Privacy Policy

Introduction

Chiang Rai Stillness is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect information when you use our website and services. We believe in transparency about our data practices and want you to understand your rights regarding your personal information.

Information We Collect

We collect different types of information to provide and improve our tea sourcing, training, and research services:

How We Use Your Information

We use the collected information for legitimate business purposes, including:

• Service Provision: To respond to your inquiries, provide requested information about our tea sourcing, training, and research services, and facilitate communication regarding potential partnerships or engagements.
• Website Improvement: To analyze how visitors use our website, identify areas for improvement, and optimize user experience across different devices and browsers.
• Communication: To send relevant information about our services, respond to your questions, and maintain professional correspondence. We do not send unsolicited marketing emails.
• Analytics: To understand visitor behavior, measure website performance, and make data-informed decisions about content and functionality.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes, and to protect our rights and the safety of our users.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you voluntarily provide information through contact forms or cookie preferences
• Legitimate Interests: To operate our business, improve our services, and maintain security
• Contractual Necessity: To fulfill our obligations when you engage our services
• Legal Obligations: To comply with applicable laws and regulations

Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share information only in the following limited circumstances:

• Service Providers: We may share information with trusted third-party service providers who assist us in operating our website, conducting business, or providing services to you. These providers are contractually obligated to keep your information confidential and use it only for the purposes we specify.
• Analytics Services: We use analytics services to understand website usage. These services may collect information about your use of our website and other websites.
• Legal Requirements: We may disclose information if required by law, court order, or government regulation, or if we believe such disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit using secure protocols
• Regular security assessments and updates
• Limited access to personal information on a need-to-know basis
• Secure storage systems with access controls
• Regular backup procedures to prevent data loss

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but commit to maintaining industry-standard security practices.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Contact form submissions: Retained for up to three years after last contact
• Analytics data: Aggregated and anonymized after 26 months
• Cookie data: According to preferences set in our Cookie Policy
• Service-related communications: Retained for the duration of the service relationship plus applicable legal requirements

When information is no longer needed, we securely delete or anonymize it according to our data retention procedures.

Your Rights and Opt-Out Instructions

You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:

• Avoid filling out contact forms, account registrations, or any data-submitting features
• Disable cookies through your browser settings (see our Cookie Policy for details)
• Contact us directly to request the deletion of any previously shared personal data

We respect your privacy choices. If you would like us to delete your data, please reach out to us at the contact details provided above. We will process your request promptly.

Additional User Rights

Depending on your location, you may have additional rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal information under certain circumstances
• Right to Restrict Processing: Request limitation of how we process your information
• Right to Data Portability: Receive your personal information in a structured, commonly used format
• Right to Object: Object to certain types of processing, including direct marketing
• Right to Withdraw Consent: Withdraw previously given consent at any time

To exercise any of these rights, please contact us using the information provided at the top of this page. We will respond to your request within the timeframe required by applicable law.

International Data Transfers

Our servers and operations are based in Thailand. If you access our website from outside Thailand, your information may be transferred to, stored, and processed in Thailand or other countries where our service providers operate. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards.

Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a child, we will take steps to delete such information promptly.

Third-Party Websites

Our website may contain links to third-party websites for your convenience and information. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Any changes will be posted on this page with an updated effective date. For material changes, we may provide additional notice through our website or by email if we have your contact information.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website after changes are posted constitutes acceptance of the updated policy.

Contact Us About Privacy

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to privacy-related inquiries within a reasonable timeframe and make good-faith efforts to address your concerns.