Effective Date: [Date — pending CEO confirmation] · Version: 1.0
Data Controller: Wanisa Yodsri (วณิษา ยอดศรี), operating as GlobMaps Climate Intelligence
Contact: privacy@globmaps.com | [Registered address — pending CEO confirmation]
The Data Controller is Wanisa Yodsri (วณิษา ยอดศรี), an individual operating under the trade name "GlobMaps Climate Intelligence."
For privacy-related inquiries or to exercise your rights, contact: privacy@globmaps.com
We collect only the data necessary to provide the Service.
| Data | Purpose | Required? |
| Email address | Account creation, service notifications, password reset | Required |
| Full name (optional) | Account personalization | Optional |
| Payment information | Processed by Stripe (we never store full card numbers; last 4 digits and expiry only) | Required for paid plans |
| Country/region | Verifying geographic eligibility; tax compliance | Required |
| Organization/affiliation (optional) | Understanding use-case context | Optional |
| Data | Purpose | Retention |
| API call logs (timestamp, endpoint, response code, IP address) | Rate limiting, billing, debugging, abuse prevention | 12 months |
| Browser/device type | Service compatibility, security | 12 months |
| Login events (timestamp, IP) | Security monitoring | 12 months |
| Usage analytics (features accessed, session duration) | Service improvement | 24 months (aggregated after 12 months) |
| Processing Activity | Lawful Basis | Thai PDPA Reference |
| Account creation and management | Contract — necessary to provide the Service | มาตรา 24(3) |
| Processing payments | Contract — necessary for billing | มาตรา 24(3) |
| API access and rate limiting | Contract — necessary to deliver and enforce subscription terms | มาตรา 24(3) |
| Service-related notifications | Contract — necessary to manage our service relationship | มาตรา 24(3) |
| Service improvement and analytics | Legitimate Interests — improving service reliability and features | มาตรา 24(5) |
| Marketing emails and product updates | Consent — you must opt in separately; you can withdraw at any time | มาตรา 24(1) |
| Legal compliance (e.g., tax records) | Legal obligation | มาตรา 24(6) |
Important for B2C users: Marketing communications require your explicit opt-in consent, which you provide by checking the optional marketing checkbox during signup or at any time in your account settings. This consent is separate from acceptance of the Terms of Service. You may withdraw it at any time without affecting your access to the Service.
We do not sell your personal data. We share data only as described below.
| Provider | Purpose | Data Shared | Location |
| Stripe Inc. | Payment processing | Email, payment card details, billing address | USA (Standard Contractual Clauses) |
| Server Infrastructure | API hosting and database | Account data, API logs | Europe/Singapore region (encrypted at rest) |
| Cloudflare R2 | Climate data file storage | None — only pre-computed climate datasets, no personal data | Western Europe (WEUR) |
| Resend | Transactional email | Email address, name | USA (SCCs applicable) |
All service providers are contractually required to process data only on our instructions and to maintain appropriate security measures. Stripe's Data Processing Agreement is available at stripe.com/legal/dpa.
We may disclose personal data when required by Thai law, court order, or lawful request from a government authority, or when necessary to protect our legal rights.
If the Service is transferred to another operator, your personal data may transfer as part of that transaction. We will notify you in advance and, where legally required, seek your consent.
The Operator is based in Thailand. Your data is hosted on servers in Europe/Singapore region. When data is transferred to countries outside Thailand (e.g., to US-based Stripe, Resend), we rely on:
India users (DPDP Act 2023 — s.16): Data stored in Singapore is covered under DPDP whitelist provisions. No India data localization requirement applies to climate API usage data.
| Category | Retention Period |
| Account data (email, name) | Duration of active account + 3 years after closure (for legal/tax records) |
| Payment records | 5 years (Thai accounting law — พรบ. การบัญชี พ.ศ. 2543) |
| API usage logs | 12 months rolling |
| Marketing consent records | Duration of account + 3 years |
| Data subject request records | 3 years from date of request |
| Aggregated analytics | Indefinitely (anonymized — not personal data) |
After the applicable retention period, personal data is deleted or irreversibly anonymized.
Under Thai PDPA (มาตรา 30–36), Malaysia PDPA, Vietnam PDPL, and India DPDP Act, you have the following rights:
| Right | What It Means | How to Exercise |
| Right to Access | Request a copy of the personal data we hold about you | Email privacy@globmaps.com |
| Right to Rectification | Request correction of inaccurate or incomplete data | Email or account settings |
| Right to Erasure | Request deletion of your personal data (subject to legal retention obligations) | Email privacy@globmaps.com |
| Right to Restrict Processing | Request that we temporarily halt processing while a dispute is resolved | Email privacy@globmaps.com |
| Right to Data Portability | Receive your data in a structured, machine-readable format (JSON/CSV) | Email privacy@globmaps.com |
| Right to Object | Object to processing based on Legitimate Interests | Email privacy@globmaps.com |
| Right to Withdraw Consent | Withdraw marketing consent at any time | Unsubscribe link in emails OR account settings |
India users: Under DPDP Act 2023, you also have the right to nominate a representative and the right to grieve. SLA: 48 hours acknowledgement, 30 days resolution.
How to submit a request: Email privacy@globmaps.com with subject line "Data Subject Request — [your request type]". We will respond within 30 days. We may request identity verification before fulfilling the request.
If you believe we have not handled your data correctly, you may lodge a complaint with:
We implement technical and organizational security measures appropriate to the sensitivity and volume of personal data we process, including:
In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority (PDPC Thailand) within 72 hours of becoming aware of the breach.
We use minimal cookies necessary to operate the Service (session cookies, authentication). We do not use third-party advertising cookies.
Analytics: We use privacy-respecting analytics to understand aggregate usage patterns. These analytics do not track you across other websites and do not collect personal data beyond aggregate counts.
The Service is not directed to persons under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact privacy@globmaps.com and we will delete it promptly.
We may update this Privacy Policy from time to time. We will notify you of material changes via email or prominent notice in the Service at least 14 days before they take effect. The updated policy will be available at climate.globmaps.com/privacy with the new effective date.
For any privacy-related questions, data subject requests, or complaints:
Wanisa Yodsri (วณิษา ยอดศรี)
GlobMaps Climate Intelligence
[Registered address — pending CEO confirmation]
Email: privacy@globmaps.com
Response time: within 30 days
ฉบับนี้เป็นสรุปเพื่อความเข้าใจ ให้ใช้ร่วมกับฉบับภาษาอังกฤษด้านบนเสมอ
เราเก็บรวบรวมข้อมูลส่วนบุคคลของคุณเพื่อ: (1) สร้างและจัดการบัญชีผู้ใช้ (2) ประมวลผลการชำระเงิน (3) ให้บริการ API และ Dashboard ตามที่ตกลง (4) ส่งการแจ้งเตือนที่เกี่ยวข้องกับบริการ
เราไม่ขายข้อมูลของคุณ เราแบ่งปันข้อมูลเฉพาะกับผู้ให้บริการที่จำเป็น (Stripe สำหรับการชำระเงิน, ผู้ให้บริการ server) ภายใต้ข้อตกลงคุ้มครองข้อมูล
คุณมีสิทธิ์เข้าถึง แก้ไข ลบ และพกพาข้อมูลของคุณได้ทุกเมื่อ โดยติดต่อ privacy@globmaps.com
GlobMaps Climate Intelligence | Privacy Policy v1.0 | 2026-06-30
ฐานกฎหมาย: Thai PDPA พ.ศ. 2562 มาตรา 6, 19, 23, 24, 30–37 · Malaysia PDPA 2010 · Vietnam PDPL 2023 · India DPDP Act 2023 · GDPR (EU) 2016/679
Email us at privacy@globmaps.com with subject "Data Subject Request — [your request type]". We respond within 30 days.
These Terms are also referenced in our Terms of Service Section 8.2