Privacy Policy

Effective Date: 1 January 2025  |  Last Updated: 1 January 2025

This Privacy Policy explains how Gourmet Life TH (legal entity: 2DOR GOURMET ICE LLC, hereinafter referred to as “we”, “us”, or “our”) collects, uses, discloses, and protects personal data obtained through our website mytomorrowthailand.com (the “Website”). We are committed to safeguarding your privacy and handling your personal data in accordance with the Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) of Thailand, as well as any other applicable laws and regulations.

Please read this Privacy Policy carefully before using our Website or submitting any personal data to us. By accessing or using our Website, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree with any part of this Policy, please discontinue use of our Website immediately.

1. Introduction and Data Controller Identity

For the purposes of applicable data protection law, the data controller responsible for your personal data is:

• Trading Name: Gourmet Life TH
• Legal Name: 2DOR GOURMET ICE LLC
• Website: mytomorrowthailand.com
• Mailing Address: 5065 NW 74TH Ave Unit 1, Miami, Florida, 33166-5506, United States
• Telephone: +13148040031
• Email: [email protected]

As the data controller, we determine the purposes and means of processing your personal data and bear responsibility for ensuring that any processing activities are lawful, fair, and transparent. We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal data we collect through:

• Our Website at mytomorrowthailand.com and any associated subdomains;
• Contact forms, inquiry forms, or any other interactive features on our Website;
• Cookies and similar tracking technologies deployed on our Website;
• Any other means by which you voluntarily provide personal data to us.

This Policy does not apply to third-party websites, services, or applications that may be accessible via links on our Website. We encourage you to review the privacy policies of those third parties before submitting any personal data to them.

3. Personal Data We Collect

We collect only the personal data that is necessary and proportionate to achieve the purposes described in this Privacy Policy. The categories of personal data we may collect include:

3.1 Information You Provide Directly

When you complete a contact or inquiry form on our Website, we collect the following information:

• Full Name: Your first and/or last name, as provided in the form fields;
• Email Address: Your personal or business email address for correspondence;
• Telephone Number: Your contact phone number, including country code where provided;
• Message Content: The body of your inquiry, question, or request submitted through our contact form.

You are not legally required to provide this information; however, failure to do so may prevent us from responding to your inquiry or providing the service you have requested.

3.2 Information Collected Automatically

When you visit our Website, certain data is collected automatically through standard web technologies:

• IP Address: Your internet protocol address, which may indicate your approximate geographic location;
• Browser Type and Version: The web browser software and version you use to access our Website;
• Operating System: The operating system of the device you use;
• Referring URL: The web address from which you arrived at our Website;
• Pages Visited: A record of which pages and sections of our Website you accessed, and in what order;
• Date and Time of Access: A timestamp recording when you visited our Website;
• Cookie Data: Data stored by cookies and similar technologies, as described in Section 6 below.

This automatically collected data is primarily used for the proper technical functioning of our Website, security monitoring, and aggregate statistical analysis. It is generally not used to identify you personally unless combined with other information you have provided.

3.3 Sensitive Personal Data

We do not intentionally collect any sensitive personal data (as defined under the PDPA), including but not limited to data relating to race, ethnicity, political opinions, religious beliefs, criminal records, health data, biometric data, or any other specially protected category. Please do not include such information in any message or form submission directed to us. If we inadvertently receive such data, we will take reasonable steps to delete it promptly.

4. Lawful Basis for Processing Personal Data

Under the PDPA and applicable Thai law, we must have a valid lawful basis for processing your personal data. The lawful bases we rely upon are as follows:

• Consent (Section 19, PDPA): Where you have freely given, specific, informed, and unambiguous consent to the processing of your personal data for one or more specific purposes — for example, when you submit a contact form and agree to our Privacy Policy;
• Contractual Necessity: Where processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract;
• Legitimate Interests (Section 24(5), PDPA): Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests — for example, for IT security and fraud prevention, or for improving our Website;
• Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject under Thai law.

You may withdraw your consent at any time by contacting us using the details provided in Section 13 of this Policy. Please note that withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

5. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

• Responding to Inquiries: To read, process, and respond to messages and inquiries submitted via our contact forms;
• Customer Service: To provide you with information about our products, services, and promotions that you have requested;
• Website Operation and Improvement: To maintain, administer, and improve the technical functioning and content of our Website;
• Security and Fraud Prevention: To monitor and protect our Website against unauthorised access, misuse, and potential fraud;
• Analytics: To conduct aggregate statistical analysis of Website usage patterns, where you have consented to the use of analytics cookies;
• Legal Compliance: To comply with applicable legal and regulatory obligations, and to cooperate with lawful requests from government authorities;
• Record Keeping: To maintain accurate business and communication records as required by Thai commercial law.

We will not use your personal data for purposes that are incompatible with those stated above without giving you prior notice and, where required, obtaining your consent.

6. Cookies and Tracking Technologies

Our Website uses cookies and similar technologies to enhance your experience and to collect information about how the Website is used. A cookie is a small text file placed on your device by a web server when you access a website. Cookies cannot harm your device or access other data stored on it.

6.1 Types of Cookies We Use

• Strictly Necessary / Functional Cookies: These cookies are essential for the Website to function correctly. They enable core features such as page navigation, security, and access to certain areas. These cookies do not collect any personal data for marketing purposes and cannot be disabled without affecting Website functionality. No consent is required for strictly necessary cookies under Thai law;
• Analytics Cookies (Optional): With your consent, we may use optional analytics cookies to collect aggregated information about how visitors interact with our Website — for example, which pages are most frequently visited, how long users spend on the site, and where visitors come from. This helps us improve the Website's content and user experience. These cookies will only be placed after you provide your explicit consent via our cookie consent notice.

6.2 Managing Your Cookie Preferences

You may control and manage cookies through the following means:

• Browser Settings: Most modern web browsers allow you to refuse or delete cookies through your browser settings. Please consult your browser’s help documentation for guidance;
• Cookie Consent Banner: Upon your first visit to our Website, you will be presented with a cookie consent notice through which you may accept or decline optional analytics cookies;
• Opt-Out Tools: Where available, you may use third-party opt-out tools to withdraw consent from specific analytics providers.

Please be aware that disabling certain cookies may affect the functionality of our Website and your user experience.

7. Third-Party Services and External Resources

Our Website may incorporate services and resources provided by third parties. When you access our Website, your browser may automatically interact with these third-party services. The relevant third-party providers have their own privacy policies, and we encourage you to review them. The third-party services currently integrated into our Website include:

• Google Fonts (Google LLC): Our Website uses web fonts provided by Google Fonts. When you load a page containing Google Fonts, your browser may send a request to Google’s servers to retrieve the font files. This request may transmit your IP address and browser information to Google. Google’s use of this data is governed by Google’s Privacy Policy, available at https://policies.google.com/privacy. To minimise this data transfer, we endeavour to self-host fonts where technically practicable;
• Tailwind CSS CDN: Our Website may load stylesheets from the Tailwind CSS content delivery network (CDN). When your browser fetches these resources, standard network request data including your IP address may be processed by the CDN provider. We encourage you to review the applicable CDN provider’s privacy policy for further details;
• Email Service Provider: Form submissions made through our Website are transmitted to our designated email inbox via a server-side email processing system. We use a reputable email service provider that operates under appropriate data processing agreements to ensure your data is handled securely.

We do not sell, trade, or otherwise share your personal data with third parties for their own marketing purposes. Any sharing of data with third parties is limited to what is strictly necessary for the operation of our Website and services, and is conducted under appropriate contractual safeguards.

8. International Data Transfers

As a business operating in Thailand, we primarily process your personal data within Thailand. However, some of the third-party services described in Section 7 (such as Google LLC for Google Fonts) may process data on servers located outside of Thailand, including in the United States or other jurisdictions.

Where personal data is transferred outside Thailand, we take steps to ensure that such transfers comply with the requirements of the PDPA and any applicable ministerial notifications. Specifically, we ensure that:

• Any recipient country or international organisation provides an adequate standard of personal data protection, as determined by the Thai Personal Data Protection Committee; or
• Appropriate contractual safeguards are in place, such as standard contractual clauses or binding corporate rules approved under Thai law; or
• The transfer is necessary for the performance of a contract to which you are a party, or you have given explicit consent to the transfer after being informed of the risks associated with such transfers to countries lacking adequate protection.

If you have any questions about international data transfers, please contact us using the information in Section 13 of this Policy.

9. Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, to resolve disputes, and to enforce our agreements. Our specific retention periods are as follows:

• Contact Form Submissions: Personal data submitted through our contact forms (name, email, phone number, and message content) is retained for a period of three (3) years from the date of submission, or for as long as is necessary to respond to and close your inquiry. After this period, data will be securely deleted or anonymised;
• Server Log Data: Automatically collected technical data (including IP addresses and access logs) is retained for up to twelve (12) months for security and diagnostic purposes, after which it is deleted;
• Cookie Data: Functional session cookies expire at the end of your browsing session. Persistent cookies have specific expiry periods as set by the cookie issuer, typically ranging from thirty (30) days to two (2) years;
• Legal Compliance Records: Where we are required to retain data under Thai commercial, tax, or other applicable law, we will retain such data for the minimum period required by that law, and then securely delete it.

At the end of the applicable retention period, personal data will be securely erased or anonymised using industry-standard methods to prevent unauthorised recovery.

10. Your Rights Under Thai Law (PDPA)

Under the Personal Data Protection Act B.E. 2562 (2019), you as a data subject have the following rights with respect to your personal data. We are committed to respecting and facilitating the exercise of these rights:

• Right to be Informed (Section 23, PDPA): You have the right to be informed about the collection and use of your personal data at the time of collection. This Privacy Policy constitutes our fulfilment of this obligation;
• Right of Access (Section 30, PDPA): You have the right to request access to the personal data we hold about you and to receive a copy of such data, along with information about how it is being processed;
• Right to Data Portability (Section 31, PDPA): Where technically feasible and where processing is based on your consent or on a contract, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another data controller;
• Right to Rectification (Section 35, PDPA): You have the right to request that we correct any inaccurate, incomplete, or misleading personal data that we hold about you;
• Right to Erasure / Right to be Forgotten (Section 33, PDPA): You have the right to request the deletion or destruction of your personal data in certain circumstances, for example where the data is no longer necessary for the purpose for which it was collected, or where you withdraw your consent and there is no other lawful basis for processing;
• Right to Restrict Processing (Section 34, PDPA): You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while we verify the accuracy of data you have disputed;
• Right to Object (Section 32, PDPA): You have the right to object to the processing of your personal data where processing is based on our legitimate interests, where we process data for direct marketing purposes, or where we process data for scientific, historical, or statistical research purposes;
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal;
• Right to Lodge a Complaint: You have the right to lodge a complaint with the Personal Data Protection Committee of Thailand (or any designated supervisory authority) if you believe that our processing of your personal data violates the PDPA or other applicable Thai laws.

To exercise any of the rights listed above, please submit a written request to us using the contact details provided in Section 13 of this Policy. We will respond to your request within thirty (30) days of receipt, in accordance with the PDPA. We may need to verify your identity before processing your request to ensure we do not disclose data to unauthorised individuals.

We will not charge a fee for handling data subject rights requests unless they are manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable administrative fee or to refuse to act on the request, as permitted under Thai law.

11. Data Security Measures

We take the security of your personal data seriously and implement a range of technical, administrative, and physical safeguards to protect your data against unauthorised access, disclosure, alteration, loss, or destruction. Our security measures include:

• SSL/TLS Encryption: Our Website uses Secure Sockets Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our web server. You can verify this by the padlock icon in your browser's address bar;
• Access Controls: Access to personal data is restricted to authorised personnel who require it for legitimate business purposes. We use role-based access controls and require strong authentication credentials;
• Secure Email Handling: Form submissions are transmitted and stored using secure email protocols and services that implement industry-standard encryption at rest and in transit;
• Regular Security Reviews: We periodically review and update our security practices and infrastructure to address emerging threats and vulnerabilities;
• Staff Training: Personnel who handle personal data receive appropriate training on data protection obligations and security practices;
• Data Minimisation: We collect only the minimum amount of personal data necessary for the stated purposes, reducing the risk associated with data handling.

While we implement robust security measures, please be aware that no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of data transmitted over the internet. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant Thai authorities in accordance with the notification requirements of the PDPA.

12. Children's Privacy

Our Website and services are not directed at children under the age of 20 years (the age of legal majority in Thailand). We do not knowingly collect personal data from minors without the consent of a parent or legal guardian. Under the PDPA, where a data subject is a minor (under 20 years) or a person of limited legal capacity, valid consent must be obtained from the person with parental authority or the legal guardian.

If you are a parent or guardian and you believe that your child has provided us with personal data without your consent, please contact us immediately using the contact details in Section 13. We will take prompt steps to delete such data from our records.

If you are under 20 years of age, please do not submit any personal data through our Website without the explicit consent and supervision of your parent or legal guardian.

13. Contact Us — Privacy Inquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or our handling of your personal data, please do not hesitate to contact us. We aim to respond to all inquiries promptly and within the timeframes required by applicable law.

You may contact our privacy team through any of the following means:

• Company Name: Gourmet Life TH (2DOR GOURMET ICE LLC)
• Postal Address: 5065 NW 74TH Ave Unit 1, Miami, Florida, 33166-5506, United States
• Telephone: +13148040031
• Email Address: [email protected]
• Website: mytomorrowthailand.com

When contacting us regarding a data subject rights request, please include sufficient information to allow us to identify your records and verify your identity. This may include your full name, email address used in correspondence with us, and a description of your specific request or concern.

If you are not satisfied with our response to your privacy inquiry, you have the right to escalate your complaint to the Personal Data Protection Committee of Thailand, which is the statutory supervisory authority responsible for overseeing compliance with the PDPA.

14. Links to External Websites

Our Website may contain links to external websites, social media platforms, or other online services operated by third parties. This Privacy Policy applies solely to our Website and does not extend to any third-party websites. We have no control over the content, privacy practices, or data handling of external websites and accept no responsibility or liability for them. We strongly encourage you to review the privacy policies of any third-party websites you visit.

15. Changes to This Privacy Policy

We may update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable laws and regulations, or the services we provide. When we make material changes to this Policy, we will notify you by:

• Posting the updated Privacy Policy on this page with a revised “Last Updated” date at the top of the page;
• Where required by law or where the changes are significant, providing you with a more prominent notice (such as a banner notification on our Website or, where we hold your email address, an email notification).

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. Your continued use of our Website after the effective date of any changes constitutes your acknowledgement of the updated Privacy Policy. If you do not agree with the changes, please discontinue use of our Website and contact us to request deletion of your personal data where applicable.

In the event of any conflict between different language versions of this Privacy Policy, the English language version shall prevail.

16. Governing Law and Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of the Kingdom of Thailand, including but not limited to the Personal Data Protection Act B.E. 2562 (2019) and any ministerial regulations, notifications, and guidelines issued thereunder. Any disputes arising out of or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts of Thailand.

We are committed to full compliance with all applicable Thai data protection laws and will cooperate with the Personal Data Protection Committee and other competent authorities as required.

Gourmet Life TH (2DOR GOURMET ICE LLC) — Privacy Policy — Effective 1 January 2025. All rights reserved. This document constitutes a legally binding statement of our data protection practices.