Privacy Policy

This Privacy Policy explains how Aira Studio ("we", "us", "our") collects, uses, and protects personal information in the Aira Admin console — the internal tool used by studio staff to manage classes, clients, bookings, and packages at our Pilates Reformer studio in Bang Na, Bangkok. Use of the public studio website is covered by a separate policy at airastudiothailand.com/privacy.

1. Who this applies to

This console is restricted to authorised Aira Studio staff. Access is granted through Google sign-in and individually approved by a studio administrator. Clients of Aira Studio do not sign in here.

2. Information we process

• Staff accounts. Name, email address, and profile picture provided by Google when a staff member signs in, together with an access role managed by Aira Studio.
• Client records. Information entered by staff about Aira Studio clients — name, contact details, date of birth, health notes, package and booking history.
• LINE data. When a client interacts with our LINE Official Account, their LINE user ID, display name, and profile picture are stored so staff can message them and match bookings to their profile.
• Operational logs. Technical logs (IP, request path, status) and an activity log of staff actions performed in the console.

3. How we use this information

• Authenticate staff and enforce access control.
• Manage the studio schedule, client packages, bookings, and notifications.
• Send transactional messages to clients via LINE (booking confirmations, reminders, package expiry alerts).
• Keep an audit trail of who changed what, for security and accountability.
• Comply with legal obligations under Thai law.

4. Third-party services

We rely on a small number of trusted providers. Each receives only the data needed for the task and is bound by its own privacy terms:

• Vercel — hosting and request handling.
• MongoDB Atlas — database storage.
• Google — staff sign-in (OAuth) and authentication infrastructure.
• LINE — messaging with clients through the Aira Studio Official Account.

5. Sharing

We do not sell personal information. We only share it with the providers above, with Aira Studio staff who need it to do their job, or when required by law.

6. Data retention

Client records and related booking history are kept for as long as the client holds an active relationship with the studio, and for the period required to meet legal and accounting obligations after that. Activity logs are kept for up to 24 months. Upon request we will delete records we are not required to retain.

7. Your rights

Under Thailand's Personal Data Protection Act (PDPA) and other applicable laws, you may ask to access, correct, update, or delete the personal information we hold about you, object to or restrict processing, and withdraw consent at any time. To exercise these rights, contact us using the details below.

8. Security

Access to the console is restricted to authorised staff and protected by Google sign-in. We apply reasonable technical and organisational measures to protect personal information against loss, misuse, and unauthorised access. No system is 100% secure, so we cannot guarantee absolute security.

9. Children

The Aira Admin console is not used by children. Client records about minors are added by staff only with consent from the client's legal guardian.

10. Changes to this policy

We may update this Privacy Policy from time to time. The most recent version will always be available on this page with the "Last updated" date.

11. Contact

Aira Studio — Anacade, 4361 Sukhumvit Rd, Bang Na Tai, Bang Na, Bangkok 10260, Thailand.
Email: contact@airastudiothailand.com
Phone: +66 64 923 6444

A more detailed version of this policy, including the full identity of the Thai legal entity operating the studio, will be published once the company registration is finalised.