Privacy Policy

1. Data controller

The data controller is TropicaThai LLC, a company registered in Wyoming (United States), 30 N Gould St Ste N, Sheridan, WY 82801, operating under the Firmavio name.

For any question about your personal data, write to us at admin@tropicathai.com.

2. Representative in the European Union (Article 27 GDPR)

TropicaThai LLC will designate a representative established in the European Union, in accordance with Article 27 GDPR, before any prospecting activity begins. The representative's contact details will be published on this page as soon as the designation is made. In the meantime, you can send any question about the processing of your data directly to admin@tropicathai.com.

3. Data we process

We only collect the data our business actually needs:

• –Contact form: name, email address, optional phone number, business name and the content of your message.
• –Prospecting: professional contact details of local businesses (name, trade, address, email, phone), collected from publicly available sources — directories, registers and business websites. In accordance with Article 14 GDPR, our first message tells you where the data came from and contains a one-click opt-out link: your address is then added to a suppression list and never contacted again.
• –Customer and billing data: identity and contact details of the signatory, SIREN number, intra-EU VAT number where applicable, subscription and billing history. Card details are processed directly by Stripe and never pass through our servers.

4. Purposes and legal bases

Each processing activity rests on a specific legal basis:

• –Answering requests sent through the contact form — pre-contractual steps and legitimate interest (Articles 6(1)(b) and 6(1)(f) GDPR).
• –Commercial prospecting aimed at professionals — legitimate interest (Article 6(1)(f) GDPR), with a free and immediate right to object at any time.
• –Contract management, invoicing and payment — performance of the contract (Article 6(1)(b)) and compliance with our legal obligations, notably accounting and tax rules (Article 6(1)(c)).

5. Processors

We rely on technical providers acting as processors within the meaning of the GDPR:

• –Railway — hosting of the website and application (European region).
• –MongoDB Atlas — database.
• –Stripe — secure payment, subscription management and invoicing.

6. Transfers outside the European Union

Some of our providers, as well as TropicaThai LLC itself, are established in the United States. Every transfer is covered by an appropriate safeguard: the European Commission's standard contractual clauses or Data Privacy Framework certification, depending on the provider.

7. Retention periods

We do not keep your data longer than necessary:

• –Prospects who never replied: data deleted no later than 3 years after the last contact.
• –Contact requests that went no further: 3 years after the last exchange.
• –Customers: for the duration of the contract, then for as long as applicable legal obligations require (notably accounting and tax rules).

8. Your rights

You may exercise the following rights over your personal data at any time:

• –Access, rectification and erasure.
• –Restriction of processing and objection — including to prospecting, with no justification needed.
• –Portability of the data you provided to us.

To exercise a right, write to us at admin@tropicathai.com describing your request: we reply within one month at most.

If you believe your rights are not being respected, you can lodge a complaint with the CNIL, the French data protection authority: cnil.fr