Privacy Policy

Effective from · 17 May 2026

Tomorrow is Yesterday respects your personal data. This page explains what we collect, how we use it, and the rights you have under Thailand's Personal Data Protection Act (PDPA), B.E. 2562 (2019).

1. What we collect

We collect only what we need to serve you:

Account and contact: name, email, phone number
Shipping address, for delivering your order
Order history and items in your cart
Site usage data through Google Analytics and Meta Pixel — so we understand which pages people love and whether the site performs well (most of this is aggregated and not linked to you personally)
Cookies needed for the site to function, including login, cart, and the vintage reservation hold

We never store your card details on our servers. All payment processing runs through Stripe, which holds PCI-DSS certification.

2. How we use your data

Processing your order and shipping it to you
Contacting you about your order — status updates, tracking, answering questions
Improving the site and your shopping experience over time
Sending newsletters or announcements — only if you've subscribed, unsubscribe anytime

3. Who we share data with

We share data only with the providers we need to run the shop:

Stripe — processes card and PromptPay payments
Couriers (Thailand Post, Kerry, EMS) — for delivery
Infrastructure providers: Vercel (hosting), Neon (database), Cloudflare (DNS), Vercel Blob (product images)
Google Analytics and Meta Pixel for website usage statistics

We never sell or rent your data to any third party.

4. How long we keep your data

Account data: as long as your account is active. Contact us to delete it.
Order and receipt data: 5 years, as required by Thai tax law
General access logs: roughly 90 days

5. Your rights under PDPA

You have these rights under Thai law:

Request access to and copies of the data we hold about you
Request that incorrect or outdated data be corrected
Request deletion of your data (except where the law requires us to keep it)
Request that your data be transferred to another provider
Withdraw any consent you previously gave, at any time
File a complaint with Thailand's Personal Data Protection Committee if you believe we have mishandled your data

To exercise any of these rights, message us on LINE or by email. We'll respond within 30 days.

6. Cookies

Our site uses two kinds of cookies:

Functional cookies: login, cart, and vintage reservation holds — the site won't work without these
Analytics cookies: Google Analytics and Meta Pixel — to understand site usage in aggregate. You can disable these via your browser settings or privacy extensions.

7. Contact us

For questions about this privacy policy or to exercise any PDPA right, please contact tmisyd@gmail.com or LINE @tmisyd.

We may update this policy from time to time to reflect changes in the law or our services. Any update will be posted on this page with a new effective date.