20studio
Effective 21 September 2026 · Version 6
This site uses no cookies at all. No analytics, no third-party scripts, nothing loaded from Google. What we hold is what you send us yourself — through the contact form, by email, or on LINE — so that we can reply, plus ordinary web server logs. If you only read the site, we have almost nothing of yours.
Google Analytics, two cookies and the consent bar were removed from this site on 15 September 2026.
This notice covers the website 20.studio and our LINE Official Account @20studio. The label's site 20studiorecords.com has its own notice, and any streaming service you go on to use collects data under its own.
Tharin Karnjanapong, who runs 20studio, a music studio in Bangkok. "20studio" is a trading name, not a registered legal entity.
49/49 Vibhavadi Rangsit Road, Soi Vibhavadi Rangsit 64, Yaek 19, Talat Bang Khen, Lak Si, Bangkok 10210 · privacy@20.studio
| What | Why | Legal basis (PDPA) | Until |
|---|---|---|---|
| Name, email, subject, message and IP address from the contact form | To read and answer you, and to see whether anyone is misusing the form | Performing your request, and legitimate interest | 24 months from your last message |
Email you write to contact@20.studio or another of our addresses — your address, the name you use, and what you write | To read and answer you, and for reference while the work is live | Performing your request, and legitimate interest | As long as the matter needs it — ask us to delete it whenever you like |
Messages you send our LINE Official Account @20studio, with the display name and profile picture LINE shows us | To read and answer you | Performing your request | The conversation lives in LINE's systems — see the next section |
| Web server logs — IP, time, page, browser, referrer, and the line recorded when the form's hidden spam trap is filled in | To keep the site working and safe, and to tell bots from people | Legitimate interest, and legal obligation | Two months at most — logs are written daily and last month's are deleted when the month turns. There is no other copy |
| A rate-limit file holding a one-way hash of your IP address and the time you submitted | To stop the form being submitted too often — five times an hour | Legitimate interest in keeping the system secure | Deleted with the server's temporary files |
None of this is something you have to give. If you never contact us, the site works exactly the same. We do not sell personal data. There are no social media pixels, no advertising, and no visitor profiling.
We keep a LINE Official Account, @20studio, for people who prefer it. Two things are worth knowing.
One — the conversation lives in LINE, not with us. LINE is operated by LY Corporation in Japan, and it is LY Corporation that stores and processes messages in the app, under LINE's own privacy policy at <https://line.me/en/terms/policy/>. This notice does not govern what LINE does with your data, and we cannot change their policy. Using LINE at all is a matter between you and them.
Two — what we see is what you send. LINE shows us the display name and profile picture you have set, along with the messages and files you send. We do not see your phone number, your friend list, or your conversations with anyone else, and we do not copy the conversation out to keep it somewhere else.
You can block us, delete the chat, or unfriend the account at any time, in the app, without telling us. To have us delete what is on our side, write to privacy@20.studio.
On our website the LINE link is an ordinary hyperlink, not a LINE plug-in. Opening this site sends nothing to LINE. That only happens if you tap it.
Namecheap, Inc. (4600 E Washington St, Suite 300, Phoenix, AZ 85034, USA), our web and email host — server logs, contact form email, and email you write to us all pass through them. The servers are in Los Angeles, so the little we hold is stored and processed outside Thailand. Namecheap's policy states that it uses standard contractual clauses for transfers.
LY Corporation (Japan), which operates LINE — only if you choose to message us there. That message is in their systems from the start, as described above.
Beyond these two, we pass data to nobody, unless the law requires it.
PDPA lets you ask what we hold and for a copy, ask us to correct it, ask us to delete or anonymise it, ask us to suspend its use, ask us to transfer it, object to anything we do on the basis of legitimate interest, and withdraw consent at any time.
Those rights apply to what we hold. For data inside LINE's systems, exercise them with LY Corporation under their policy.
Write to privacy@20.studio — a plain email is enough, no form needed. We answer within 30 days, as the law requires, and may ask you to confirm your identity first.
The site runs on HTTPS. Everything the form accepts is validated and size-limited, submissions are rate-limited per IP address, and the pages send a full set of security headers — HSTS, CSP, nosniff, Referrer-Policy and Permissions-Policy. No system is perfectly secure.
This site is not aimed at children, and we do not knowingly collect personal data from anyone under 20 — 20 being the age of majority in Thailand. Where PDPA requires consent for a minor, that consent is the guardian's. If you think a minor has sent us something, tell us and we will delete it.
When this page changes, the date at the top changes with it.
Back to the site