Privacy Policy
Last updated October 29, 2026
1. Who is responsible
EROCA VONTIC CREATION CO.,LTD. (registration no. 0835566046943), 63 Sirirat Rd., Patong, Kathu, Phuket 83150, Thailand, is the data controller for personal data collected through Erocavontic Store. Contact us about your data at [email protected].
2. What we collect
Account: your email address and a securely hashed password (we never store your actual password), or (if you sign in with Discord) your Discord user ID, username and the email address Discord shares with us. Orders: what you bought, when, the amount and the order status, so we can give you access to your files. Payment: payments are handled by PayNow; we receive the payment status and order details from PayNow, never your card number. Technical: standard server logs (IP address, browser type) for security and troubleshooting. Analytics: only if you accept analytics cookies (see section 5).
3. Why we use it (and our legal basis)
To create and secure your account, process orders and give you access to what you bought (performing our contract with you); to prevent fraud and keep the store secure (our legitimate interests); to keep accounting records (legal obligation); and to measure how the store is used, only with your consent. We do not use your data for advertising and we do not sell it.
4. Discord login
If you choose to sign in with Discord, we receive your Discord user ID, username and email through Discord's own login flow (OAuth). We never see your Discord password. It is used only to create and identify your store account.
5. Support chat
If you contact us through Support in your account, we store your tickets, the messages you and our team write, and the files you attach, so our team can help you and keep a record of what was agreed. Every version of a message is kept in the support log, including messages you later edit or delete, and our team may export this log for record keeping. We also record when our team has seen your message, and we may email you a short notice (ticket number and link, never the message itself) when a reply arrives after a quiet hour. Files are stored privately and can only be downloaded by you and our support team through time-limited links. When a ticket is archived, its files are deleted and only the text history is kept.
6. Cookies and local storage
Strictly necessary: the store keeps your sign-in session, shopping cart and cookie choice in your browser's local storage. This stays on your device and is used only to keep you signed in and remember your cart between visits. Analytics (only if you accept): we load Google Analytics to measure visits and Microsoft Clarity to provide masked session recordings and heatmaps. They may set analytics cookies such as _ga, _ga_*, _clck and _clsk. Account and checkout areas are masked from Clarity. You can accept, reject or change your choice at any time via "Cookie Settings" in the footer; turning analytics off deletes those cookies.
7. Who we share it with
PayNow, our payment provider and Merchant of Record, to take and refund payments. Discord, only if you use Discord sign-in. Google Analytics and Microsoft Clarity, only if you accept analytics cookies. Our email delivery provider, to send account emails such as verification and password resets, and our hosting providers, to run the store. We do not share your data with anyone else, except where required by law.
8. Transfers outside Thailand
Some of these providers process data outside Thailand, for example in the United States. When that happens we rely on the provider's own safeguards for international transfers, as allowed under Thailand's Personal Data Protection Act (PDPA).
9. How long we keep it
We keep account and order records while your account is active and as long as accounting and legal rules require. Support tickets are kept while your account is active so we can see past conversations when you contact us again; files in a ticket are deleted when the ticket is archived. You can ask us to delete your account, personal data or support history at any time. We will keep only the minimum order records the law requires, such as financial records.
10. Security
Passwords are stored hashed, never in plain text. Purchased files are delivered through time-limited, per-purchase download links rather than public links.
11. Children
The store is not directed at children under 13, and we do not knowingly collect personal data from them.
12. Your rights
Under Thailand's PDPA you can ask to access or get a copy of your data, correct it, delete it, restrict or object to how we use it, move it to another service, and withdraw consent at any time (for analytics, via "Cookie Settings"). Email [email protected] to use these rights. If you are unhappy with how we handle your data, you can complain to Thailand's Personal Data Protection Committee (PDPC).
13. Changes to this policy
We may update this policy from time to time; material changes will be reflected in the "Last updated" date above.
14. Contact
Questions about your data: email [email protected], or write to EROCA VONTIC CREATION CO.,LTD., 63 Sirirat Rd., Patong, Kathu, Phuket 83150, Thailand.