Privacy Policy.

Tirarin Co., Ltd. ("Tirarin," "we," "us," or "our") respects your privacy and is committed to protecting the personal data of everyone who interacts with tirarin.com and our services. This Privacy Policy explains what data we collect, why we collect it, and the choices you have.This policy applies to visitors of tirarin.com, prospective clients who contact us, and individuals whose data is shared with us in the course of a production engagement (for example, a Client's own team members or factory contacts).

Tirarin is an end-to-end fashion production agency based in Bangkok, Thailand, with our own operations arm, Wewin, in China. For the purposes of applicable data protection law, Tirarin Co., Ltd. is the data controller for personal data collected through this website and our services.

‍Registered address: 19/138 Venue Rama 9, Kanchanaphisek Road, Thap Chang, Saphan Sung, Bangkok, Thailand 10250
Tax ID: 0105558059051
Data protection contact: contact@tirarin.com

We collect personal data in three ways. Data you provide directly to us includes anything you submit through a form on this website, whether that is our contact form, a general inquiry, or a form used to request a download, guide, or other resource. This can include your name, brand name, email address, phone number if provided, product category, approximate order volume, and message content, as well as any communications with our team by email, phone, or in person, and information provided during onboarding or a production engagement, such as billing contacts, shipping contacts, or signatory details. Where a form is used to send you a resource, we use the email address you give us to deliver it, and to send further updates only where you have opted in. We also collect data automatically through website usage, including your IP address, browser type, device information, pages visited, and referral source, gathered through cookies and similar technologies as described in Section 6. Finally, Client Materials such as designs, tech packs, reference images, and specifications submitted for production purposes may incidentally include personal data, such as names on a document or contact details within a shared file; this data is handled under the confidentiality terms of our Terms and Conditions and any signed NDA, in addition to this policy. We do not knowingly collect personal data from individuals under the age of 18, as our services are business-to-business.

We use contact form data and communications to respond to inquiries and quote production work, on the basis of legitimate interest and the steps needed to enter into a contract. We use onboarding, billing, and shipping contact data to manage an active production engagement, on the basis of contract performance. We use usage data and cookies to improve the website and understand how it is used, on the basis of consent where required, or legitimate interest. We use billing and transaction records to meet our legal and accounting obligations, on the basis of legal obligation. Where you have opted in, we use your contact details to send updates about our services, on the basis of consent.

We do not sell personal data. We share personal data only where necessary to run our business. Where production requires coordination on the factory floor, relevant contact and order details are shared internally within the Tirarin/Wewin operation; this is not a third-party disclosure, since Wewin is our own operations arm in China. We also share data with the service providers we use to run the business, including Webflow for website hosting and website analytics, Notion, Airtable, and Pipedrive for client and project management, ActiveCampaign for email communications and marketing, Google for website analytics and advertising, Meta for advertising, and our accounting software; these providers process data on our behalf under their own data protection commitments. We share data with legal and regulatory bodies where required by law, such as tax authorities or in response to a valid legal request, and with professional advisors such as our accountants or lawyers, where necessary. We do not share one Client's data, designs, or production details with another Client, consistent with the confidentiality principles in our Terms and Conditions.

Because Tirarin operates across Thailand and China, and works with clients based in the EU, UK, and elsewhere, personal data may be transferred internationally as part of coordinating a production run, whether between Tirarin and Wewin, or between Tirarin and a Client based outside Thailand. Where required by the PDPA, GDPR, or other applicable law, we take appropriate steps to ensure such transfers meet the required standard of protection, such as relying on standard contractual clauses or an equivalent safeguard where applicable.

tirarin.com uses cookies and similar technologies, including browser local storage, to operate the website and understand how visitors use it. Essential cookies are required for the website to function correctly, and include those set by Webflow, which hosts this website, by our cookie consent tool, which stores your consent choice so it can be honored on later visits, and by Google reCAPTCHA, which protects our forms from automated abuse. Analytics cookies, provided through Google Analytics and Webflow Analyze, help us understand website traffic and improve content. Marketing cookies, provided through Meta Pixel, are used for retargeting and measuring the performance of our advertising on Meta platforms including Facebook and Instagram, and through Google Ads, for retargeting and measuring the performance of our advertising on Google. ActiveCampaign, which we use for email communications, sets cookies that record which pages you visit after you contact us or subscribe, so that what we send you stays relevant to you. Personalization cookies remember your preferences and tailor what you see. We do not currently use cookies of this type. If we introduce them, they will be listed here and set only with your consent. This website also carries a Meta domain verification tag, which confirms to Meta that we own the domain. It sets no cookies and collects no personal data.

On your first visit, a cookie consent banner lets you accept or decline non-essential cookies (analytics, marketing, and personalization) before they are set, in line with PDPA cookie consent guidance. You can also control or disable cookies at any time through your browser settings. Disabling essential cookies may affect how parts of the website function.

We retain personal data for as long as necessary for the purposes described in this policy, or until you request its removal, whichever comes first. Inquiry and contact form data is retained while we hold an active or prospective relationship with you, and deleted upon request if no engagement follows. Active Client records and Client Materials are retained for the duration of the engagement and afterward as needed to meet our accounting, tax, and legal obligations under Thai law, or until deletion is requested and no legal obligation requires continued retention. Website analytics data is retained as set by the retention periods of our analytics providers, Google Analytics and Webflow Analyze, and cleared on request where technically possible.

You can request removal of your data at any time by contacting us as set out in Section 8. Where we are legally required to retain certain records (for example, invoicing data for tax purposes), we will retain only what the law requires and delete the rest.

Depending on your location, you may have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data where applicable, withdraw consent for marketing communications at any time, object to or restrict certain processing, and request a copy of your data in a portable format.

To exercise any of these rights, contact us at contact@tirarin.com. We will respond within the timeframe required by applicable law: generally 30 days under the PDPA, or one month under GDPR (extendable in complex cases, with notice to you).

If you are located in Thailand, you also have the right to lodge a complaint with the Personal Data Protection Committee (PDPC). If you are located in the EU/UK and your data is processed under GDPR, you have the right to lodge a complaint with your local supervisory authority.

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or misuse, including limiting internal access to Client data to the team members directly responsible for an account. No system is completely secure, and we cannot guarantee absolute security of data transmitted to us.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be reflected on this page; we encourage you to review it periodically.

Questions about this Privacy Policy or how we handle your data can be sent to contact@tirarin.com or through our Contact page.