Digital Nomads TH

Privacy Policy – Digital Nomads TH

Privacy Policy

Effective Date: 1 January 2025  |  Last Updated: 1 January 2025

This Privacy Policy is issued by ORLANDO FERNANDEZ DELGADO LLC, operating under the brand name Digital Nomads TH (collectively referred to as “we”, “us”, or “our”), the owner and operator of the website accessible at tomorrowthailand.digital (the “Website”). We are committed to protecting the personal data of every individual who visits, uses, or interacts with our Website in accordance with the Personal Data Protection Act B.E. 2562 (2019) (“PDPA”) of Thailand and all associated ministerial regulations and notifications issued thereunder.

Please read this Privacy Policy carefully. By accessing or using our Website, submitting any contact form, or otherwise providing us with your personal information, you acknowledge that you have read, understood, and agree to the practices described in this document. If you do not agree with any part of this Privacy Policy, please discontinue use of the Website immediately.

1. Identity and Contact Details of the Data Controller

For the purposes of the PDPA and this Privacy Policy, the Data Controller is:

  • Legal Entity Name: ORLANDO FERNANDEZ DELGADO LLC
  • Brand Name: Digital Nomads TH
  • Website: tomorrowthailand.digital
  • Registered Address: 11240 SW 19TH St, Miramar, Florida, 33025-6618, United States
  • Telephone: +18257862083
  • Email: [email protected]

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, you may contact us directly using the details above. We will endeavour to respond to all privacy-related inquiries within 30 days of receipt.

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal data collected, processed, stored, or otherwise handled by us through your use of the Website, including but not limited to:

  • Visiting and browsing pages of the Website;
  • Submitting a contact or inquiry form;
  • Sending us an email or calling us directly;
  • Interacting with any embedded third-party tools or services on the Website;
  • Any other communication you initiate with us electronically or otherwise.

This Policy does not apply to third-party websites, platforms, or services that may be linked from our Website. We encourage you to review the privacy policies of any third-party services you visit.

3. Personal Data We Collect

We collect the minimum amount of personal data necessary to respond to your inquiries and operate our Website effectively. The categories of personal data we may collect include:

3.1 Data You Provide Directly

When you complete and submit a contact form on our Website, we collect the following information:

  • Full Name: So that we may address you appropriately in our response;
  • Email Address: As our primary channel for replying to your inquiry;
  • Phone Number: If provided, so that we may contact you by telephone if necessary;
  • Message Content: The details of your inquiry, question, or request.

Providing your name and email address is necessary to process your inquiry. Providing a phone number is optional. If you choose not to supply required fields, we may be unable to respond to your request.

3.2 Data Collected Automatically

When you visit our Website, certain technical data may be collected automatically through cookies and server logs, including:

  • IP Address: For security, fraud prevention, and general analytics;
  • Browser Type and Version;
  • Operating System;
  • Referring URL (the page you visited before arriving at our Website);
  • Pages Viewed and Time Spent;
  • Date and Time of Access.

This technical data is generally non-identifying on its own but may constitute personal data when combined with other information. We treat it with the same level of care as other personal data.

3.3 Sensitive Personal Data

We do not intentionally collect any sensitive personal data as defined under Section 26 of the PDPA (such as data concerning race, ethnicity, political opinions, religious beliefs, criminal records, health data, disability, or biometric data). Please do not submit such information through our contact forms or any other channel on this Website.

4. Legal Basis for Processing Your Personal Data

Under the PDPA, we must have a valid legal basis for processing your personal data. Depending on the nature of the processing activity, we rely on the following lawful bases:

  • Consent (Section 19 PDPA): Where you have freely, specifically, and unambiguously consented to processing — for example, by ticking a consent checkbox on our contact form or by accepting optional analytics cookies;
  • Contractual Necessity (Section 24(3) PDPA): Where processing is necessary to take steps at your request prior to entering into an agreement, or to perform a contract with you;
  • Legitimate Interests (Section 24(5) PDPA): Where processing is necessary for our legitimate business interests — such as website security, fraud prevention, and improving our services — provided those interests are not overridden by your rights and freedoms;
  • Legal Obligation (Section 24(6) PDPA): Where processing is required to comply with a legal obligation to which we are subject under Thai law.

5. How We Use Your Personal Data

We use the personal data we collect for the following specific purposes:

  • To respond to your inquiries submitted via our contact form, email, or telephone;
  • To provide information about our services that you have requested;
  • To manage and improve the Website's performance, functionality, and user experience;
  • To ensure the security of the Website and detect, investigate, and prevent fraudulent or malicious activity;
  • To comply with applicable Thai laws, regulations, court orders, or other legal processes;
  • To analyse aggregated, anonymised usage patterns to understand how visitors interact with the Website (where analytics cookies are enabled with your consent);
  • To communicate important changes to our services or this Privacy Policy.

We will not sell, rent, or trade your personal data to any third party for marketing purposes. We will not use your data for automated decision-making or profiling that produces legal or similarly significant effects on you.

6. How Contact Form Submissions Are Processed

When you submit a contact form on our Website, the following process occurs:

  1. Your form data (name, email, phone, and message) is transmitted over an encrypted HTTPS connection to our web server.
  2. The data is processed by a server-side script and delivered to our designated internal email address for review and response.
  3. A copy of your submission may be stored temporarily in our email system and/or server logs.
  4. A member of our team will review your message and respond to you using the contact details you provided, typically within 1–3 Thai business days.
  5. Your submission data is stored securely and is accessible only to authorised personnel who require it to handle your inquiry.

We do not use your contact form submissions for any purpose beyond responding to your inquiry and maintaining our internal records as required by law or legitimate business practice.

7. Cookies and Similar Tracking Technologies

Our Website uses cookies and similar technologies to enhance your browsing experience and gather statistical insights. A cookie is a small text file placed on your device when you visit a website. Cookies allow the website to remember certain information about your visit.

7.1 Types of Cookies We Use

  • Strictly Necessary / Functional Cookies: These cookies are essential for the Website to function correctly. They enable core features such as page navigation, security, and form submission. These cookies do not require your consent and cannot be disabled without impairing the Website's functionality.
  • Analytics Cookies (Optional): With your prior consent, we may use analytics cookies to collect anonymised data about how visitors interact with the Website — such as which pages are visited most often and how long visitors spend on each page. This data helps us improve the Website over time. You may withdraw your consent to analytics cookies at any time.

7.2 Managing Your Cookie Preferences

When you first visit our Website, you will be presented with a cookie consent notice that allows you to accept or decline optional analytics cookies. You may also manage or withdraw your cookie preferences at any time by adjusting your browser settings. Please note that disabling all cookies may affect the functionality of certain features of the Website.

Most modern browsers allow you to view, manage, and delete cookies through the browser's settings menu. For further guidance, please visit your browser's help documentation.

8. Third-Party Services and External Resources

Our Website integrates certain third-party resources and services that may process technical data about your visit. These include:

8.1 Google Fonts

We use Google Fonts, a service provided by Google LLC (USA), to display custom typefaces on the Website. When your browser loads a page, it may automatically send a request to Google's servers to retrieve font files. This request may include your IP address and browser information. Google's use of this data is governed by Google's Privacy Policy. Where possible, we endeavour to serve fonts locally to minimise external data transmission.

8.2 Tailwind CSS CDN

Our Website may load the Tailwind CSS framework from a Content Delivery Network (CDN). This may result in a network request to CDN servers, which could include your IP address and browser metadata. CDN providers typically have their own data processing terms and privacy policies, which we encourage you to review.

8.3 Hosting and Infrastructure Providers

Our Website is hosted on infrastructure provided by third-party hosting companies. These providers process technical data (such as server logs and IP addresses) as part of delivering our Website to you. We ensure that any hosting or infrastructure providers we engage are contractually bound to process your data securely and only for purposes we specify.

8.4 No Third-Party Advertising

We do not display third-party advertising on our Website and do not share your personal data with advertising networks.

9. International Data Transfers

As described above, certain third-party services we use (such as Google Fonts and CDN providers) may be based outside of Thailand and may process your data in other countries, including the United States and European Union member states. Under the PDPA, the transfer of personal data to a foreign country is permissible only where that country has adequate personal data protection standards, or where appropriate safeguards are in place (such as contractual clauses or binding corporate rules).

Where we or our service providers transfer personal data internationally, we take steps to ensure such transfers comply with the requirements of the PDPA and any applicable regulations issued by the Personal Data Protection Committee of Thailand. By using our Website, you acknowledge that your data may be processed in countries outside Thailand. We will always ensure appropriate protections are in place to safeguard your data during such transfers.

10. Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Thai law. Specific retention periods are as follows:

  • Contact Form Submissions: Data submitted through our contact forms (name, email, phone, message) is retained for a maximum of 2 years from the date of submission, unless a longer retention period is required for legal, regulatory, or dispute resolution purposes;
  • Email Correspondence: Emails and related records are retained for a maximum of 3 years, in accordance with general business record-keeping practices under Thai commercial law;
  • Server and Access Logs: Automatically collected technical data (such as IP addresses and access logs) is retained for a maximum of 90 days for security and fraud prevention purposes;
  • Analytics Data: Where analytics are enabled, aggregated and anonymised analytics data may be retained for up to 26 months.

Upon expiry of the applicable retention period, personal data is securely deleted, anonymised, or destroyed in accordance with our internal data disposal procedures.

11. Data Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include:

  • HTTPS Encryption: All data transmitted between your browser and our Website is encrypted using Transport Layer Security (TLS);
  • Access Controls: Access to personal data is restricted to authorised personnel only, on a need-to-know basis;
  • Secure Email Handling: Contact form submissions are transmitted and stored using secure email infrastructure;
  • Regular Security Reviews: We periodically review our systems and practices to identify and address potential security vulnerabilities;
  • Third-Party Vetting: We take steps to ensure that third-party service providers who handle personal data on our behalf maintain appropriate security standards.

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. In the unlikely event of a personal data breach that is likely to affect your rights and freedoms, we will notify you and the relevant Thai authorities in accordance with the requirements of the PDPA.

12. Your Rights Under the PDPA

The Personal Data Protection Act B.E. 2562 (2019) grants you a number of rights in relation to your personal data. You may exercise the following rights by contacting us using the details provided in Section 1:

  • Right of Access (Section 30 PDPA): You have the right to request confirmation of whether we hold personal data about you, and to obtain a copy of that data along with information about how it is being processed;
  • Right to Rectification (Section 35 PDPA): You have the right to request that we correct any inaccurate, incomplete, or misleading personal data we hold about you;
  • Right to Erasure / Right to be Forgotten (Section 33 PDPA): You have the right to request the deletion or destruction of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis for processing applies;
  • Right to Restriction of Processing (Section 34 PDPA): You have the right to request that we suspend the processing of your personal data in certain circumstances — for example, while we verify the accuracy of the data or consider an objection you have raised;
  • Right to Data Portability (Section 31 PDPA): Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to have that data transmitted to another data controller where technically feasible;
  • Right to Object (Section 32 PDPA): You have the right to object to the processing of your personal data where we rely on legitimate interests as our legal basis, or where processing is for direct marketing purposes;
  • Right to Withdraw Consent (Section 19 PDPA): Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal;
  • Right to Lodge a Complaint: You have the right to lodge a complaint with the Personal Data Protection Committee (PDPC) of Thailand if you believe that your personal data has been processed in a manner that is inconsistent with the PDPA.

We will respond to all verifiable rights requests within 30 days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it. We will not charge a fee for exercising your rights unless your request is manifestly unfounded or excessive.

13. Children's Privacy

Our Website and services are not directed at, and are not intended for use by, children under the age of 20 years (the age of majority in Thailand for the purposes of the PDPA, which requires parental or guardian consent for minors). We do not knowingly collect personal data from individuals under the age of 20 without verified parental or guardian consent.

If you are a parent or guardian and believe that your child has submitted personal data to us without your consent, please contact us immediately at [email protected]. We will take prompt steps to delete such data from our systems upon verification of your request.

14. Links to Third-Party Websites

Our Website may contain links to external websites operated by third parties. These links are provided for your convenience and information. We have no control over the content or privacy practices of third-party websites and are not responsible for their privacy policies or data handling practices. We encourage you to review the privacy policy of any external website you visit before providing any personal information.

15. Data Protection Officer

Depending on the nature and scale of our data processing activities, we may be required under the PDPA to appoint a Data Protection Officer (DPO). Where a DPO has been appointed, their contact details will be published here. In the interim, all privacy-related inquiries should be directed to our general contact address provided in Section 1 of this Policy. We are committed to ensuring that a named point of contact for privacy matters is always available to our users.

16. PDPA Compliance Statement

ORLANDO FERNANDEZ DELGADO LLC is committed to full compliance with the Personal Data Protection Act B.E. 2562 (2019) and all subordinate legislation, guidelines, and notifications issued by the Personal Data Protection Committee and the Office of the PDPC of Thailand. Our compliance programme includes:

  • Maintaining a Record of Processing Activities (ROPA) as required under Section 39 of the PDPA;
  • Implementing appropriate technical and organisational security measures as required under Section 37 of the PDPA;
  • Establishing clear data retention and disposal policies;
  • Training relevant personnel on their data protection obligations;
  • Conducting periodic reviews of our data processing activities to ensure ongoing compliance;
  • Maintaining appropriate contractual arrangements with third-party processors (data processing agreements).

17. Changes to This Privacy Policy

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. When we make material changes to this Policy, we will:

  • Update the “Last Updated” date at the top of this page;
  • Display a prominent notice on our Website homepage or via a banner informing visitors of the update;
  • Where we hold your email address and the changes are significant, we may send you a direct notification by email.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data. Your continued use of the Website following the posting of changes constitutes your acknowledgment of the updated Policy. If you do not agree with the revised Policy, please discontinue use of the Website.

18. Governing Law and Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of the Kingdom of Thailand, including but not limited to the Personal Data Protection Act B.E. 2562 (2019) and the Computer Crimes Act B.E. 2550 (2007) and its amendments. Any disputes arising in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts of Thailand.

19. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please do not hesitate to contact us:

  • Company: ORLANDO FERNANDEZ DELGADO LLC (trading as Digital Nomads TH)
  • Address: 11240 SW 19TH St, Miramar, Florida, 33025-6618, United States
  • Email: [email protected]
  • Telephone: +18257862083
  • Website: tomorrowthailand.digital

We are dedicated to addressing your privacy concerns promptly and transparently. All communications regarding personal data rights or privacy inquiries will be treated with strict confidentiality.

This Privacy Policy was prepared in good faith to reflect the data processing practices of ORLANDO FERNANDEZ DELGADO LLC and to comply with the Personal Data Protection Act B.E. 2562 (2019) of Thailand. It constitutes a legally binding document between you and ORLANDO FERNANDEZ DELGADO LLC. © 2025 ORLANDO FERNANDEZ DELGADO LLC. All rights reserved.