Privacy Policy

1. Introduction and Commitment

At LAMMN (Brown Baking Co., Ltd. or "we", "our", "us"), we are committed to protecting the privacy and personal data of our users, visitors, and wholesale partners in full compliance with the Personal Data Protection Act of Thailand (PDPA) and general international privacy frameworks. This Privacy Policy details how we collect, use, process, and safeguard your personal information when you interface with our web app and B2B services.

2. Information We Collect

We collect personal and professional information necessary to facilitate wholesale business operations and communications:

• Business and Professional details: Contact name, business legal/registered name, business type (e.g., Cafe, Hotel, Restaurant), business size, and delivery address.
• Contact details: Business email address, telephone/mobile number, and online handles (e.g., Line ID).
• Product Interests: Specific artisanal items of interest, order sizes, custom bakery requirements, and messages sent via our inquiry form.
• Automatic Metadata: IP address, browser user assistant details, device information, and active user analytics captured via standard secure cookies.

3. How We Use Your Information

Your personal information is used exclusively under legitimate data handling processing principles for optimal business delivery:

• To evaluate, process, and onboard partners for wholesale orders and B2B baking collaborations.
• To communicate daily baker confirmations, dispatch notices, and delivery updates for never-frozen delivery.
• To manage invoicing, receipt allocations, and support commercial accounting operations.
• To refine the quality of our craft bake goods, website functionalities, and tailor special promotions.

4. Data Retention periods

We retain your personal data secure only as long as is strictly required to fulfill business commitments, satisfy corporate audit/tax laws, or until you formally request information erasure as authorized under current regulations.

5. Non-Disclosure & Data Protection

We run a strictly zero-selling policy on user data. We do not sell or lease your personal information. Trusted third parties (such as Stardeck infrastructure systems, secure temperature-controlled delivery partners, and analytics monitors) are permitted access solely to assist operations under strict non-disclosure terms.

We put in place robust administrative and technological cybersecurity standards to guarantee safe retention of records and prevent leaks, data alterations, or unauthorized intrusions.

6. Your PDPA & GDPR Privacy Rights

Under relevant laws including the Thailand Personal Data Protection Act, you hold valuable data rights:

• The right to access and request physical or digital copies of all personal data held by us.
• The right to rectify inaccurate, obsolete, or incomplete personal data records.
• The right to restrict, stop, or reject raw processing and data actions.
• The right to request immediate personal record destruction (Right to Erasure / to be Forgotten).
• The right to withdraw previously declared execution consent clearances at any time.

Please contact our Data Protection representative via Section 7 if you intend to exercise your rights.

7. Contact Information

For inquiries, data protection applications, or general policy suggestions, please connect with our staff at: