INTERNATIONAL
SOURCING

THAIS INTERNATIONAL SOURCING · KANSAS CITY, MISSOURI

Privacy Policy

Effective October 16, 2026 · Version 2026-10-16.2

Privacy Policy · Terms of Use

This notice explains how Thais International Sourcing, based in Kansas City, Missouri, handles information when you visit our website, submit an inquiry, use your private atelier, or work with our team.

1. Who we are and how to reach us

Thais International Sourcing ("Thais," "we," "us") manages the personal information described here. For privacy questions or requests, email [email protected] with the subject “Privacy request.” Please do not include passwords, payment-card details, or government identification in your message.

2. Information we collect

We receive information directly from you, your authorized business representatives, service providers confirming payments or delivery, and the business links you give us. Please provide only information you are authorized to share and avoid sensitive information unrelated to sourcing.

3. How we use information

We use information to assess inquiries; communicate with you; approve and secure accounts; understand your brief; propose and purchase approved pieces; manage budgets, fees, refunds and delivery; maintain service and agreement records; send account and collection updates; diagnose problems; prevent fraud and unauthorized access; respond to rights requests; and meet accounting, legal and dispute-resolution obligations. We do not use an inquiry acknowledgment as consent to unrelated promotional campaigns. If we send optional marketing, you may opt out by contacting us or using the unsubscribe method provided.

4. Who receives information

Authorized Thais team members and support administrators can access records needed to operate the service. Clients can access their own approved collection records; private supplier notes, internal tasks and service costs are restricted to our team.

We disclose information as needed to hosting, infrastructure, security, email and notification providers, including Cloudflare; payment providers such as Stripe when enabled; browser push services and Firebase when the relevant push feature is used; and suppliers, carriers or fulfillment partners who need details to complete your requested service. Provider processing may be subject to their own privacy notices. External item images may reveal your IP address and request information to the image host when displayed.

We may disclose records to professional advisers under appropriate confidentiality obligations; to comply with valid legal process or legal duties; to protect people, accounts and legal rights; or as part of a business transfer, subject to applicable privacy requirements. We do not sell personal information or disclose it to third parties for cross-context behavioral advertising. Our current website does not use advertising pixels.

5. Cookies, local storage and site measurement

A secure, HTTP-only session cookie keeps you signed in. Browser sign-in is persistent and may be renewed while you use the service; sign out on shared devices. Browser settings can remove or block cookies, but blocking the session cookie prevents sign-in. We store your selected language and color theme in browser local storage until you change them or clear browser data. A service worker supports push notifications; it does not provide an offline copy of your private client file.

Cloudflare processes connection and security information and may provide site-performance measurement and security cookies. Our current implementation does not personalize advertising or track you across unrelated sites for advertising. “Do Not Track” does not change essential account or security processing. We do not currently conduct sale/sharing activities to which a Global Privacy Control opt-out would apply; we will honor applicable opt-out requirements if our practices change.

6. Your choices and requests

You can update available profile and delivery fields in your atelier, change language/theme preferences, sign out, and disable push through your browser/device settings or the notification controls. Essential account, security and transaction emails may still be sent while needed to provide your service. Turning off push does not cancel a service, item approval or payment obligation.

You may ask us to access, correct, export or delete your information, close your account, or explain our processing. Depending on your residence and applicable law, you may have additional rights, including restriction, objection, withdrawal of consent, appeal of a denied request, or a complaint to your relevant authority. These rights depend on the law that applies to the request and business; this notice does not claim that every privacy statute applies to us.

Email the contact above. We will reasonably verify your identity and, if applicable, an agent’s authority, and respond within applicable legal deadlines. We may retain records required for legitimate legal, accounting, fraud-prevention or dispute purposes and explain any limitation. We do not retaliate for exercising legally protected rights. If you disagree with a decision, reply with “Privacy appeal.”

7. Retention and security

We retain inquiry, account and collection information for as long as reasonably needed for the purposes above, taking account of the active relationship, transaction and tax record requirements, limitation periods and disputes. There is no automatic promise that deleting an account immediately removes financial records or backup copies. We review deletion requests and remove or de-identify information when retention is no longer needed; restricted backups may remain until replaced or removed through backup maintenance.

We use access controls, encrypted HTTPS connections, hashed passwords and restricted server storage. No system is completely secure. Use a unique password, enable the optional authenticator, protect your email account and report suspicious access promptly. We will investigate security incidents and provide notices where required by applicable law, including Missouri’s breach-notification requirements when applicable.

8. International processing and children

We operate from the United States, and our providers or sourcing partners may process information in other countries. Laws may differ from those where you live. Where applicable law requires a particular transfer safeguard or consent, we will use that mechanism; merely using the site does not waive your mandatory rights.

Our accounts and sourcing services are intended for adults aged 18 or older, principally business buyers. They are not directed to children, and we do not knowingly collect personal information from children under 13. Contact us if a child has supplied information so we can investigate and take appropriate action.

9. Changes to this notice

We will update the effective date when this notice changes and provide additional notice or obtain consent where required for a material change. We will not apply materially incompatible new uses to previously collected information without the notice or permission required by law. Third-party sites linked from our pages have their own practices.