Privacy Policy

Contact Information

Mondulkiri Leaf

#27 Street 240, Chakto Mukh

Phnom Penh 12206, Cambodia

Phone: +855 23 987 421

Our Commitment to Your Privacy

At Mondulkiri Leaf, we understand that your privacy matters. This Privacy Policy explains how we collect, use, protect, and handle your personal information when you visit our website or engage with our coffee connection services.

We believe in transparency and want you to feel confident about how your information is managed. This policy outlines our practices in clear language, helping you make informed decisions about sharing information with us.

By using our website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our services or provide us with your personal information.

Effective Date: November 20, 2025 | Last Updated: December 3, 2025

Information We Collect

Information You Provide Directly

When you interact with our services, you may choose to provide us with certain information, including:

Contact Information: Your name, email address, phone number, and business details when you fill out contact forms or inquiry requests
Communication Data: The content of messages you send through our contact forms, including your questions, interests, and business requirements
Professional Information: Details about your business, role, sourcing needs, or hospitality operations when relevant to our services
Transaction Information: Records of consultations, service agreements, and business interactions when you engage our services

Information Collected Automatically

When you visit our website, certain information is collected automatically through cookies and similar technologies:

Usage Data: Pages visited, time spent on pages, navigation patterns, and interactions with website features
Device Information: Browser type, operating system, device type, screen resolution, and language preferences
Log Data: IP address, access times, referring websites, and technical error information
Cookie Data: Information stored through cookies and similar tracking technologies as described in our Cookie Policy

For detailed information about cookies, please review our Cookie Policy.

Information from Third Parties

We may receive information about you from third-party sources, including:

Analytics Services: Data from website analytics providers helping us understand user behavior and improve our services
Business Partners: Information from cooperatives, suppliers, or hospitality businesses we work with, when you've authorized them to share your details
Public Sources: Publicly available business information relevant to potential partnerships

How We Use Your Information

We use the information we collect for specific, legitimate purposes that support our business operations and your experience with our services:

Service Delivery and Communication

Responding to your inquiries and providing information about our coffee connection services
Facilitating introductions between international buyers and Cambodian coffee producers
Developing and delivering coffee tourism experiences for hospitality businesses
Providing regional blending consultation and sourcing coordination
Maintaining ongoing communication throughout our business relationship

Website Improvement and Analytics

Understanding how visitors use our website to improve navigation and content
Analyzing user behavior to enhance the effectiveness of our online presence
Testing new features and functionality before wider implementation
Identifying and fixing technical issues or errors
Optimizing website performance and loading speeds

Marketing and Business Development

Sending relevant information about our services, subject to your consent and preferences
Sharing updates about Cambodia's coffee sector and regional developments
Inviting you to events, farm visits, or cupping sessions that may interest you
Conducting market research to better understand client needs and preferences

You can opt out of marketing communications at any time by contacting us directly.

Legal and Security Purposes

Complying with legal obligations and responding to lawful requests from authorities
Protecting our rights, property, and safety, as well as those of our clients and partners
Detecting and preventing fraud, security breaches, and technical issues
Enforcing our terms of service and other agreements

Legal Basis for Processing

We process your personal information based on the following legal grounds:

Consent: When you have given clear consent for us to process your personal information for specific purposes, such as marketing communications
Contractual Necessity: When processing is necessary to perform our services or fulfill our contractual obligations to you
Legitimate Interests: When we have legitimate business interests that don't override your privacy rights, such as improving our services and maintaining security
Legal Obligations: When we must process information to comply with legal requirements or respond to lawful requests

Information Sharing and Disclosure

We respect your privacy and do not sell your personal information to third parties. We may share your information only in the following circumstances:

Service Partners and Facilitators

With your knowledge and consent, we may share relevant information with:

Cambodian coffee cooperatives and producers when facilitating sourcing connections
Hospitality businesses when developing coffee tourism experiences
Supply chain partners involved in sample procurement or logistics coordination

Such sharing occurs only to facilitate the specific services you've requested.

Service Providers

We engage trusted third-party service providers who assist with:

Website hosting and technical infrastructure
Email communications and marketing platforms
Analytics and performance monitoring
Payment processing for consulting services

These providers are contractually obligated to protect your information and use it only for authorized purposes.

Legal Requirements

We may disclose information when required by law, legal process, or governmental request, or when necessary to protect our rights, property, or safety, or that of our clients and partners.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and the choices you have regarding your information.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law or legitimate business needs.

Specific retention periods include:

Contact Form Submissions: Retained for three years from the date of submission or until you request deletion
Client Records: Maintained for the duration of our business relationship plus seven years for legal and accounting purposes
Marketing Data: Kept until you unsubscribe or request deletion, whichever comes first
Website Analytics: Anonymized and aggregated data may be retained indefinitely for statistical purposes

When information is no longer needed, we securely delete or anonymize it in accordance with our data retention policies.

Data Security Measures

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it from unauthorized access, disclosure, alteration, or destruction.

Technical Safeguards

Secure data encryption during transmission
Regular security audits and updates
Firewall protection and intrusion detection
Secure backup systems and disaster recovery

Organizational Safeguards

Limited access to personal data on need-to-know basis
Staff training on data protection practices
Confidentiality agreements with service providers
Regular review and update of security procedures

While we strive to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but continuously work to maintain industry-standard protections.

Your Rights and Opt-Out Instructions

You have significant rights regarding your personal information. We respect these rights and make it easy for you to exercise them:

Right to Access

You can request a copy of the personal information we hold about you. We'll provide this in a structured, commonly used format.

Right to Rectification

If information we hold about you is inaccurate or incomplete, you can request that we correct or complete it.

Right to Erasure

You can request that we delete your personal information, subject to certain legal obligations that may require us to retain specific records.

Right to Data Portability

You can request that we transfer your information to another service provider in a machine-readable format where technically feasible.

Right to Object

You can object to our processing of your information for direct marketing purposes or based on legitimate interests.

Right to Withdraw Consent

Where we rely on your consent to process information, you can withdraw that consent at any time.

How to Exercise Your Rights

You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:

Avoid filling out contact forms, account registrations, or any data-submitting features
Disable cookies through your browser settings (see our Cookie Policy for more details)
Contact us directly to request the deletion of any previously shared personal data
Opt out of marketing communications by using the unsubscribe link in our emails

We respect your privacy choices. If you would like us to delete your data or exercise any of your rights, please reach out to us at the contact details provided on our Contact page. We will process your request promptly, typically within 30 days.

International Data Transfers

As we operate internationally and work with coffee buyers and hospitality businesses across multiple countries, your personal information may be transferred to and processed in countries outside of Cambodia.

When we transfer information internationally, we ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy. These safeguards may include standard contractual clauses, adequacy decisions, or other legally recognized transfer mechanisms.

We work only with partners who commit to maintaining adequate data protection standards, regardless of their location.

Children's Privacy

Our services are intended for business professionals and are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

If we become aware that we have inadvertently collected information from a child under 18, we will take steps to delete that information as quickly as possible. If you believe we have collected information from a child, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other operational needs. When we make material changes, we will update the "Last Updated" date at the top of this policy.

For significant changes that affect your rights or how we use your information, we will provide additional notice through email or a prominent notice on our website before the changes take effect.

We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.

Questions and Concerns

If you have questions about this Privacy Policy, concerns about how we handle your information, or wish to exercise your data protection rights, please contact us:

Mondulkiri Leaf

#27 Street 240, Chakto Mukh, Phnom Penh 12206, Cambodia

Email: [email protected]

Phone: +855 23 987 421

We take all privacy inquiries seriously and aim to respond within 48 hours during business days. For data deletion requests or rights exercised under data protection laws, we will respond within 30 days as required by applicable regulations.