Privacy Policy

Our Commitment to Privacy

At Kampot Leaf, we approach data protection with the same respect we bring to our work with Cambodian tea communities. This privacy policy explains how we collect, use, protect, and share information when you interact with our website and services. We believe in transparency and give you control over your personal information.

We maintain operations in Cambodia while serving clients internationally. Our privacy practices reflect both local requirements and international standards for data protection. When you share information with us, you can trust it will be handled with care and used only for purposes you understand and approve.

Contact Information

Information We Collect

We collect different types of information depending on how you interact with our website and services:

Information You Provide Directly

When you reach out through our contact forms, request information about our services, or engage with us for business purposes, you may provide:

• • Name and professional title
• • Email address and phone number
• • Company or organization name
• • Geographic location and business context
• • Details about your inquiry, interests, or project requirements

Information Collected Automatically

When you visit our website, certain information is collected automatically through cookies and similar technologies:

• • Device type, browser type, and operating system
• • IP address and general geographic location
• • Pages visited and time spent on each page
• • Referring website and search terms used
• • Interaction with content and forms

Legal Basis for Processing

We process personal data based on legitimate interest in operating our business, fulfilling contractual obligations when providing services, complying with legal requirements, and obtaining your consent where required. You have the right to withdraw consent at any time.

How We Use Your Information

We use the information we collect for specific, limited purposes that support our mission and your interests:

Service Delivery and Communication

• • Responding to your inquiries and providing information about our services
• • Facilitating tea sourcing, tourism development, or research projects
• • Coordinating with community partners on your behalf
• • Processing and completing transactions

Website Improvement and Analytics

• • Understanding how visitors use our website and which content proves most valuable
• • Identifying technical issues and improving user experience
• • Testing new features and content approaches

Marketing and Educational Content

• • Sharing information about Cambodia's tea sector that may interest you
• • Providing updates about our services when relevant to your expressed interests
• • Offering insights about sustainable sourcing and community partnerships

We do not sell your personal information to third parties. Any sharing of data occurs only to support the purposes described here, with partners who assist in service delivery and who maintain similar privacy standards.

How We Protect Your Information

We implement multiple layers of protection to safeguard your personal information:

Technical Safeguards

• • Encryption of data transmission using SSL/TLS protocols
• • Secure storage systems with access controls
• • Regular security assessments and updates
• • Firewall protection and intrusion detection

Organizational Safeguards

• • Limited access to personal information based on role requirements
• • Training for team members on privacy practices
• • Confidentiality agreements with service providers
• • Regular review of data handling procedures

Data Retention

We retain personal information only as long as necessary to fulfill the purposes outlined in this policy or as required by law. When information is no longer needed, we securely delete or anonymize it. Retention periods vary based on the type of information and legal requirements, typically ranging from:

• • Contact form inquiries: 2 years from last contact
• • Service agreements: 5 years after completion
• • Website analytics: 26 months maximum

Your Privacy Rights

You maintain several rights regarding your personal information:

To exercise any of these rights, please contact us using the information provided at the top of this policy. We will respond to your request within 30 days and may need to verify your identity before processing certain requests.

Information Sharing and Third Parties

We share personal information only in limited circumstances and with trusted parties:

Service Providers

We work with carefully selected service providers who help operate our website, conduct business activities, or provide services on our behalf. These partners have access only to information needed for their specific functions and are obligated to maintain confidentiality. Examples include:

• • Website hosting and technical infrastructure providers
• • Email communication platforms
• • Analytics services that help understand website usage

Community Partners

When providing services like tea sourcing or tourism development, we may share relevant information with community partners in Cambodia who participate in fulfilling your requests. This sharing occurs only with your knowledge and supports the specific services you've engaged.

Legal Requirements

We may disclose personal information if required by law, court order, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

International Data Transfers

Our primary operations are based in Cambodia, but we serve clients internationally. Your information may be transferred to and processed in countries other than your own. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your privacy according to applicable data protection laws.

For transfers outside Cambodia, we rely on standard contractual clauses, adequacy decisions by relevant authorities, or other lawful transfer mechanisms. If you have concerns about international data transfers, please contact us for more information about the specific safeguards we employ.

Children's Privacy

Our services are directed toward business professionals, tea merchants, hospitality operators, researchers, and other adults engaged in commercial activities. We do not knowingly collect personal information from individuals under 18 years of age. If we become aware that we have collected information from someone under 18, we will delete it promptly. If you believe we may have information from or about a minor, please contact us immediately.

Changes to This Privacy Policy

We may update this privacy policy occasionally to reflect changes in our practices, services, legal requirements, or operational needs. When we make significant changes, we will update the "Last updated" date at the top of this policy and may provide additional notice through our website or direct communication.

We encourage you to review this policy periodically to stay informed about how we protect your information. Your continued use of our website after policy changes indicates acceptance of the updated terms.