Privacy Policy

1. Introduction and Scope

This Privacy Policy (the “Policy”) describes how Nittha Siam Kitchen (“we,” “us,” or “our”) collects, uses, discloses, and retains information in connection with your access to and use of the website located at www.nitthasiamkitchen.com (the “Site”).

This Policy applies solely to information collected through the Site. It does not apply to information collected offline, at our restaurant premises, by telephone, or by any third-party platform to which the Site links. Your use of the Site constitutes your acknowledgement of this Policy.

The Site is operated from and directed to persons located in the United States, and is governed by the laws of the Commonwealth of Kentucky without regard to its conflict-of-laws provisions.

2. Definitions

For purposes of this Policy:

• “Personal Information” means information that identifies, relates to, describes, or is reasonably capable of being associated with an identified or identifiable individual.
• “Usage Data” means information generated automatically by your interaction with the Site, such as pages requested, referring source, and general device characteristics.
• “Cookies” means small text files placed on your device by a website or its service providers to store information across requests.

3. Information We Collect

3.1 Information You Provide Directly

The Site does not provide contact forms, user accounts, login functionality, newsletter or mailing-list subscription, reservation forms, or payment processing. Accordingly, we do not collect names, email addresses, telephone numbers, postal addresses, payment card details, or any other Personal Information submitted by you through the Site.

3.2 Information Collected Automatically

When you access the Site, our analytics provider collects Usage Data on our behalf, consisting generally of:

• pages and screens requested, and the duration of each visit;
• approximate geographic location, derived from your Internet Protocol (IP) address and resolved no more precisely than the city level;
• device category, operating system, browser type and version, and screen dimensions;
• the referring website, search engine, or link through which you reached the Site; and
• the date and time of access, and general interaction events such as scroll depth.

Google Analytics uses IP addresses transiently to derive the approximate location described above. IP addresses are not logged or made available to us, and we do not receive any identifier that we are able to associate with a particular individual.

3.3 Information Obtained from Third Parties

We do not purchase, license, or otherwise obtain Personal Information about you from data brokers, advertising networks, or other third-party sources.

4. Cookies and Similar Technologies

The Site sets analytics cookies only. It does not set advertising, retargeting, cross-context behavioral advertising, or social-media tracking cookies, and it does not incorporate any advertising pixel or conversion-tracking tag.

Additional cookies may be set by Google when the embedded map on our Contact page loads, as described in Section 7.2. You may block or delete cookies through your browser settings; the Site remains fully functional if you do so.

5. How We Use Information

We use the Usage Data described in Section 3.2 solely to:

• operate, maintain, and deliver the Site;
• measure aggregate traffic and understand which pages visitors find useful;
• diagnose technical faults and verify that the Site functions across devices and browsers;
• improve the organization and presentation of our menu and location information; and
• protect the security and integrity of the Site.

We do not use Usage Data to build marketing profiles, to make automated decisions about individuals, or to attempt to identify individual visitors.

6. Disclosure of Information

6.1 Service Providers

We disclose Usage Data to Google LLC, which provides analytics and mapping services on our behalf and processes that data in accordance with its own terms and privacy policy.

6.2 Legal and Regulatory Disclosure

We may disclose information where we reasonably believe disclosure is required by law, regulation, legal process, or governmental request, or is necessary to protect our rights, property, or safety, or that of our customers or the public.

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, information held in connection with the Site may be transferred as part of that transaction, subject to this Policy.

6.4 No Sale or Sharing

We do not sell Personal Information, and we do not share Personal Information for cross-context behavioral advertising,as those terms are defined under applicable state privacy statutes. We have not sold or shared Personal Information in the preceding twelve (12) months.

7. Third-Party Services and Links

7.1 Google Analytics

The Site uses Google Analytics 4, a service provided by Google LLC. Information about Google’s processing is available in the Google Privacy Policy and at How Google uses information from sites that use its services.

7.2 Google Maps

Our Contact page embeds an interactive map supplied by Google. Loading that map transmits a request to Google, which may set its own cookies and receive your IP address, in the same manner as visiting Google Maps directly. This processing is governed by Google’s policies rather than this Policy.

7.3 External Links

The Site links to third-party platforms, including review services such as Yelp and Google. These are separate businesses that we do not control. When you follow such a link you leave the Site, and any information you provide is subject to the privacy policy of that platform’s operator. We are not responsible for the content or privacy practices of any third-party site.

8. Data Retention

We do not maintain a separate database of visitor information. Usage Data is retained by Google Analytics in accordance with the data-retention period configured for our property, after which user-level and event-level records are deleted by Google. Aggregate reporting measures may be retained by Google for longer periods. Google’s retention practices are described in its documentation and are subject to change by Google.

9. Data Security

The Site is delivered over encrypted connections (HTTPS/TLS) and is published as static content, meaning it maintains no user database, login system, or payment infrastructure that could store Personal Information. While we take reasonable measures to protect information, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

10. Your Choices

• Browser controls. Most browsers allow you to refuse or delete cookies for a specific site. Doing so does not impair the Site’s functionality.
• Analytics opt-out. You may prevent Google Analytics from collecting data by installing the Google Analytics Opt-out Browser Add-on.
• Do Not Track and Global Privacy Control. The Site does not currently respond to Do Not Track or Global Privacy Control browser signals, as no uniform standard for such signals has been adopted. Because the Site sets no advertising or cross-site tracking technologies, there is no behavioral advertising to opt out of.

11. State Privacy Rights

11.1 Kentucky Residents

The Kentucky Consumer Data Protection Act (KRS Chapter 367) took effect January 1, 2026. It applies to persons that conduct business in the Commonwealth and that, during a calendar year, control or process the personal data of at least 100,000 consumers, or of at least 25,000 consumers while deriving more than fifty percent (50%) of gross revenue from the sale of personal data. We do not meet either threshold, and the Act therefore does not impose obligations on us. Independently of statutory applicability, we do not sell personal data and will consider any reasonable request described in Section 11.3.

11.2 Residents of Other States

Other states, including California, have enacted consumer privacy statutes applicable to businesses meeting specified revenue or processing thresholds. We do not meet those thresholds. We do not sell Personal Information in any jurisdiction.

11.3 Submitting a Request

You may contact us using the details in Section 15 to ask what information we hold about you, or to request its deletion. For a visitor to the Site, the answer will ordinarily be that we hold no information capable of identifying you, as described in Section 3.

12. Children’s Privacy

The Site is a restaurant menu and information site. It is not directed to children under the age of 13, and we do not knowingly collect Personal Information from children under 13. If you believe a child has provided information to us, please contact us using the details in Section 15 and we will take appropriate steps.

13. Visitors Outside the United States

The Site is intended for visitors located in the United States, and our restaurant serves a local market. We do not target visitors in the European Economic Area or the United Kingdom. If you access the Site from outside the United States, you do so on your own initiative and are responsible for compliance with applicable local law.

14. Changes to This Policy

We may revise this Policy to reflect changes to the Site or to applicable law. Revisions take effect upon posting, and the “Last updated” date above will be amended accordingly. Material changes — for example, the introduction of a contact form, online ordering conducted on the Site itself, or advertising technologies — will be reflected in a corresponding revision to Sections 3 and 4.

15. Contact Us

Questions or requests concerning this Policy may be directed to: