Privacy Policy
Last updated: 3 July 2026
This policy explains how DESCEND ("we", "us") handles personal data in line with Thailand's Personal Data Protection Act B.E. 2562 (PDPA). We keep data collection to the absolute minimum needed to run this site and our gatherings.
1. Data We Collect
Aside from buying a ticket, the website does not require an account. The store's "Notify me" and waitlist buttons are indicators only and do not transmit or store any information.
You share personal data with us in these situations:
- Ticket checkout: when you check out we collect your email address and order details (ticket type, quantity). Card payments are processed by Stripe — we never see or store your full card number. Your order and email are stored in our database (Supabase) so we can issue your ticket QR code and email it to you.
- Booking / enquiry emails: if you email us (e.g. a private-booking request), we receive whatever you include — typically your name, email address, and message.
- Technical data: like most websites, our hosting provider automatically logs standard request data (IP address, browser type, pages visited) for security and performance.
2. Why We Use It
- To respond to booking and general enquiries you send us.
- To operate, secure, and improve the website (technical logs).
- To let you watch embedded media and reach our ticketing and social pages.
We do not sell your personal data, and we do not use it for third-party advertising.
3. Third Parties Your Data May Reach
The site relies on these external services, each with its own privacy policy:
- Vercel — website hosting and server request logs.
- Stripe — card payment processing at checkout. Your card details go directly to Stripe (PCI-DSS); we do not store card numbers.
- Supabase — our database that stores your order, issued ticket(s), and consent record.
- Resend — sends your ticket confirmation email.
- Vercel Web Analytics — privacy-friendly, cookieless traffic measurement (aggregate page views only). It does not use cookies, does not track you across sites, and does not collect personally identifiable information.
- YouTube / Google — the homepage embeds a YouTube video in privacy-enhanced mode (youtube-nocookie.com). The player — and any YouTube cookies — load only if you click to play it.
- Instagram / Meta — only if you follow our outbound link to our profile.
We do not use Google Analytics, Facebook Pixel, or any advertising / behavioural-tracking tools. Stripe is used solely to process payments — not for tracking.
4. Cookies
We do not set our own tracking or advertising cookies, and there is no cookie-consent banner because we run no tracking cookies. Vercel Web Analytics is cookieless. The only third-party cookies that may appear come from the embedded YouTube player if you choose to play it. You can block or clear cookies anytime in your browser settings.
5. Data Retention
Enquiry emails are kept only as long as needed to handle your request and any follow-up, then deleted. Technical server logs are retained for a short period by our hosting provider for security and diagnostics.
6. Your Rights (PDPA)
You have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to withdraw consent where processing is based on it. To exercise any of these rights — or to request deletion of any data you've sent us — contact us using the details below.
7. Data Controller & Contact
The data controller for this site is DESCEND. For any privacy request or question, contact:
8. Changes to This Policy
We may update this policy as the site evolves. Material changes will be reflected by the "Last updated" date at the top of this page.