Collected now
Account email, hashed password, display name, preferred language, email verification and password reset records, and logged-in consent preferences.
Privacy and PDPA readiness
Privacy Policy / Privacy Notice
This draft notice explains how Virescent by Bryelis currently handles personal data across accounts, the dashboard, planning cart, 3D Studio, and consent settings. It supports preparation for Thailand's PDPA, but it is not legal advice or a final compliance document.
draft-2026-05
Current data boundary
Stored in this browser
Planning-cart items, 3D Studio designs, language preference, and logged-out cookie choices may be kept in browser storage or an essential language cookie.
Not collected yet
No phone number, address, payment-card details, shipping or billing data, national ID, date of birth, precise location, real order, website analytics, or marketing-script data is collected.
Who this notice is for
This notice is for visitors and account holders using the Virescent by Bryelis website.
The legal data controller, registered address, and privacy contact must be confirmed before the service launches.
Data we may collect now
- Account data: email address, display name, password hash, authentication session status, email verification status, and timestamps.
- Profile data: display name and preferred language only.
- Consent data: essential, website-analytics, and marketing choices, policy version, language, source, action, and timestamps for logged-in dashboard updates.
- Email workflow data: verification and password reset email records, hashed codes, expiry timestamps, resend cooldown timestamps, and delivery status.
- Browser data: planning-cart contents, saved 3D Studio designs, cookie choices, and language preference kept in the current browser.
Data we do not currently collect
- Payment card data, real payment details, invoices, or payment provider records.
- Shipping address, billing address, phone number, delivery instructions, or fulfillment data.
- National ID, passport number, date of birth, precise location, or sensitive personal data.
- Real order records, because online ordering and payment are not active.
- Analytics events, marketing pixels, ad identifiers, or newsletter subscription data.
Why data is processed
- To create and secure an account.
- To let users sign in, verify email, and reset passwords.
- To show a minimal dashboard profile and consent settings.
- To keep the planning cart and 3D Studio designs available in the same browser.
- To support privacy and consent settings while online ordering remains unavailable.
Cookies, localStorage, and consent
Essential cookies and storage support language routing, sign-in security, cart behavior, and the cookie notice itself.
Website analytics and marketing are optional, off by default, and no related scripts are currently active.
Logged-in dashboard consent is saved to the database. Logged-out cookie choices may remain local to the browser until a later consent system is approved.
Retention draft note
Retention periods are not final. The approved policy must define how long account, verification, password-reset, consent, and browser records are kept.
Until those periods are approved, Bryelis should keep only data needed to operate the current service and avoid collecting optional customer data.
Data request / privacy contact
Before launch, the business must publish a monitored privacy contact for access, correction, deletion, withdrawal of consent, and other applicable data-subject requests.
Draft contact: privacy@bryelis.example. This must be replaced with an approved contact channel before launch.
Virescent by Bryelis
Draft privacy contact
This address is shown for planning only. A monitored privacy channel and internal request process are required before launch.
- Draft email: privacy@bryelis.example
- No automated data request form is active yet.
- No legal response timeline is finalized in this draft.