Legal
Privacy
Written from what the code does rather than from a template. Each item below corresponds to a table or a browser store you can point at.
What is stored about you
- Account
- Email address, display name, and a hash of your password. Never the password.
- Session
- A cookie holding 32 random bytes. The database stores only their SHA-256, so a dumped row cannot be replayed.
- Reviews
- Your rating and text, attributed to your display name, not your email.
- Saved items
- Product slugs against your account.
- Orders
- Delivery name, address, phone, email, and what was bought. Kept because an order is a record.
- Email requests
- The address you type into a restock form, and which product it was about.
What is not collected
There is no analytics vendor on this site and no tracking script from anyone. Our own counters record how many times a product or page was opened on a given day in Bangkok, as an integer per thing per day. They carry no visitor identifier, no cookie, no IP address and no per-event row, so they can answer how many and never who.
Search terms typed into the suggestion panel are not recorded at all: those responses are served from a CDN cache and never reach our server. A search is counted only when you submit it and land on the results page, and only the term and the number of matches are stored.
People on the internal allowlist are excluded from every counter, so the figures are not inflated by the people building the shop.
What stays in your browser
Your cart, your recently viewed products and your compare selection live in this browser's local storage and are never sent to us. Clearing site data clears them.
Third parties
Signing in with Google or Facebook sends you to that provider and back; we receive the identity they return and nothing else, and accounts are linked only on an email address the provider has verified. Product photography is served from this domain. Nothing else on the page loads from a third party.
Asking for a copy, or deletion
Email info@gyroinst.com from the address on the account. Orders are kept as commercial records; everything else can go.
This describes the site's actual behaviour and has not been reviewed by a lawyer against Thailand's PDPA. That review should happen before launch.