Privacy policy

The data controller is This Is Yes Please Co., Ltd. (company registration no. 0505563013915), with its address at 292, Chiang Dao, Chiang Mai 50170, Thailand. We process your personal data under Thailand's Personal Data Protection Act B.E. 2562 (PDPA).

What we collect

When you send an enquiry, we collect your name, company (if provided), country, email or phone number, service of interest, message, form language and consent choice. The form uses Cloudflare Turnstile to prevent spam; Cloudflare processes the technical information needed for this check.

How we use and share it

We use your details to reply to your enquiry. Cloudflare hosts this website and processes the Turnstile check. Enquiries are delivered to our team at [email protected] through Cloudflare Email Routing and Gmail. We do not sell this information or use it for advertising. You may withdraw consent for future processing by contacting us.

How long we keep it

We keep enquiry records for up to two years after our last contact with you, then delete them unless the law requires longer retention.

Your rights

Subject to the conditions and exceptions in the PDPA, you may request access to or a copy of your information, correction, deletion or restriction, object to processing, request data portability where applicable, withdraw consent, or complain to Thailand's Personal Data Protection Committee. To exercise your rights, email [email protected].

Cookies and analytics

We store a cookie to remember your chosen language. Cloudflare Web Analytics does not use cookies.

When enabled, Cloudflare Zaraz records clicks on our shop and contact links, visits to the contact page, checklist print requests and enquiries accepted by the form. These events help us understand which parts of the website are useful. Our event properties contain only the page category, language and button location; they do not include enquiry text, contact details or destination URLs. Clicks do not confirm a conversation or purchase. Our click tracking respects browser Do Not Track and Global Privacy Control signals.

We also count clicks to garlic product sections. Links published in selected TIYP campaigns let us associate shop, contact, product and accepted-enquiry actions with a predefined campaign name on the landing page. We do not send arbitrary campaign tags, complete query strings or referrer addresses in these custom events, and do not store campaign history in cookies or browser storage. Attribution ends when you leave that page; these counts do not establish a purchase.

Website assistant

If you enable AI answers, Cloudflare Turnstile verifies the session and Workers AI processes each question to generate a reply. Do not include personal or confidential information. We do not save questions or answers in our database or send them to click analytics. The conversation remains in page memory until you leave or reload. Abuse controls store a random session identifier, expiry and usage counters, and a daily keyed digest of the network address. Sessions expire within 30 minutes; expired records are removed by an hourly cleanup (within 25 hours for daily counters). AI replies are guidance, not confirmed prices, quotations or orders.

To keep a verified AI session available when you refresh or navigate this website in the same tab, we store its random identifier and expiry in session storage. We do not store your questions, answers or contact details there. The identifier is valid for up to 30 minutes and is removed when the tab closes.

Enquiry basket

We keep your selected product identifiers and quantities in this tab’s session storage so you can review the basket and carry it to the enquiry form. We do not store your contact details or message in browser storage, or send basket contents to analytics. Closing the tab removes this storage. Copying a summary or opening Messenger does not send it; you choose whether to send it yourself.