Privacy Policy & Global Data Protection

1. Identity of the Data Controller

This Privacy Policy governs the processing of personal data by Asian 3S Co., Ltd. (referred to herein as “Asian 3S”, “Company”, “we”, “us”, or “our”), operating the international agricultural biological collective platform at asian3s.app and associated regional subdomains.

For users situated in the European Economic Area (EEA), the United Kingdom, Switzerland, and the United States, Asian 3S acts as the Data Controller under Article 4(7) of the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and equivalent national laws.

Data Protection Officer (DPO) Contact: Privacy & Compliance Desk, Asian 3S Co., Ltd.
Email: support@asian3s.com | Agronomy Hub, Phnom Penh, Cambodia & Regional Logistics Centers.

2. Categories of Personal Data We Collect

In order to fulfill international agricultural purchases, clear phytosanitary borders, and provide cooperative agronomy advisory, we collect and process the following categories of data:

• Identity & Contact Information: Full legal name, business or farm name, phone/WhatsApp number, email address, and community partner referral attribution code.
• Delivery & Logistics Data: Physical farm or residential shipping address, municipality, postal code, and specific rural delivery instructions necessary for courier transport.
• Payment Transaction Metadata: Payment verification status, transaction reference numbers, and billing country. Notice: Asian 3S never directly stores full card numbers, CVVs, or bank account credentials. All transactions are securely tokenized through PCI-DSS Level 1 certified gateways (Visa, Mastercard, PayPal, UnionPay, and Central Bank of Cambodia Bakong KHQR).
• Technical & Session Data: IP address, device identifier, operating system version, browser user-agent, language selector preferences, and essential session authentication cookies.

3. Lawful Bases for Processing Under EU GDPR

Under Article 6 of the GDPR, we process your personal information exclusively under the following legal bases:

4. Your Rights Under European Law (GDPR) & UK Law

If you are a resident of the European Union, the European Economic Area, or the United Kingdom, you are entitled to exercise the following statutory rights without charge:

• Right of Access (Art. 15): Obtain confirmation of whether your data is being processed, and request a structured copy of your personal data.
• Right to Rectification (Art. 16): Request correction of inaccurate, obsolete, or incomplete personal details.
• Right to Erasure / “Right to be Forgotten” (Art. 17): Request the permanent deletion of your personal data where retention is no longer necessary for tax or agricultural compliance records.
• Right to Restriction of Processing (Art. 18): Restrict processing during ongoing disputes regarding accuracy or lawful grounds.
• Right to Data Portability (Art. 20): Receive your personal data in a structured, commonly used, and machine-readable format (JSON/CSV).
• Right to Object (Art. 21): Object at any time to data processing based upon legitimate interest grounds.
• Right to Lodge a Complaint: You maintain the right to register a formal complaint with your local EU Data Protection Authority (DPA).

To exercise any of these rights, email our Compliance Office at support@asian3s.com. We respond within thirty (30) calendar days as mandated by EU law.

5. Notice to California Residents (CCPA & CPRA)

Under the California Consumer Privacy Act of 2018 (CCPA) and the California Privacy Rights Act of 2020 (CPRA), California residents possess distinct privacy protections:

California residents also have the right to request disclosure of categories of personal information collected, the right to deletion, the right to limit the use of sensitive personal information, and the absolute right to non-discrimination for exercising these statutory rights.

6. International Data Transfers & Standard Contractual Clauses (SCCs)

Because Asian 3S operates laboratory formulation facilities in Southeast Asia and distributes across global borders, customer data may be securely transferred and accessed across cross-border cloud infrastructure.

For transfers of personal data originating within the European Union, the EEA, or the UK to third countries, Asian 3S implements the European Commission's Standard Contractual Clauses (SCCs) under Commission Implementing Decision (EU) 2021/914, coupled with supplementary technical safeguards including 256-bit TLS encryption in transit and AES-256 encryption at rest.

7. Cookie Policy & Tracking Technologies

Our platform uses strictly necessary and functional cookies. You can manage your preferences at any time using our Cookie Consent Banner or via browser settings:

• Essential Security Cookies: Preserve encrypted login authentication, token validation, and shopping cart persistence (cannot be disabled).
• Localization Cookies: Store your preferred language selection (e.g. Khmer, English, Thai, Vietnamese, Chinese) and theme settings.
• Referral Integrity Cookies: 30-day attribution cookie (asian3s_sponsor) ensuring local grower advisors receive community points for ongoing agricultural support.

8. Data Retention Policy

We retain personal data only for as long as strictly necessary to fulfill the purposes set out in this Policy. Commercial sales records, invoices, and customs bills of lading are archived for seven (7) years in compliance with international commercial accounting, tax, and phytosanitary regulatory audit mandates.