Privacy Policy – Chiang Mai Business Network (CMBN)

Chiang Mai Business Network Co., Ltd. (“CMBN”, “we”, “us”, or “our”) operates the website chiangmaibusiness.net and related services (the “Service”).

This Privacy Policy explains how we collect, use, store, and protect personal data when you use our website, become a member, attend our events, or interact with our community.

We are committed to protecting your personal data in accordance with:

Thailand’s Personal Data Protection Act (PDPA), and the EU and UK General Data Protection Regulation (GDPR), where applicable. By using our Service, you agree to the collection and use of information as described in this Privacy Policy.

1. Who We Are (Data Controller)

  • The data controller responsible for your personal data is:
    • Chiang Mai Business Network Co., Ltd. Co.ID:  0505568002873
    • Email: cmbn@chiangmaibusiness.net

2. What Personal Data We Collect

  • We may collect the following types of personal data:
  • Contact information (name, email address, phone number, Instant Messaging Applications)
  • Business information (company name, role, services offered)
  • Membership details
  • Event registrations and attendance. For events, we may collect sensitive personal data, such as dietary requirements or accessibility needs. We collect this data only with your explicit consent during registration and use it solely to accommodate your needs at our events
  • Communications with us
  • Website usage data (IP address, browser type, pages visited)
  • Payment-related information (processed via third-party providers)
  • We only collect data that is necessary and relevant for our activities as a business community.

3. How We Use Your Personal Data

  • We use your personal data to:
    • Provide and manage memberships and community services
    • Maintain business directories and member profiles
    • Organise events, meetings, and networking activities
    • Communicate with members (newsletters, updates, invitations)
    • Respond to enquiries and requests
    • Improve our website and services
    • Meet legal, accounting, and regulatory requirements

4. Legal Basis for Processing

  • We process personal data based on one or more of the following legal grounds:
    • Consent – where you have given clear permission (e.g. marketing emails)
    • Contractual necessity – to deliver memberships, events, or services
    • Legitimate interest – to operate and grow the CMBN community
    • Legal obligation – where required by law (e.g. accounting records)

5. Member Profiles, Directories, and Community Sharing

  • As a business network:
    • Certain member information (such as name, company, and services) may be visible to other members or publicly listed in directories
    • This visibility supports networking, referrals, and business promotion
    • You can request updates or removal of your profile at any time
    • We do not sell member data to third parties

6. Marketing and Communications

  • We may send you:
    • Community updates and newsletters
    • Event invitations
    • Information about CMBN services or partner initiatives

You can:

  • Opt out of marketing emails at any time using the unsubscribe link
  • Contact us to update your communication preferences
  • Transactional or service-related messages may still be sent where necessary

7. Cookies and Website Analytics

  • Our website uses cookies and similar technologies to:
    • Improve functionality and user experience
    • Analyse website usage and performance
    • You can choose to accept or refuse cookies via your browser settings
    • Some website features may not function correctly if cookies are disabled
    • When you visit our website, we ask for your consent to use non-essential cookies (such as analytics) via our Cookie Consent Banner. You may withdraw or change your consent preferences at any time through our website footer. Strictly necessary cookies (required for the site to work) are processed based on our legitimate interest and do not require consent

8. Third-Party Service Providers

  • We may use trusted third-party providers for:
    • Website hosting
    • Email communication
    • Analytics
    • Payment processing
    • Event management tools

These providers only access personal data as necessary to perform their services and are required to protect it.

9. International Data Transfers

  • Your data may be stored or processed outside Thailand, including in countries where our service providers operate
  • Where this occurs, we take reasonable steps to ensure appropriate safeguards are in place in line with PDPA and GDPR requirements

10. Data Retention

  • We retain personal data only for as long as necessary to:
    • Provide our services
    • Maintain membership records
    • Meet legal and accounting obligations
    • When data is no longer required, it is securely deleted or anonymised
    • For tax and accounting purposes, we retain payment and transaction records for 5 to 10 years as required by Thai Revenue Department regulations

11. Your Rights

  • Depending on your location, you have the right to:
    • Access your personal data
    • Request correction of inaccurate data
    • Request deletion of your data
    • Withdraw consent at any time
    • Object to certain uses of your data
    • Request data portability (where applicable)
    • You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates applicable law
      • In Thailand: The Office of the Personal Data Protection Committee (PDPC)
      • In the EU: The Data Protection Authority (DPA) in your country of residence
    • To exercise any of these rights, please contact us at cmbn@chiangmaibusiness.net

12. Security

  • We use commercially reasonable measures to protect your personal data
    However, no online system is completely secure, and we cannot guarantee absolute security
  • In the unlikely event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, or as required by applicable law

13. Links to External Websites

Our website may contain links to third-party sites
We are not responsible for the privacy practices or content of those sites and encourage you to review their privacy policies

14. Children’s Privacy

Our services are intended for business professionals and are not directed at children under the age of 18.
We do not knowingly collect personal data from children.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.
Any changes will be posted on this page and will take effect upon publication. Continued use of our service constitutes acceptance of the latest version.

16. Contact Us

If you have questions about this Privacy Policy or how we handle personal data, please contact:

Email: cmbn@chiangmaibusiness.net