Privacy Policy
1. Principles and Objectives
www.tierra-en-sierra.com (“Website”, “We”, “Us”, “Our”) recognizes the paramount importance of the personal data and other information relating to our service users (“Customers”, “You”, “Your”). To ensure your confidence in our transparency and accountability, we collect, use, and disclose your data in accordance with the Personal Data Protection Act, B.E. 2562 (2019) (“PDPA”) and other applicable regulations. This Privacy Policy (“Policy”) is established to clarify the details regarding the collection, use, or disclosure (collectively referred to as “Processing”) of your personal data.
2. Collection of Personal Data
“Personal Data” refers to any information relating to an individual that enables the direct or indirect identification of that person. We collect and process Personal Data only to the extent necessary and strictly for specified purposes.
|
Categories of Personal Data
|
Details and Examples |
| Identity Data | – First name, Last name – Gender – Age – Date of birth – National Identification Number / Passport Number – Photograph |
| Contact Data | – Postal/Shipping address – Email address – Telephone number (including home or mobile number) – Social media accounts such as LINE ID, Facebook account/ID, and Google ID |
| Financial & Transaction Data | – Credit/Debit card details (e.g., cardholder name, card number, expiration date, and issuing bank) – Bank account details – Tax invoice details |
| Technical Data | – IP Address – MAC Address – Access logs and user behavior tracking via Session IDs – Browser type and version |
3. Sources of Personal Data
We may collect your Personal Data through various channels as follows:
3.1 Direct Collection from You:
– When you register for an account by completing forms, whether via physical documents, our website, social media, or any other platforms.
– When you purchase our goods and services.
– When you fill out online inquiry or contact forms.
– When you post or interact on our webboards/forums.
– When you contact us to inquire, provide feedback, or offer suggestions regarding our products and services.
– When you subscribe to our newsletters or marketing materials.
3.2 Automated Collection:
– When you browse or interact with our website, which utilizes cookies or similar tracking technologies to gather technical data regarding your website usage.
– Data derived from your utilization of our services, including device metrics used to access the services (such as IP Address and MAC Address).
3.3 Third-Party Sources:
– We may receive your Personal Data from third parties where such collection is legally permissible or where you have granted prior explicit consent to disclose the data to us. This includes scenarios where data is provided to facilitate business offerings, tailored services, or related corporate activities.
4. Legal Bases for Processing Personal Data
|
Legal Basis
for Processing
|
Details |
| Performance of a Contract | Processing is necessary for the performance of a purchase or service agreement between the Data Controller (“We”) and the Data Subject (“You”), including payment processing and utilizing your shipping address for product delivery. |
| Consent | Processing relies on your explicit consent, which is requested prior to or at the time of data collection. This applies to activities that legally require consent and do not fall under any statutory exemptions, such as the processing of Sensitive Personal Data, marketing communications, promotional offers, and general service facilitation. |
5. Purposes of Processing Personal Data
|
Purpose
|
Details |
| To facilitate website utilization and service delivery | To streamline order processing, product shipping, returns, and product exchanges. |
| To respond to inquiries and provide customer support | To assist customers regarding our services, update customer profiles, and process user rights requests or formal complaints. |
| To develop and improve quality of products and services | To perform internal analysis in order to enhance our product offerings and adapt our services to consumer preferences. |
| To provide marketing, promotional information, and updates | To communicate updates regarding goods, privileges, promotions, discounts, and special offers via email, SMS, or postal mail (conditioned upon receiving your explicit prior consent). |
| To conduct data analytics | To perform market research, evaluate consumer trends, and optimize our overarching commercial operations. |
| To prevent, detect, and investigate criminal activities | To monitor, prevent, and take action against unlawful activities, fraudulent actions, or security breaches that potentially impact the data privacy of our users. |
We may share non-personally identifiable or anonymized data with the public or our trusted business partners for analytical, operational, marketing, or promotional purposes to demonstrate general user trends regarding our products and services.
6. Disclosure of Personal Data to Third Parties
We may disclose your Personal Data to third parties strictly on a necessary basis under your consent, unless authorized or required by applicable laws to do so without consent. These parties include:
1. Logistics and delivery service providers.
2. Payment gateway and financial service providers.
3. Data analysis, marketing research, and promotional service providers.
4. Law enforcement agencies, government authorities, or regulatory bodies exercising legal authority, responding to statutory requests, legal proceedings, or compliance mandates.
7. Retention Period of Personal Data
We will retain your Personal Data only for as long as required by law or as necessary to fulfill the specific purposes for which it was collected. Once the data is deemed unnecessary for its designated purposes, we will safely delete, destroy, or completely anonymize it.
8. Security Measures for Personal Data
We recognize the critical importance of safeguarding your personal data. We implement appropriate administrative, technical, and physical security measures to prevent unauthorized loss, access, destruction, use, alteration, modification, or disclosure. Our website utilizes Secure Sockets Layer (SSL) encryption certified by an authorized Certificate Authority (CA) to safeguard your sensitive transmission data, including personal info, credentials, and payment card data.
9. Rights of the Data Subject
As a Data Subject under the PDPA, you possess the following legal rights:
1. Right to Withdraw Consent: You have the right to withdraw your consent for us to process your Personal Data at any time throughout the duration that your data is retained by us.
2. Right of Access: You have the right to request access to, and obtain a copy of, your Personal Data under our responsibility.
3. Right to Rectification: You have the right to request that your Personal Data be corrected, updated, and completed. Registered members can update their personal profiles at any time via the member profile page.
4. Right to Erasure: You have the right to request the deletion, destruction, or complete anonymization of your Personal Data when it is no longer necessary for the specified purposes.
5. Right to Restriction of Processing: You have the right to request the temporary restriction of our processing activities, particularly while we are investigating your requests for data rectification or objections.
6. Right to Data Portability: You have the right to obtain your Personal Data in a structured, commonly used, and machine-readable format, including the right to request the transmission of such data to another Data Controller.
7. Right to Object: You have the right to object to the collection, use, or disclosure of your Personal Data under statutory conditions.
Please note that requesting data deletion, destruction, or exercising an objection to certain processing activities may impact our ability to deliver full services to you, and certain features or assistance may become unavailable.
To exercise any of the aforementioned rights, please contact us at digital.media@keerahospitality.com or call 0811522624. We will evaluate your request and notify you of our decision/action within 30 days from the date we receive your formal application.
10. Links to Third-Party Websites and Services
Our website may contain hyperlinks directing you to external websites. These third-party sites operate independently and may collect your analytical usage or Personal Data. We cannot accept responsibility or liability for the privacy and security practices of external platforms. We strongly advise you to inspect and review the specific privacy policies posted on those respective third-party websites.
11. Consequences of Non-Provision of Personal Data
We are required to collect specific Personal Data to fulfill statutory mandates or to execute the terms of our service agreement with you. Should you decline to provide the required data, you may still access our platform; however, your user experience may be significantly less convenient or limited in efficiency due to our operational inability to process features that heavily rely on such information.
12. Amendments to the Privacy Policy
This Privacy Policy may be periodically reviewed, revised, or amended to remain compliant with changing data protection laws and corporate adjustments. We highly recommend that you check this page regularly to stay informed of any updates.
13. Contact Details
If you have any questions, suggestions, or require further details regarding this Privacy Policy, please contact:
Data Controller
Email: support@onsello.com
Phone: 0811522624
Online Contact Form: www.tierra-en-sierra.com/contactus
14. User Account Deletion
Users maintain the right to request the absolute deletion of their accounts at any time. You may submit an explicit account erasure request by emailing support@onsello.com. Following the execution of your account deletion request, all associated Personal Data stored on our servers will be permanently purged and cannot be recovered.