Privacy Policy (PDPA)

Data controller

TM7 Ready (operated from Thailand). Contact: tm7ready@gmail.com for privacy requests, access, correction, or deletion.

Data we collect

• Passport and travel details you enter in the questionnaire
• Email and phone for order delivery and support
• Payment metadata via Stripe (we do not store card numbers)
• Google Analytics usage data (only if you accept cookies in the banner)
• Google Ads conversion data (only if you accept cookies and Google Ads is enabled)

Cookies and similar technologies (strictly necessary)

• HttpOnly order access cookies so you can review and download your PDF
• Locale preference cookie (NEXT_LOCALE)
• Wizard draft answers and cookie consent choice in your browser localStorage

Geolocation

On the success page you may optionally share your device location once to sort nearby immigration offices. We do not store your coordinates on our servers.

Purpose

To generate your TM.7 PDF, process payment, provide download links, and improve the service.

Retention

Encrypted answers are deleted within 30 days after PDF delivery unless law requires longer retention. Generated PDFs expire from download links after 7 days.

Your rights

You may request access, correction, or deletion of your data by contacting us at the email on your receipt.

Processors

We use Stripe (payments), Gmail/Google (transactional email), Cloudflare R2 (temporary PDF storage), Sentry (error monitoring with PII scrubbing), and DigitalOcean (application hosting). Google Analytics and Google Ads load only if you accept cookies in the banner.

Visitors in the EEA and UK

If you are in the European Economic Area or United Kingdom, we process analytics and advertising data only with your consent (Google Analytics and Google Ads). Our lawful basis is consent. You may withdraw consent via cookie preferences. Data may be processed in the United States by Google under their standard contractual terms.