Data Protection

SECTION 1 - WHAT WE DO WITH YOUR INFORMATION

When you are making a service purchase in our store as a part of the buying and selling process, we collect the personal information you are providing, such as your name, home and e-mail address. When browsing through our store, we are automatically receiving your computer's Internet Protocol (IP) address sending us information including further details about your browser and operating system.
Email marketing (if applicable): With your permission, we can send you emails via our shop, sharing new products, and other updates.

SECTION 2 - CONSENT

How do you get my consent?

If you provide us with personal information to process a transaction, verify your credit card, place an order, process a delivery, or return a purchase, you agree that we collect and only use the data for these specific reasons.

If we ask you for your personal information for a secondary reason, such as marketing, we will either ask you for your explicit consent or give you the opportunity to say no beforehand.

How can I revoke my consent?

If you change your mind after registering, you can revoke your consent and inform us to cease any further date collection, usage or disclosure of your information at any time, by contacting us at rossena.samui@gmail.com.

SECTION 3 - DISCLOSURE

We may disclose your personal information if required by law or if you violate our Terms of Use.

Payment:

Our payments are handled by secure payment providers. We never save your credit card information at any moment. It is encrypted by the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is only stored until your purchase transaction is completed. After that, your purchase transaction information will be deleted.

All direct payment gateways comply with PCI-DSS standards, which are managed by the PCI Security Standards Council. This is a joint effort by brands such as Visa, MasterCard, American Express and Discover.

PCI DSS requirements help ensuring the safe handling of credit card information by our business and service providers.

SECTION 4 - SERVICES OF THIRD PARTIES

In general, the third-party vendors we use, will only collect or disclose your information to the extent necessary to perform the services they provide to us.

However, certain third-party providers, such as payment gateways and other payment processors, have their own privacy policies regarding the information we need to provide them for your purchase-related transactions.

We encourage you to study these providers' privacy policy so that you understand how your personal information is handled by them.

In particular, note that certain providers may be located in a different area and are therefore subject to different jurisdiction than you are possibly under, or ourselves and our facilities, as well as the ones from any third party. As a result, if you choose a transaction involving a third-party service, your information may be subject to the laws of the jurisdiction in which that service provider or its facilities reside.

For example, if you are located in Canada and your transaction is processed by a US-based payment gateway, your personal information used to complete this transaction may be subject to US disclosure, including the Patriot Act.

Once you leave our store's website or are redirected to a third-party website or application, you are no longer subject to this Privacy Policy or the Terms of Use of our website.

Links

If you click on links in our shop, you may be redirected away from our website. We are not responsible for any privacy practices of other websites and therefore encourage you to read their privacy statements.

SECTION 5 - SAFETY

To protect your personal information, we take reasonable precautions and follow industry best practices to ensure that they are not unduly lost, abused, accessed, disclosed, altered or destroyed.

When you provide us with your credit card information, the information is encrypted using Secure Socket Layer (SSL) technology and stored using AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we comply with all PCI DSS requirements and implement additional generally accepted industry standards.

COOKIES

Here is a list of cookies we use. We have listed them here so you can choose to disable cookies or not.

_session_id, unique token, sessional, allows rossena-rental.com to store information about your session (referrer, landing page, etc.).

no data held, Resistant for 30 minutes from the last visit. Used by the internal statistics tracker of our website provider to record the number of visits

no data held, Expires midnight (relative to the visitor) of the next day, counts the number of visits of a single customer in a store.

cart, unique token, 2 weeks shelf life, stores information about the content of your shopping cart.
_secure_session_id, unique token, sessional

storefront_digest, unique token, indefinite, if the store has a password, this is used to determine if the current visitor has access.

SECTION 6 - TIME TO AGREE

By using this website, you declare that you have reached the required minimum age in your state, province or country of residence and that you have given us your permission to do so in order for you to use this website.

SECTION 7 - AMENDMENTS TO THIS PRIVACY POLICY

We reserve the right to change this Privacy Policy at any time. Please read the policy regularly. Changes and clarifications take effect immediately, after their publication on the website. If we make any material changes to this policy, you will be notified here that it has been updated to let you know what information we collect, how we use it, and under what circumstances we may use it and / or share it.

If our business is acquired or merged with another company, your data may be passed on to the new owners so that we can continue to sell our products to you.

QUESTIONS AND CONTACT INFORMATION

If you wish to access, correct, change or delete personal information that we hold about you, wish to register a complaint or simply require further information, please contact our Privacy Officer at info@kohsamui.tours or through our website at www.kohsamui.tours

[Subject: Data Protection Officer]