Privacy Policy

Information we handle

Depending on how you use our website or staff tools, we may handle contact details you choose to provide, account and sign-in records, and operational information needed to run Casa Luma. Internal accounting workflows may process business records and files you or your organization store in Google Drive.

Google Drive OAuth

Authorized staff may connect a Google account to support internal accounting-file workflows. The integration uses Google Drive to locate or create designated accounting folders and upload related records. Access is used to provide those requested internal functions, not for advertising, sale of personal information, or building profiles.

Google access is governed by Google's terms and privacy practices. Use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. You can review or revoke third-party access in your Google Account security settings. Revoking access may stop the associated accounting workflow. We do not use Google user data for purposes unrelated to this internal feature.

How we use information

We use information to operate and secure our website and internal services, provide staff workflows, maintain business records, respond to requests, and meet legal obligations. We do not sell personal information or use it for targeted advertising.

Sharing and service providers

We may share information with service providers that help host, secure, or operate our services, and when required by law or needed to protect people, rights, or the service. Google receives information necessary for the Google Drive integration. We require service providers to handle information for their contracted service purposes.

Security and retention

We use reasonable administrative and technical safeguards and limit internal access to people who need it for their work. No online service can guarantee absolute security. We retain information for as long as needed for the purposes above, legitimate business needs, and legal requirements, then delete or de-identify it when reasonably practical.

Your choices and rights

You may contact us to ask about, correct, or request deletion of personal information, subject to applicable law and legitimate recordkeeping needs. Staff access is managed by Casa Luma; contact us if your role changes or you believe access should be removed.

Children and changes

Our staff tools are not intended for use by children. We may update this policy from time to time by publishing a revised version here. Continued use after an update means the revised policy applies going forward.

Contact

Questions or privacy requests: info@casalumakpg.com. Casa Luma, 53/7 Moo. 2 Ban Nai Suan Village, Koh Phangan, Thailand.