Privacy Policy

Effective Date: 1 January 2025  |  Last Updated: 1 January 2025

This Privacy Policy describes how Digital Nomads TH (legal name: SERRA ROOFING CORP, hereinafter referred to as “we”, “us”, or “our”) collects, uses, discloses, and protects personal information obtained through the website adgsasg1255.ch (the “Website”). We are committed to safeguarding your privacy and handling your personal data in a transparent, lawful, and responsible manner.

By accessing or using our Website, submitting a contact form, or otherwise interacting with our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms set out herein, please refrain from using our Website.

We comply with the Personal Data Protection Act B.E. 2562 (2019) of Thailand (“PDPA”), which came into full effect on 1 June 2022, as well as other applicable Thai laws and regulations governing the collection and processing of personal data.

1. Introduction and Scope

This Privacy Policy applies to all personal data collected by Digital Nomads TH through the Website adgsasg1255.ch, including but not limited to data submitted via contact forms, data collected automatically through cookies and similar tracking technologies, and data obtained through third-party services integrated into the Website.

This Policy applies to all visitors, users, and individuals who interact with the Website regardless of their location. However, it is specifically designed to meet the requirements of Thailand’s Personal Data Protection Act (PDPA) and is tailored to the Thai market.

The Website may contain links to third-party websites. This Privacy Policy does not apply to those external websites, and we encourage you to review their respective privacy policies before providing any personal information.

2. Data Controller Information

The data controller responsible for your personal data under this Privacy Policy is:

• Trading Name: Digital Nomads TH
• Legal Name: SERRA ROOFING CORP
• Website: adgsasg1255.ch
• Address: 2090 Acapulco Dr, Miramar, Florida, 33023-2633, United States
• Phone: +17122143148
• Email: [email protected]

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact us using the details above. We have designated a point of contact for all privacy-related inquiries to ensure prompt and effective responses.

3. Personal Data We Collect

We collect personal data only to the extent necessary to fulfil the purposes described in this Privacy Policy. The categories of personal data we collect include:

3.1 Data You Provide Directly

When you complete and submit a contact form on our Website, we collect the following information:

• Full Name: To identify you and personalise our response.
• Email Address: To communicate with you regarding your enquiry or request.
• Phone Number: To contact you by telephone if required or requested.
• Message Content: The body of your enquiry, request, or feedback submitted through the contact form.

Submission of this information is voluntary; however, failure to provide certain fields (such as your name and email address) may prevent us from responding to your enquiry.

3.2 Data Collected Automatically

When you visit our Website, certain technical data is collected automatically by our servers and/or third-party services, including:

• IP Address: For security, fraud prevention, and general analytics purposes.
• Browser Type and Version: To optimise Website performance and compatibility.
• Operating System: For technical diagnostics and display optimisation.
• Referring URL: To understand how visitors arrive at our Website.
• Pages Visited and Time Spent: To analyse user behaviour and improve content.
• Date and Time of Visit: For server log purposes and security monitoring.
• Device Type: To ensure a responsive and accessible user experience.

3.3 Data Collected Through Cookies

We use cookies and similar tracking technologies on our Website. Please refer to Section 5 (Cookie Policy) for full details on the types of cookies used, their purposes, and how you can manage your preferences.

4. How We Use Your Personal Data

We process your personal data on the basis of legitimate interests, contractual necessity, legal obligation, and/or your explicit consent, as applicable under the PDPA. The specific purposes for which we use your data include:

• Responding to Enquiries: To process and respond to messages submitted through the contact form.
• Service Delivery: To provide information about our products, services, or offerings as requested.
• Communication: To follow up on your enquiry, provide updates, or clarify information.
• Website Operation and Maintenance: To ensure the Website functions correctly, securely, and efficiently.
• Analytics and Improvement: To understand how users interact with our Website and to improve its content, design, and performance.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, abuse, and other illegal activities.
• Legal Compliance: To comply with applicable Thai laws, regulations, court orders, or legal processes.
• Record-Keeping: To maintain accurate records of communications and transactions for administrative and legal purposes.

We will not use your personal data for purposes incompatible with those stated above without obtaining your prior consent or where otherwise permitted by applicable law.

5. Cookie Policy

Cookies are small text files stored on your device when you visit a website. They help websites function properly, remember your preferences, and provide information to website owners about how their site is used.

5.1 Types of Cookies We Use

• Strictly Necessary / Functional Cookies: These cookies are essential for the Website to operate correctly. They enable core features such as page navigation, form submission security (CSRF protection), and session management. These cookies cannot be disabled without affecting the fundamental functionality of the Website. No consent is required for strictly necessary cookies under the PDPA.
• Analytics Cookies (Optional): With your consent, we may use optional analytics cookies to gather anonymised data about how visitors use our Website — such as which pages are most visited, how long users stay, and how they navigate through the site. This information helps us improve the Website experience. You may opt out of analytics cookies at any time by adjusting your cookie preferences.
• Preference Cookies: These cookies remember your settings and preferences (such as language selection or display settings) to provide a more personalised experience on return visits.

5.2 Cookie Consent

In accordance with the PDPA and guidelines issued by Thailand’s Personal Data Protection Committee (PDPC), we will request your consent before placing any non-essential cookies on your device. You may withdraw your consent at any time by clearing your browser cookies or adjusting your browser settings. Please note that disabling certain cookies may affect the functionality of the Website.

5.3 Managing Cookies

You can manage and delete cookies through your browser settings. Most modern browsers allow you to:

• View which cookies have been set.
• Delete individual or all cookies.
• Block cookies from specific websites.
• Block all third-party cookies.
• Be notified when a cookie is being set.

For guidance on managing cookies in popular browsers, please visit the Help section of your browser or refer to resources such as www.allaboutcookies.org.

6. Third-Party Services

Our Website integrates certain third-party services to enhance performance, design, and functionality. These services may involve the transfer of limited technical data to third-party servers. We outline these services below:

6.1 Google Fonts

We use Google Fonts, a web font service operated by Google LLC (United States). When you visit our Website, your browser may send a request to Google’s servers to load font files. This request may include your IP address and browser information. Google’s use of this data is governed by its own Privacy Policy. To minimise data transfers, we endeavour where possible to self-host font files locally on our server.

6.2 Tailwind CSS CDN

Our Website may load Tailwind CSS stylesheets via a Content Delivery Network (CDN). CDN requests may result in your IP address being transmitted to CDN servers. The CDN provider’s own privacy policy governs the handling of such data. We use CDN services to improve Website loading speed and reliability.

6.3 Email and Hosting Service Providers

Contact form submissions are processed through our web hosting infrastructure and may be forwarded to email service providers for delivery. These providers process data solely as data processors under our instructions and are bound by appropriate data processing agreements.

6.4 Analytics Providers

Subject to your cookie consent, we may utilise analytics tools such as Google Analytics (operated by Google LLC) to collect anonymised data about Website usage patterns. Google Analytics uses cookies and similar technologies. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

We require all third-party service providers to implement appropriate technical and organisational measures to protect personal data and to process data only in accordance with our instructions.

7. How We Process Contact Form Submissions

When you submit a contact form on our Website, the following process takes place:

1. Your submitted data (name, email, phone, and message) is transmitted via an encrypted HTTPS connection to our web server.
2. The server-side PHP script processes the form data and validates the input to prevent spam and malicious submissions.
3. The data is forwarded to our designated business email address ([email protected]) for review and response.
4. A confirmation or acknowledgement may be sent to the email address you provided.
5. Your data is stored securely in our email system and, where applicable, in a CRM or administrative database for record-keeping purposes.
6. Authorised personnel review your message and respond within a reasonable timeframe, typically within 2 to 5 Thai business days.

We do not sell, rent, or otherwise commercially exploit your contact form data. It is used solely for the purpose of responding to your enquiry and maintaining legitimate business records.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Thai law, whichever is longer. Our specific retention periods are as follows:

• Contact Form Submissions: Retained for a period of three (3) years from the date of submission, or for as long as necessary to resolve your enquiry or maintain a business relationship with you.
• Server Log Data (including IP addresses): Retained for a maximum of ninety (90) days for security and technical diagnostic purposes, unless required to be retained longer for legal or investigative purposes.
• Analytics Data: Retained in anonymised or aggregated form for up to twenty-six (26) months, in line with standard analytics service configurations.
• Legal and Compliance Records: Retained for the period required by applicable Thai law (e.g., accounting records for five years under the Thai Accounting Act).

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. You may also request earlier deletion of your data; please refer to Section 10 (Your Rights) for further information.

9. Data Security

We implement a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your browser and our Website is protected using Secure Sockets Layer (SSL) / Transport Layer Security (TLS) encryption, indicated by the “https://” prefix in the Website URL.
• Access Controls: Access to personal data is restricted to authorised personnel on a need-to-know basis. All staff with access to personal data are bound by confidentiality obligations.
• Secure Server Infrastructure: Our Website is hosted on servers with firewalls, intrusion detection systems, and regular security updates.
• Input Validation and Anti-Spam Measures: Contact forms are protected by validation scripts and CAPTCHA or similar anti-spam technologies to prevent automated abuse.
• Regular Security Reviews: We periodically review our security practices and update them in response to new threats or vulnerabilities.
• Data Minimisation: We collect only the minimum amount of personal data necessary for the stated purpose.

Despite our best efforts, no method of transmission over the internet or electronic storage is completely secure. In the event of a personal data breach that is likely to adversely affect your rights and freedoms, we will notify the relevant Thai authorities and, where required, the affected individuals in accordance with the PDPA.

10. Your Rights Under Thai Law (PDPA)

Under Thailand’s Personal Data Protection Act B.E. 2562 (2019), you have the following rights with respect to your personal data:

• Right to Be Informed (Section 23 PDPA): You have the right to be informed about the collection, use, and disclosure of your personal data, including the purposes and legal basis for processing.
• Right of Access (Section 30 PDPA): You have the right to request access to the personal data we hold about you and to obtain a copy of such data.
• Right to Data Portability (Section 31 PDPA): Where technically feasible, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to have it transmitted to another data controller.
• Right to Rectification (Section 35 PDPA): You have the right to request that inaccurate, incomplete, or outdated personal data be corrected or updated.
• Right to Erasure / Right to Be Forgotten (Section 33 PDPA): You have the right to request the deletion or destruction of your personal data where it is no longer necessary for the purpose for which it was collected, where consent has been withdrawn, or where processing is unlawful.
• Right to Restrict Processing (Section 34 PDPA): You have the right to request that we limit or suspend the processing of your personal data in certain circumstances.
• Right to Object (Section 32 PDPA): You have the right to object to the processing of your personal data where processing is based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent (Section 19 PDPA): Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please submit a written request to us at [email protected] or contact us at the address listed in Section 2. We will respond to your request within thirty (30) days of receipt, in accordance with the PDPA. We may need to verify your identity before processing your request. In some cases, we may be unable to fulfil your request due to legal obligations or overriding legitimate interests; in such cases, we will explain the reason for our decision.

If you believe your rights under the PDPA have been violated, you have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand, established under the Office of the National Digital Economy and Society Commission (ONDE).

11. Legal Basis for Processing

Under the PDPA, we rely on the following legal bases for processing your personal data:

• Consent (Section 19 PDPA): Where you have given us explicit consent to process your data for a specific purpose (e.g., optional analytics cookies or marketing communications).
• Contractual Necessity (Section 24(3) PDPA): Where processing is necessary for the performance of a contract to which you are a party, or to take pre-contractual steps at your request.
• Legitimate Interests (Section 24(5) PDPA): Where processing is necessary for our legitimate interests (such as Website security, fraud prevention, and business record-keeping), provided such interests do not override your fundamental rights and freedoms.
• Legal Obligation (Section 24(1) PDPA): Where processing is necessary to comply with a legal obligation imposed on us under Thai law.

12. International Data Transfers

Our Website integrates services operated by companies located outside of Thailand (for example, Google LLC in the United States). When your data is transferred to third countries, we take steps to ensure that an adequate level of protection is in place, as required under Section 28 of the PDPA.

Such steps may include:

• Relying on adequacy decisions or standard contractual clauses where available.
• Ensuring that recipient organisations are bound by comparable data protection obligations.
• Obtaining your explicit consent to the international transfer where required.

Please note that countries outside Thailand may have different data protection laws. We endeavour to work only with reputable international service providers that implement strong data protection measures and comply with internationally recognised standards such as ISO 27001 or equivalent.

13. Children’s Privacy

Our Website is not directed to children under the age of 10 years (as defined under the PDPA for obtaining parental consent), and we do not knowingly collect personal data from children without verifiable parental or guardian consent.

If you are under 20 years of age in Thailand (a minor), certain data processing activities may require consent from your parent or legal guardian under Section 20 of the PDPA. If you are between the ages of 10 and 20, we may require parental or guardian consent before processing your personal data in certain circumstances.

If you believe that a child has submitted personal data to us without appropriate consent, please contact us immediately at [email protected]. Upon verification, we will take prompt steps to delete such data from our records.

14. Disclosure of Personal Data

We do not sell, trade, or rent your personal data to third parties. We may disclose your personal data only in the following limited circumstances:

• Service Providers: We may share data with trusted third-party service providers (such as hosting providers, email delivery services, and analytics platforms) who process data on our behalf and under our instructions, subject to appropriate data processing agreements.
• Legal Requirements: We may disclose personal data where required by Thai law, regulation, court order, or lawful government authority, including law enforcement agencies.
• Protection of Rights: We may disclose data where necessary to protect the rights, property, or safety of Digital Nomads TH, our clients, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our business assets, personal data may be transferred as part of the transaction, subject to equivalent privacy protections.

15. Changes to This Privacy Policy

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Website functionality. When we make material changes to this Policy, we will:

• Update the “Last Updated” date at the top of this page.
• Post a prominent notice on our Website homepage or via a banner notification for a reasonable period following the update.
• Where we hold your email address and the changes are material, we may notify you by email.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data. Your continued use of the Website following the posting of changes constitutes your acknowledgement of those changes. If you do not agree to the updated Policy, you should discontinue use of the Website and contact us to request deletion of your personal data.

16. Governing Law and Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of the Kingdom of Thailand, including but not limited to the Personal Data Protection Act B.E. 2562 (2019), the Computer Crimes Act B.E. 2550 (2007) as amended, and other applicable Thai legislation.

Any disputes arising from or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts of Thailand, unless otherwise required by mandatory law.

17. Contact Us

If you have any questions, concerns, requests, or complaints regarding this Privacy Policy or the way in which we handle your personal data, please do not hesitate to contact our designated privacy contact using the details below:

• Company: Digital Nomads TH (SERRA ROOFING CORP)
• Address: 2090 Acapulco Dr, Miramar, Florida, 33023-2633, United States
• Telephone: +17122143148
• Email: [email protected]
• Website: adgsasg1255.ch

We aim to respond to all privacy-related enquiries within 30 days from the date of receipt. For complex or high-volume requests, we may extend this period by an additional 30 days, in which case we will notify you of the extension and the reasons for it.

You also have the right to file a complaint with the Office of the Personal Data Protection Committee (PDPC), under the Ministry of Digital Economy and Society, Thailand:

• Website: www.pdpc.or.th
• Hotline: 02-142-1033

This Privacy Policy was prepared in good faith to comply with Thailand’s Personal Data Protection Act B.E. 2562 (2019) and applicable Thai data protection regulations. © Digital Nomads TH (SERRA ROOFING CORP). All rights reserved. Effective: 1 January 2025.