Privacy Policy

Effective Date: 1 January 2025  |  Last Updated: 1 January 2025

This Privacy Policy describes how Future Living TH (legal name: DHAN KUBER INVESTMENTS LLC, hereinafter referred to as "we", "us", or "our") collects, uses, stores, discloses, and protects personal information obtained through our website thailandtomorrowday.com (the "Website"). We are committed to protecting your privacy and handling your personal data in a transparent, lawful, and responsible manner.

By accessing or using our Website, submitting any contact form, or otherwise engaging with our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms described herein, please discontinue use of the Website immediately.

This Policy is drafted in compliance with the Personal Data Protection Act B.E. 2562 (2019) ("PDPA") of Thailand, which came into full effect on 1 June 2022, and any subsequent amendments or supplementary regulations issued by the Personal Data Protection Committee ("PDPC") of Thailand.

1. Introduction and Identity of the Data Controller

DHAN KUBER INVESTMENTS LLC, operating under the brand name Future Living TH, is the Data Controller as defined under the PDPA. As Data Controller, we determine the purposes and means by which your personal data is processed.

Contact Details of the Data Controller:

• Company Name: Future Living TH (DHAN KUBER INVESTMENTS LLC)
• Website: thailandtomorrowday.com
• Address: 4200 N Tamiami Trl, Sarasota, Florida, 34234-3860, United States
• Phone: +17828263207
• Email: [email protected]

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, you may contact us at the details listed above or via the contact information provided in Section 14 of this Policy.

2. Personal Data We Collect

We collect personal data only to the extent necessary for the purposes described in this Policy. The categories of personal data we collect include:

2.1 Information You Provide Directly

When you submit a contact form, inquiry, or request through our Website, we may collect the following information:

• Full Name: To identify you and personalise our response.
• Email Address: To communicate with you and respond to your inquiry.
• Phone Number: To contact you via telephone where necessary or requested.
• Message Content: The text of your inquiry, question, request, or message, which may include additional personal details you choose to share voluntarily.

Providing this information is voluntary; however, failure to supply the required fields may prevent us from processing or responding to your inquiry.

2.2 Automatically Collected Technical Data

When you visit our Website, certain technical information may be collected automatically through cookies, server logs, and similar technologies, including:

• IP Address and approximate geographic location (country/city level).
• Browser type and version (e.g., Chrome, Safari, Firefox).
• Operating system used to access the Website.
• Pages visited, time spent on each page, and navigation paths.
• Referring URL (the webpage that linked you to our Website).
• Date and time of your visit.
• Device identifiers and screen resolution.

This data is collected primarily for functional purposes and, where you have given consent, for analytics to improve user experience.

2.3 Sensitive Personal Data

We do not intentionally collect sensitive personal data as defined under Section 26 of the PDPA, which includes data relating to race, ethnicity, political opinions, religious beliefs, sexual behaviour, criminal records, health data, disability, trade union membership, genetic data, or biometric data. If you inadvertently include such information in your message, we will not use it for any purpose beyond responding to your inquiry and will handle it with heightened protection.

3. How and Why We Process Your Personal Data

Under the PDPA, we must have a lawful basis for processing your personal data. We rely on the following legal bases:

• Contractual Necessity (Section 24(3) PDPA): Processing is necessary to take steps at your request prior to entering into a contract, or to perform a contract we have with you.
• Legitimate Interests (Section 24(5) PDPA): Processing is necessary for our legitimate business interests, including responding to inquiries, improving our Website, and protecting our legal rights, provided these interests are not overridden by your fundamental rights and freedoms.
• Consent (Section 19 PDPA): Where required (such as for optional analytics cookies), we will obtain your explicit, informed, and freely given consent before processing your data. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Legal Obligation (Section 24(1) PDPA): Where processing is required to comply with applicable Thai laws and regulations.

Specific purposes for which we process personal data include:

• Receiving, processing, and responding to contact form submissions and inquiries.
• Providing information about our properties, services, and offerings relevant to your request.
• Maintaining records of communications for quality assurance and follow-up.
• Analysing Website traffic and user behaviour (analytics), where consent is given.
• Improving Website content, functionality, and user experience.
• Complying with legal obligations under Thai law.
• Preventing fraud, misuse, or unauthorised access to our systems.

4. Contact Form Submissions — Detailed Processing Information

When you complete and submit a contact form on our Website, the following process occurs:

1. Your submission (name, email address, phone number, and message) is transmitted via a secure connection (HTTPS/TLS encryption) to our web server.
2. The submitted data is processed by a server-side PHP script, which formats and forwards your inquiry to our designated business email address.
3. Your message is reviewed by a member of our team, who will respond to your inquiry in a timely manner, typically within 1–3 business days.
4. Submitted data may be retained in our email system and, where applicable, entered into a customer relationship management (CRM) system for record-keeping and follow-up purposes.
5. We do not share, sell, rent, or otherwise disclose your form submission data to unauthorised third parties.

We implement appropriate safeguards to ensure that your data is handled securely throughout this process, as further described in Section 10 of this Policy.

5. Cookies and Tracking Technologies

Our Website uses cookies — small text files placed on your device — and similar tracking technologies to enhance Website functionality and, where you consent, to analyse usage patterns.

5.1 Types of Cookies We Use

• Strictly Necessary / Functional Cookies: These cookies are essential for the Website to function correctly. They enable core features such as security, session management, and form submission validation. These cookies cannot be disabled as the Website would not function without them. No consent is required for these cookies under Thai law.
• Analytics Cookies (Optional): Where you provide consent, we may use analytics cookies (such as those associated with Google Analytics or similar services) to collect aggregated, anonymised data about how visitors interact with our Website. This data helps us understand which pages are most popular, how users navigate the site, and where improvements can be made. You may opt out of analytics cookies at any time by adjusting your cookie preferences or browser settings.

5.2 Cookie Consent

In accordance with the PDPA and applicable Thai regulations, we will seek your consent before placing non-essential cookies on your device. Upon your first visit to the Website, you will be presented with a cookie notice allowing you to accept or decline optional analytics cookies. Your preference will be saved and respected during subsequent visits.

5.3 Managing Cookies

You may control and manage cookies through your browser settings. Most modern browsers allow you to refuse cookies, delete existing cookies, or alert you before a cookie is placed. Please note that disabling functional cookies may affect the performance of certain Website features. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

6. Third-Party Services and External Resources

Our Website may incorporate third-party services and resources that process certain data independently. We have taken steps to minimise data exposure, but we encourage you to review the privacy policies of these third parties:

6.1 Google Fonts

Our Website may load fonts from Google Fonts (operated by Google LLC, USA). When your browser requests a font file, Google's servers may record your IP address and browser details. Google states that it does not use this data to build user profiles or serve targeted advertising from font requests. For more information, see Google's Privacy Policy. To avoid this, we endeavour where possible to self-host fonts locally.

6.2 Tailwind CSS CDN

Our Website may load the Tailwind CSS stylesheet from a Content Delivery Network (CDN). CDN providers may log connection metadata (such as IP address and request timestamp) for security, performance monitoring, and abuse prevention. This is standard CDN operation and does not involve the processing of identifying personal data for commercial purposes.

6.3 Web Hosting Provider

Our Website is hosted on servers provided by our web hosting provider. Your IP address and browsing activity on our Website may be logged by the hosting provider's infrastructure for security and operational purposes. Our hosting provider acts as a Data Processor on our behalf and is bound by appropriate data processing agreements.

6.4 Email Service Providers

Contact form submissions are transmitted to our business email account via our email service provider. This service provider processes email data on our behalf as a Data Processor and is subject to appropriate confidentiality and data protection obligations.

We do not sell, trade, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes.

7. International Data Transfers

Some of the third-party services described in Section 6 (such as Google LLC) are operated by organisations based outside of Thailand, including in the United States and European Economic Area. When your data is transferred to, or processed in, a country outside Thailand, we ensure that adequate safeguards are in place in accordance with Section 28 of the PDPA.

Such safeguards may include:

• Transferring data only to countries that the Personal Data Protection Committee of Thailand has recognised as providing an adequate level of protection.
• Implementing Standard Contractual Clauses or equivalent contractual protections with the recipient.
• Relying on the data subject's explicit consent for the specific transfer, where appropriate.
• Transferring data where necessary for the performance of a contract entered into at your request.

Where feasible, we minimise international transfers by using locally hosted alternatives or technical measures to limit data exposure to overseas servers.

8. Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention guidelines are as follows:

• Contact form inquiries and correspondence: Retained for a period of 3 years from the date of last communication, to allow for appropriate follow-up and to protect our legitimate business interests.
• Analytics and technical log data: Retained for a maximum of 26 months in aggregated or anonymised form, after which it is deleted or permanently anonymised.
• Cookie preference records: Retained for 12 months, after which you will be prompted to restate your preferences.
• Legal and compliance records: Retained for the period required by applicable Thai law, which may be up to 10 years for certain categories of business records.

Upon expiry of the applicable retention period, personal data is securely deleted, anonymised, or destroyed in a manner that prevents unauthorised reconstruction.

9. Your Rights Under the PDPA

As a data subject under the Personal Data Protection Act B.E. 2562 (2019), you have the following rights with respect to your personal data:

• Right to be Informed (Section 23 PDPA): You have the right to be informed about the collection, use, and disclosure of your personal data, which is fulfilled through this Privacy Policy.
• Right of Access (Section 30 PDPA): You may request a copy of the personal data we hold about you and information regarding how it is processed.
• Right to Rectification (Section 35 PDPA): You may request that inaccurate, incomplete, or outdated personal data be corrected or updated.
• Right to Erasure (Section 33 PDPA): You may request the deletion or destruction of your personal data where it is no longer necessary for the purposes for which it was collected, where consent has been withdrawn, or where processing is unlawful. Please note that this right may be limited by legal obligations requiring retention.
• Right to Restrict Processing (Section 34 PDPA): You may request that we suspend the processing of your personal data in certain circumstances, such as when the accuracy of the data is contested.
• Right to Data Portability (Section 31 PDPA): Where technically feasible and where processing is based on consent or contractual necessity, you may request that we provide your personal data in a structured, commonly used, machine-readable format, or transmit it directly to another data controller.
• Right to Object (Section 32 PDPA): You may object to the processing of your personal data where processing is based on legitimate interests, or where data is used for direct marketing purposes.
• Right to Withdraw Consent (Section 19 PDPA): Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: If you believe that your rights under the PDPA have been violated, you have the right to lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) of Thailand.

To exercise any of the rights listed above, please submit a written request to us using the contact details in Section 14. We will respond to your request within 30 days of receipt, in accordance with the PDPA. We may require you to provide proof of identity before processing your request to protect against unauthorised disclosure.

10. Data Security Measures

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against loss, unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS/SSL Encryption: All data transmitted between your browser and our Website is encrypted using Transport Layer Security (TLS) to prevent interception during transmission.
• Secure Server Infrastructure: Our Website is hosted on servers maintained with industry-standard security configurations, including firewalls and intrusion detection systems.
• Access Controls: Access to personal data is restricted to authorised personnel only, on a need-to-know basis. Staff members who handle personal data are bound by confidentiality obligations.
• Regular Security Reviews: We periodically review and update our security practices to address emerging threats and vulnerabilities.
• Email Security: Business email accounts used to receive form submissions are protected by strong passwords, two-factor authentication, and encryption where available.
• Data Minimisation: We collect and retain only the minimum personal data necessary for the stated purposes.

Notwithstanding the above, no method of electronic transmission or storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security. In the event of a personal data breach that is likely to result in a high risk to the rights and freedoms of individuals, we will notify the PDPC within 72 hours of becoming aware of the breach and will inform affected data subjects without undue delay, in accordance with Section 37 of the PDPA.

11. Children's Privacy

Our Website and services are not directed at, and are not intended for use by, individuals under the age of 20 years (the age of majority in Thailand under the Civil and Commercial Code) without parental or guardian consent. We do not knowingly collect personal data from minors without appropriate consent.

Under the PDPA, the collection of personal data from a minor requires the consent of the minor's holder of parental responsibility. If you are a parent or guardian and believe that your child has provided us with personal data without appropriate consent, please contact us immediately at [email protected] and we will take prompt steps to delete such information from our records.

If we discover that we have inadvertently collected personal data from a minor without lawful consent, we will delete that data as quickly as reasonably possible.

12. Links to Third-Party Websites

Our Website may contain links to external websites operated by third parties. These links are provided for your convenience and information only. Future Living TH does not control, and is not responsible for, the privacy practices, content, or security of any third-party websites.

We encourage you to review the privacy policies of any third-party websites you visit. The inclusion of a link on our Website does not imply endorsement of, or affiliation with, the linked website or its operators.

13. Changes to This Privacy Policy

We may update, revise, or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable laws and regulations (including amendments to the PDPA or new PDPC guidelines), or operational requirements.

When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Post the revised Policy on our Website at thailandtomorrowday.com.
• Where required or appropriate, notify you directly by email or by a prominent notice on the Website.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. Your continued use of our Website after the effective date of any revised Policy constitutes your acknowledgement of the changes. Where changes require your renewed consent under the PDPA, we will seek such consent before processing your data under the new terms.

14. Contact Us — Privacy Inquiries and Data Subject Requests

If you have any questions about this Privacy Policy, wish to exercise your rights under the PDPA, or wish to make a complaint about our data handling practices, please contact our designated privacy point of contact:

• Company: Future Living TH (DHAN KUBER INVESTMENTS LLC)
• Address: 4200 N Tamiami Trl, Sarasota, Florida, 34234-3860, United States, Thailand
• Phone: +17828263207
• Email: [email protected]
• Website: thailandtomorrowday.com

Please clearly state in your communication that your request relates to a personal data / privacy matter under the PDPA, and provide sufficient detail to allow us to identify you and process your request efficiently. We will acknowledge receipt of your request within 7 business days and aim to provide a substantive response within 30 days, as required by the PDPA.

If you are not satisfied with our response, you have the right to escalate your complaint to the Office of the Personal Data Protection Committee (PDPC) of Thailand:

• Website: www.pdpc.or.th
• Address: Office of the PDPC, Ministry of Digital Economy and Society, 120 Moo 3, The Government Complex Commemorating His Majesty the King, Chaeng Wattana Road, Laksi, Bangkok 10210, Thailand

15. Governing Law and Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of the Kingdom of Thailand, including but not limited to the Personal Data Protection Act B.E. 2562 (2019) and all subordinate regulations, notifications, and guidelines issued thereunder by the Personal Data Protection Committee.

Any disputes arising out of or relating to this Privacy Policy or the processing of your personal data shall be subject to the exclusive jurisdiction of the competent courts of Thailand.

Effective Date: 1 January 2025. This Privacy Policy was prepared in good faith by DHAN KUBER INVESTMENTS LLC to comply with the Personal Data Protection Act B.E. 2562 (2019) of Thailand and reflects our genuine commitment to protecting your personal data and privacy.