Privacy Policy

1. Information You Provide Directly

We collect information that you voluntarily provide to us when you use our services or contact us:

• Contact Information: Name, email address, phone number, and company details when you fill out contact forms
• Communication Data: Content of messages, inquiries, and correspondence with our team
• Business Information: Details about your tea business, sourcing needs, or consulting requirements
• Service Preferences: Your preferences regarding our services and how you wish to be contacted

2. Information Collected Automatically

When you visit our website, certain information is collected automatically through cookies and similar technologies:

• Usage Data: Pages visited, time spent on pages, links clicked, and navigation paths
• Device Information: Browser type, operating system, device type, and screen resolution
• Location Data: General geographic location based on IP address (country and city level)
• Technical Data: IP address, cookie identifiers, and similar technical information

3. Legal Basis for Data Processing

We process your personal data based on: (a) Your consent when you provide information through forms, (b) Contractual necessity when providing services you request, (c) Legitimate interests in operating and improving our business, and (d) Legal obligations under applicable data protection laws.

4. Data Retention Periods

We retain personal data for as long as necessary to fulfill the purposes outlined in this policy, typically: Contact form data for 24 months, analytical data for 12 months, and cookie data according to cookie expiration settings. Data may be retained longer if required by law or for legitimate business purposes.

Service Providers

We work with trusted third-party service providers who assist us in operating our website, conducting our business, and serving our clients. These providers include website hosting services, email communication platforms, analytics services, and cloud storage providers. All service providers are contractually bound to protect your data.

Tea-Making Partners

When you engage our services for tea sourcing or tea garden experiences, we may share relevant business information with our partner tea-making families and operations in Northern Thailand to facilitate your service delivery.

Legal Requirements

We may disclose your information if required by law, in response to legal process, to protect our rights or property, or to prevent fraud or other illegal activities.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the new entity, subject to the same privacy protections outlined in this policy.

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format within 30 days of your request.

Right to Rectification

If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction or completion of that data.

Right to Erasure

You can request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, you withdraw consent, you object to processing, or the data was unlawfully processed.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Right to Object

You can object to processing of your personal data for direct marketing purposes or when processing is based on legitimate interests. We will stop processing unless we demonstrate compelling legitimate grounds.

Right to Restrict Processing

You can request restriction of processing in certain circumstances, such as when you contest the accuracy of data or when processing is unlawful but you don't want erasure.

How to Exercise Your Rights

To exercise any of these rights, contact us at [email protected] or use the contact information provided at the top of this page. We will respond to your request within 30 days and may need to verify your identity before processing your request.