Gem Fountain – Privacy Policy

Effective date: [04. February 2026]

Website: gem-fountain.com

Gem Fountain (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what personal data we collect, how we use it, with whom we share it, how we protect it, and what rights you may have.

1)   Who we are (Data Controller)

Gem Fountain (Trading name)

Operated by: Ms. Uripan Sarapirom (Sole Proprietor, Thailand)

Market Office (Appointment Only)

Gem Fountain – Market Desk (Chan Gems Building) A112, Chan Gems Building, Wat Mai,

Mueang Chanthaburi District, Chanthaburi 22000, Thailand Visits: by appointment only

Workshop & Office (Mailing Address)

Gem Fountain – Workshop & Office 38 Moo 5, Soi Jaidee 4,

Tambon Tha Chang,

Mueang Chanthaburi District, Chanthaburi 22000, Thailand

Please note: no walk-in customer visits at this address.

Online Contact

Email: office@gem-fountain.com WhatsApp / Phone: +66 95 235 9871

Support hours: Mon–Sat 09:00–17:00 (Thailand time)

If you have questions about this policy or want to exercise your rights, please contact us at office@gem-fountain.com

2)   What personal data we collect

We may collect the following categories of personal data:

A)  Information you provide

  • Name, billing/shipping address, email address, phone number
  • Order details (items purchased, order value, invoices)
  • Messages you send us (email, contact form, WhatsApp, customer support)

B)  Payment information

Payments are processed by Stripe and/or PayPal. We do not store full card details. Payment providers process the data needed to complete your payment and help prevent fraud (e.g., payment identifiers, billing details).

C)  Technical and usage data

  • IP address, browser type, device information, pages visited, referral URLs, timestamps
    • Approximate location (derived from IP)
    • Cookies and similar technologies (see Cookies section)

3)   Why we use your data (purposes)

We use personal data to:

  1. Process and fulfill orders (confirmation, packing, shipping, delivery updates)
  2. Provide customer support (questions, availability checks, returns, disputes)
  3. Prevent fraud and secure transactions (risk checks, security monitoring)
  4. Comply with legal and accounting obligations (invoices, record keeping)
  5. Improve our website and services (analytics, performance, troubleshooting)
  6. Marketing communications (only where permitted and/or with your consent), such as newsletters

4)   Legal bases (EEA/UK visitors)

Where the GDPR/UK GDPR applies, we process personal data based on:

  • Contract (to fulfill your order and provide requested services)
  • Legitimate interests (security, fraud prevention, improving services; balanced with your rights)
  • Legal obligation (accounting/tax and compliance requirements)
  • Consent (for certain marketing communications and non-essential cookies where required)

5)   Cookies and consent (cookie banner)

We use cookies and similar technologies to operate our website and, where enabled, to measure and improve performance.

Because we use a cookie banner/consent tool, you can choose whether to allow non-essential cookies (such as analytics cookies). Essential cookies (required for the site to function, e.g., cart and checkout) may be used without consent where legally permitted.

You can change your cookie preferences at any time using our cookie banner/consent settings and/ or your browser settings.

6)  Analytics (Google Analytics)

If enabled, we may use Google Analytics to understand how visitors use our website (e.g., pages viewed, time on site, device type). This helps us improve content and performance.

Where required, Google Analytics cookies are only used after you consent via our cookie banner/ consent tool.

7)   Email marketing (Mailchimp)

If you subscribe to our newsletter or request marketing updates, we may use Mailchimp to manage mailing lists and send emails.

Data processed may include your name, email address, subscription status, and basic campaign interaction (e.g., opens/clicks). You can unsubscribe anytime using the link in any email or by contacting us.

8)   Who we share your data with

We share personal data only when necessary to operate the store and deliver your order, including:

  • Payment processors: Stripe and PayPal (payment processing and fraud prevention)
  • Shipping providers: postal/courier services (delivery, tracking)
  • IT & hosting providers: website hosting, e-commerce platform, email services
  • Analytics/marketing providers (if enabled): Google Analytics, Mailchimp
  • Professional advisors: accountants, auditors, legal advisors (as needed)
  • Authorities: where required by law or to protect rights, safety, and prevent fraud

Some providers may process data as independent controllers for their own compliance purposes (e.g., payment networks).

9)   International transfers

We are based in Thailand and serve customers internationally. Your personal data may be processed in countries other than your own (for example by payment providers, email/marketing providers, hosting providers, and shipping partners). We take reasonable steps to use appropriate safeguards where required and only transfer data necessary for the purposes described.

10)   Data retention

We keep personal data only as long as necessary for the purposes described in this policy:

  • Orders and invoices: retained as required for accounting and legal obligations
  • Customer support communications: retained to resolve issues and maintain service records
  • Technical logs and analytics: retained for appropriate periods for security and performance

11)  Security

We use reasonable administrative, technical, and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration. No method of transmission or storage is completely secure, but we work to protect your information appropriately.

12)  Your rights

Depending on your location, you may have rights to:

  • access your personal data
  • correct inaccurate data
  • request deletion (where applicable)
  • restrict or object to processing
  • request data portability
  • withdraw consent at any time (where processing is based on consent)

To exercise your rights, please contact us at office@gem-fountain.com. We may need to verify your identity before processing your request.

EEA/UK users: You may also have the right to lodge a complaint with your local data protection authority.

13)   Children

Our website and services are not intended for children, and we do not knowingly collect personal data from children.

14)   Changes to this policy

We may update this Privacy Policy from time to time. Updates will be posted on this page and the Effective date will be revised.

15)   Contact

Gem Fountain (Trading name)

Operated by: Ms. Uripan Sarapirom (Sole Proprietor, Thailand) Email: office@gem-fountain.com

WhatsApp / Phone: +66 95 235 9871

Market Office (Appointment Only):

Gem Fountain – Market Desk (Chan Gems Building), A112, Chan Gems Building, Wat Mai, Mueang Chanthaburi District, Chanthaburi 22000, Thailand

Workshop & Office (Mailing Address):

Gem Fountain – Workshop & Office, 38 Moo 5, Soi Jaidee 4, Tambon Tha Chang, Mueang Chanthaburi District, Chanthaburi 22000, Thailand