Privacy Policy
This page explains how Lanna Labs collects, uses, and looks after personal information when you visit our website or get in touch with us. We aim to be straightforward about our practices so you can make informed choices.
1. Introduction
Lanna Labs ("we", "our", or "us") is an AI integration consultancy based in Chiang Mai, Thailand. We respect the privacy of everyone who visits our website or contacts us about our services, and we take reasonable steps to look after the information you share with us.
This Privacy Policy describes what personal information we may collect, why we collect it, how it is used, and how long we keep it. It applies to data collected through our website at lannalab.club and through direct correspondence such as email or phone.
Our practices are informed by Thailand's Personal Data Protection Act B.E. 2562 (PDPA) and general principles of responsible data handling. If you have any questions about this policy, please contact us before using our website or submitting your details.
Data Controller
Lanna Labs · 64 Charoenrat Road, Wat Ket, Chiang Mai 50000, Thailand
Privacy enquiries: [email protected]
2. Data We Collect
Information you provide directly
When you fill in our contact form or reach us by email or phone, we may receive:
- Your name
- Email address
- Phone number (if you choose to provide one)
- Any details you include in your message
Information collected automatically
When you visit our website, standard server and analytics tools may collect basic technical information, such as:
- Browser type and version
- Approximate device type (desktop, mobile, tablet)
- Pages visited and time spent on each
- Referring page or search term that brought you here
This data is aggregated and is not linked to your identity without your consent.
Legal basis and retention
| Data type | Legal basis | Retention |
|---|---|---|
| Contact form data | Consent / Legitimate interest | Up to 24 months |
| Client correspondence | Contractual necessity | Duration of engagement + 3 years |
| Analytics data | Legitimate interest | Up to 14 months |
| Cookie preferences | Consent | 12 months |
3. How We Use Your Data
We use the information we collect only for purposes that are reasonably connected to running our consultancy and communicating with you. These include:
- Responding to your enquiry and discussing how our services might help
- Delivering and managing agreed services once an engagement begins
- Sending relevant follow-up information you have asked for
- Improving the quality and content of our website using aggregated analytics
- Meeting our legal or regulatory obligations
Marketing communications
We do not send unsolicited marketing emails. If you have worked with us and would like to receive occasional updates about our services, you may opt in at any time. You can withdraw that choice at any time by emailing [email protected].
Sharing with third parties
We do not sell your personal information. We may share limited data with the following categories of service providers who help us operate:
- Website hosting and server infrastructure providers
- Email service providers used for correspondence
- Analytics platforms (data is anonymised where possible)
These providers are engaged under data processing agreements and are not permitted to use your information for their own purposes.
4. Protection Measures
We apply practical, proportionate security measures to protect the personal information we hold. These include:
Encrypted transmission
Our website is served over HTTPS using TLS encryption so data in transit between your browser and our server is protected.
Secure storage
Contact and client information is stored on servers with access controls that limit who can view or modify it.
Access controls
Only team members who need to handle your enquiry or engagement can access your data. We keep access lists current.
Breach notification
In the unlikely event of a data breach affecting your personal information, we will notify you and the relevant authority promptly where required by law.
While we take reasonable care, no digital system is entirely without risk. We encourage you to contact us promptly if you have any concerns about the security of your information.
5. Cookies
Our website uses a small number of cookies and similar local storage items. These fall into the following categories:
Necessary cookies
Used to store your cookie consent preference so we do not ask you repeatedly. These do not require your consent but you can clear them through your browser settings.
Analytics cookies
Help us understand how visitors navigate the site in aggregate so we can improve clarity and usefulness. These are only placed with your consent.
No advertising cookies
We do not place advertising or tracking cookies for commercial profiling purposes.
For full detail on the specific cookies in use and how to manage them, please see our Cookie Policy.
6. Your Rights
Under the Thailand Personal Data Protection Act (PDPA), you have a number of rights regarding your personal information. We take these seriously and aim to respond to all valid requests within 30 days.
Right to access
You may ask us to confirm whether we hold personal information about you, and to provide a copy of it.
Right to rectification
If any information we hold about you is inaccurate or incomplete, you may ask us to correct it.
Right to erasure
You may ask us to delete your personal information where we no longer have a valid reason to retain it, subject to legal obligations.
Right to data portability
Where data was collected with your consent or for a contract, you may ask us to provide it in a structured, readable format.
Right to object
You may object to our processing your information where it is based on legitimate interest. We will stop unless we can demonstrate compelling reasons to continue.
Right to withdraw consent
Where processing is based on your consent, you may withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.
Right to lodge a complaint
If you believe we have not handled your data correctly, you may raise a complaint with Thailand's Personal Data Protection Committee (PDPC) or the relevant supervisory authority in your jurisdiction.
To exercise any of these rights, please email us at [email protected]. We may need to verify your identity before acting on a request.
7. External Links
Our website may contain links to external websites or resources that are not operated by Lanna Labs. These links are provided for convenience or reference only.
We have no control over the content, privacy practices, or data handling of external sites. Visiting a third-party website from a link on our site is subject to that site's own policies, which we encourage you to review before sharing any personal information there.
8. Children's Privacy
Our services are intended for business use and are directed at adults aged 18 and over. We do not knowingly collect or process personal information from anyone under the age of 18.
If you believe a minor has submitted personal information through our website, please notify us at [email protected] and we will take appropriate steps to remove it promptly.
9. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we do, we will revise the "Last updated" date at the top of this page.
For significant changes that affect your rights or how we handle your data, we will make a reasonable effort to notify current clients directly. We recommend checking this page periodically if you interact with our website regularly.
Continued use of our website after a policy update constitutes acceptance of the revised terms.
10. Contact for Privacy Matters
If you have a question about this policy, want to exercise a right, or have a concern about how your information has been handled, please reach out. We will try to respond within a reasonable time.
Privacy email
[email protected]Phone
+66 53 871 2640Postal address
Lanna Labs64 Charoenrat Road, Wat Ket
Chiang Mai 50000, Thailand