We collect personal data only as necessary for providing services and fulfilling legal obligations, including:

• Identity Data: Full name, gender, date of birth, and profile picture.

• Contact Data: Delivery address, billing/tax invoice address, email address, and phone number.

• Account and Financial Data: Order details, purchase history, bank account details, or payment information.

• Technical and Usage Data: IP address, browser type, operating system, browsing history, cookies, and session duration on our websites.

• Marketing and Communication Data: Feedback, product interests, and your communication preferences.

We process your personal data under lawful bases for the following purposes:

• Service and Order Fulfillment: To process orders, payments, verify identity, and deliver coffee products/equipment via logistics service providers.

• Customer Support: To address inquiries, provide assistance, manage complaints, and notify delivery statuses.

• Service Improvement: To analyze consumer behavior to improve product quality, enhance website usability, and optimize user experience.

• Marketing and Communications: To deliver news, promotions, special privileges, and marketing activities (only with your prior consent).

• Legal Compliance: To comply with statutory obligations, accounting audits, fraud prevention, or lawful orders from regulatory authorities.

We may disclose your personal data to necessary third parties who maintain adequate data protection measures, including:

• Logistics and courier service providers.

• Payment gateways and financial institutions.

• IT, cloud storage, and web development service providers.

• Government agencies or law enforcement authorities as required by law.

In certain instances, your personal data may be transferred to servers or cloud service providers located outside Thailand. We ensure that destination countries maintain adequate personal data protection standards in compliance with applicable laws.

We retain your personal data only as long as necessary to fulfill the purposes set out in this policy or as required by applicable laws (such as tax and accounting regulations). Once the retention period expires, data will be erased, destroyed, or anonymized.

Under the Personal Data Protection Act (PDPA), you possess the following rights:

• Right to access and obtain a copy of your personal data.

• Right to request data rectification to keep information accurate and up to date.

• Right to request data erasure, destruction, or anonymization.

• Right to withdraw consent at any time (for consent-based processing).

• Right to object to or restrict processing.

To exercise your rights, please submit a request via our PDPA portal at https://a9shohm3.pdpaform.com/. We reserve the right to decline requests in accordance with statutory limitations.

Our websites tcbrcoffeeshop.com and thecoffeebeanroasting.com use cookies and similar technologies to remember preferences, analyze web traffic, and improve functionality. You can adjust your browser settings to reject cookies, though some features may become restricted.

We do not knowingly collect personal data from minors without parental consent. If we become aware of unauthorized collection of a minor's data, we will take steps to delete it promptly.

We implement appropriate technical and administrative security measures to prevent unauthorized access, loss, misuse, alteration, or disclosure of your personal data.

We reserve the right to update this policy periodically. Any changes will be posted on our websites and take effect immediately upon publication.

Contact Us

• The Coffee Bean Roasting Co., Ltd.

• Email: info@tcbrcoffee.com

• Websites: tcbrcoffeeshop.com & thecoffeebeanroasting.com

• PDPA Portal: https://a9shohm3.pdpaform.com/