Privacy policy

CosmoLocal CNX runs a month-long pop-up village in Chiang Mai, Thailand, and this website, cosmolocalcnx.com. We decide what personal data this site collects and what happens to it, which makes us the data controller.

Write to hello@cosmolocalcnx.com about anything on this page. We answer privacy requests ourselves, there is no form to fill in.

Four things, and only the first two are ever tied to your name.

• Newsletter signups. The name and email you type into the form. That is the whole form.
• Ticket and residency purchases. Your name, email and what you bought. Payment goes through Stripe, so your card number reaches Stripe and never us.
• Messages you send us. Whatever you put in an email or a WhatsApp message, plus the address or number it came from.
• Website activity. Pages viewed, how you arrived, roughly where you are from your IP address, and your device and browser. This arrives through Google Analytics, Google Ads and the Meta pixel, and it is not linked to your name unless you buy something.

To send you the emails you asked for, to sell and deliver passes, to answer you when you write, and to see which pages and which ads bring people to the village. We do not sell personal data, and we never will.

The legal grounds, if you need them named: your consent for the newsletter and for analytics and advertising cookies, performance of a contract for a ticket purchase, and our legitimate interest in replying to you and keeping the site working.

Nothing tracks you on arrival. The Google and Meta tags do not load until you scroll, tap or type, and at the latest a few seconds after the page has finished loading. If you read the page and leave without touching it, no tracking cookie is set.

Once they load, Google sets its analytics and advertising cookies and Meta sets _fbp, plus _fbc if you arrived from one of their ads. Both usually expire after about three months. They are what tells us that an ad led to a sale.

You can clear or block all of them in your browser settings, and the site still works. For more control there is Google's opt-out add-on and Meta's ad preferences.

Only the companies we need to run the site and the events. Each one gets what its job requires and nothing beyond it.

These companies are based in the United States and Europe, so using this site means your data is processed outside Thailand. We may also hand over data if the law requires it.

Newsletter subscribers stay on the list until they unsubscribe, and unsubscribing removes you from it. Purchase records are kept for as long as accounting and tax rules require. Emails and WhatsApp threads stay until they are no longer useful to either of us. Analytics data expires on Google's and Meta's own schedules, which is between two and twenty-six months depending on the report.

You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or tell us to stop using it. Thailand's PDPA gives you these rights, and so does the GDPR if you are in Europe. We reply within thirty days and we do not charge for it.

Every newsletter email has an unsubscribe link at the bottom, which is the fastest route if that is all you want. For anything else, write to hello@cosmolocalcnx.com.

If you think we have handled your data badly and we have not put it right, you can complain to Thailand's Personal Data Protection Committee, or to the data protection authority in your own country.

This site and our events are meant for adults. We do not knowingly collect data from anyone under 16. If your child has sent us something, write to hello@cosmolocalcnx.com and we will delete it.

When we add a tool that touches personal data, this page changes with it and the date at the top moves. Worth a look before you subscribe or buy if it has been a while.