Privacy Policy

1. Introduction

Chomrinndhul ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website chomrinndhul.world and use our services.

We handle personal information in line with the Australian Privacy Act 1988 (Cth), including the Australian Privacy Principles, and other applicable data protection laws.

2. Data Controller Information

The data controller responsible for your personal data is:

• Company Name: Chomrinndhul
• Address: 188 Quarry St, The Range QLD 4700, Australia
• Email: inquiry@chomrinndhul.world

3. Personal Data We Collect

We may collect the following categories of personal data:

3.1 Information You Provide

• Contact information (name, email address, phone number)
• Order and transaction details
• Communications and correspondence with us
• Feedback and survey responses

3.2 Automatically Collected Information

• IP address and device information
• Browser type and version
• Operating system
• Pages visited and interaction data
• Referring website addresses
• Date and time of visits

4. Purposes of Processing

We process your personal data for the following purposes:

• Processing and fulfilling your orders
• Communicating with you about your orders and inquiries
• Providing customer support and responding to requests
• Improving our website, products, and services
• Sending marketing communications (with your consent)
• Complying with legal obligations
• Preventing fraud and ensuring security

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you have given explicit consent for specific processing activities
• Contract: When processing is necessary for the performance of a contract with you
• Legal Obligation: When processing is required to comply with applicable laws
• Legitimate Interests: When processing is necessary for our legitimate business interests, provided these do not override your rights

6. Data Sharing and Disclosure

We may share your personal data with:

• Service providers who assist in our operations (payment processors, shipping companies, IT services)
• Professional advisors (lawyers, accountants, auditors)
• Government authorities when required by law

We do not sell your personal data to third parties. Any third parties with whom we share data are contractually obligated to protect your information and use it only for specified purposes.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside of your residence. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by relevant authorities
• Adequacy decisions by data protection authorities
• Other legally recognized transfer mechanisms

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Order records: 7 years from the date of transaction (for tax and legal compliance)
• Customer inquiries: 3 years from the last interaction
• Marketing preferences: Until you withdraw consent
• Website analytics: 26 months

9. Your Rights

Under applicable data protection laws, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restriction: Request limitation of processing
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to certain processing activities
• Right to Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, please contact us using the details provided below.

9A. Australian Privacy Rights

If you are in Australia, you may request access to personal information we hold about you and request correction of inaccurate information. We will respond within a reasonable period in accordance with applicable law.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Secure access controls and authentication
• Regular security assessments and updates
• Staff training on data protection
• Incident response procedures

11. Cookies and Tracking Technologies

We use cookies and similar technologies on our website. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

12. Children's Privacy

Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such information, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

14. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with a supervisory authority. In Australia, you may contact the Office of the Australian Information Commissioner (OAIC).

We encourage you to contact us first so we can try to resolve your concern promptly and fairly.