1. Who We Are (Data Controller)

This website, tmbiomed.com, and the brand “TM Biomed” are operated by Pot Plant Farm Co., Ltd. (“we”, “us”, “our”, “the Company”), a company registered in Thailand under registration number 0505564011428, with its registered office at 89 Moo 8, Mae Ka, Fang, Chiang Mai 50110, Thailand.

Pot Plant Farm Co., Ltd. is the Data Controller responsible for determining the purposes and means of processing personal data collected through this website, in accordance with Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”).

2. Scope of This Policy

This Privacy Policy applies to personal data we collect through:

• Business inquiry and contact forms on this website
• Direct email or telephone communication initiated through contact details published on this website
• Website usage data collected through cookies and similar technologies (see Section 8)

This website is intended for business-to-business (B2B) communication with qualified commercial partners, including EU-GMP certified manufacturers, licensed importers, regulated distributors, and other qualified business entities. It is not directed at consumers or the general public, and is not intended for individuals under 20 years of age.

3. Personal Data We Collect

When you submit an inquiry through our contact form, we may collect:

We do not intentionally collect any special category (“sensitive”) personal data, such as health data, religious beliefs, or biometric data, through this website. Please do not include sensitive personal data in your inquiry message.

4. Purposes and Legal Basis for Processing

We do not use your personal data for any purpose incompatible with the purposes stated above without notifying you and, where required, obtaining your further consent.

5. Disclosure and Sharing of Personal Data

We do not sell your personal data. We may share personal data with:

• Internal personnel responsible for sales, business development, and quality/compliance review, on a need-to-know basis
• Service providers who support our website hosting, email, and IT infrastructure, under confidentiality obligations
• Regulators or authorities, where required by applicable law
• Professional advisors (e.g., legal or accounting) where necessary for legitimate business purposes

We do not disclose your personal data to unrelated third parties for their own marketing purposes.

6. International Data Transfer

As this website is intended for international B2B communication, personal data you submit (such as through the contact form) may be accessed, stored, or processed by our internal team in Thailand. Where a prospective partnership involves discussion with parties located outside Thailand, relevant business information may be shared with those parties as necessary and appropriate for the purposes described in this Policy, and to the extent permitted under the PDPA, including where the data subject has provided consent for such disclosure.

We take reasonable steps to ensure that any transfer of personal data outside Thailand is conducted in accordance with the requirements of the PDPA regarding adequate levels of data protection.

7. Data Retention

We retain personal data collected through business inquiries for as long as necessary to fulfil the purposes described in this Policy, including for ongoing business discussions, record-keeping, and compliance with applicable legal, accounting, or regulatory requirements. Where an inquiry does not result in an ongoing business relationship, we generally retain the inquiry record for a limited period for reference purposes, after which it will be securely deleted or anonymised, unless a longer retention period is required by law.

8. Cookies and Similar Technologies

This website may use cookies or similar technologies to operate correctly, remember preferences, and, where enabled, understand website usage through analytics. Where non-essential cookies (such as analytics or marketing cookies) are used, we will seek your consent in accordance with the PDPA before such cookies are set, and you may withdraw your consent at any time through your browser settings or any cookie preference tool provided on this website.

9. Your Rights as a Data Subject

Under the PDPA, you have the right to:

• Be informed about how your personal data is collected and used
• Access and request a copy of your personal data that we hold
• Request correction of inaccurate or incomplete personal data
• Request deletion or anonymisation of your personal data, subject to legal exceptions
• Withdraw consent at any time, where processing is based on consent
• Object to certain processing of your personal data
• Request restriction of processing in certain circumstances
• Lodge a complaint with the Office of the Personal Data Protection Committee (PDPC) of Thailand if you believe your rights have been violated

To exercise any of these rights, please contact us using the details in Section 11 below. We will respond to verified requests within the timeframe required under the PDPA.

10. Data Security

We implement reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

11. Contact Us / Exercising Your Rights

If you have questions about this Privacy Policy, or wish to exercise your rights under the PDPA, please contact:

If you are not satisfied with our response, you may lodge a complaint with the Office of the Personal Data Protection Committee (PDPC), Thailand.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised “Last updated” date. We encourage you to review this Policy periodically.