for example accounting and tax record-keeping.
4. Disclosure and third-party providers
I do not sell your personal data. I use third-party providers only as far as they are needed to run the site and the service; they act as data processors under my instruction. They are:
- Supabase — database, accounts and sign-in.
- Vercel — website hosting and traffic statistics.
- Resend — sending email, such as sign-in links.
- PostHog — product analytics.
- Stripe — card payment processing (I do not store your card number).
Some of these providers run servers outside Thailand, so data may be transferred abroad. I select providers that maintain appropriate data protection measures.
5. Cookies and analytics
I use two kinds of cookie:
- Strictly necessary cookies — so that sign-in and security work (for example, your session). These are required for the service to function and run without consent.
- Analytics cookies — I use PostHog to understand traffic in aggregate and improve the content. These run only if you press “Accept” in the cookie banner. If you decline, the analytics tooling is not loaded and no such cookie is set.
Basic traffic statistics from Vercel are cookieless. You can change or withdraw consent at any time through the “Cookie settings” link in the footer of every page, or by clearing cookies in your browser.
6. Retention
I keep data only as long as the stated purpose requires. Waitlist data is kept until you withdraw consent or ask for deletion; order records are kept for the period accounting and tax law requires.
7. Your rights as a data subject
Under the PDPA you have the right to access your data and obtain a copy, to rectify it, to erase or destroy it, to restrict its use, to object to processing, to data portability, and to withdraw consent at any time.
To exercise any of these, contact contact@boomleverage.com. If you believe I have processed your data unlawfully, you have the right to complain to Thailand's Personal Data Protection Committee (PDPC).
8. Security
I apply reasonable technical and organisational measures to protect your data. No system is perfectly secure, however, so I cannot guarantee security absolutely.
9. Changes to this policy
I may revise this policy from time to time, updating the date at the top of the page. Continued use of the site means you are aware of the current version.
10. Contact
Questions about this policy, or to exercise your rights: contact@boomleverage.com