The Thai Tourism Privacy Policy

Scope and Application

The Thai Tourism Co., Ltd. (“The Thai Tourism”, “we”, “us”, “our”) is committed to protecting and respecting your privacy and complying with applicable data protection laws. The Thai Tourism may process your personal data when you interact with us on our website (https://www.thethaitourism.com) or through The Thai Tourism mobile application for Android and iOS (together, the “Platform”), use services offered by us or by third-party partners (the “Operators”) through the Platform (“The Thai Tourism Services”), or collaborate with us to offer services on our Platform. This Privacy Policy sets out the basis and terms on which we collect, use, and process your personal data. The data protection laws of certain countries and regions may require us to provide additional information about how we handle your data. If applicable, such details will be provided below. Please read this Privacy Policy carefully. For any questions, please reach out to us at [email protected]. Our full Privacy Policy is available below. You can click on any heading for further details:

COLLECTION OF PERSONAL DATA
TYPES OF PERSONAL DATA
USE OF PERSONAL DATA
SHARING OF PERSONAL DATA
MARKETING
DATA SECURITY
INTERNATIONAL TRANSFER OF DATA
DATA RETENTION
COOKIES
MOBILE APP DATA
ACCOUNT DELETION
YOUR RIGHTS
LINKS TO THIRD PARTY WEBSITES
REGION SPECIFIC PRIVACY RIGHTS
UPDATES TO THE PRIVACY POLICY

1. COLLECTION OF PERSONAL DATA

The Thai Tourism collects personal data directly from you when:

you visit our Platform,
you create an account,
you book or purchase services from us, and
you collaborate with us to offer services as a merchant, agent, or affiliate (collectively, the “Operators”). The term “Operator” refers to individuals or companies that partner with The Thai Tourism to deliver services, including but not limited to travel agents, tour providers, transport operators, hotels, resorts, rental agencies, and other experience or activity vendors.

2. TYPES OF PERSONAL DATA

Depending on how you access and use The Thai Tourism Platform, we may collect and process some or all of the following categories of personal data:

1) Identification information and contact details

This includes your full name, date of birth, email address, phone number, postal address, country or region of residence, and any other information directly related to your identification and contact. This data is typically collected when you create an account or register as an Operator to provide services through our Platform.

2) Booking information

This includes your passport number, passport expiry date, nationality, government-issued IDs, loyalty program details, booking credits (if applicable), certifications (such as diving licenses or driving permits), billing and payment details including credit card or bank account numbers, and insurance information—anything required to process your booking.

3) Travel preferences and itinerary details

This includes information about your destinations, travel dates, flights, accommodations, past bookings, and preferences for specific activities or types of experiences.

4) Health information (only when necessary)

In rare cases, we may collect health-related data such as medical certificates or notes if required by an Operator for participation in an activity or to ensure your safety during the service.

5) Content uploaded

This includes any images, videos, recordings, and written comments you submit or upload to The Thai Tourism Platform.

6) Communications

This includes communications between you and The Thai Tourism or between you and Operators, whether via the Platform, email, messaging, or other supported channels.

7) Survey information

This includes your responses and feedback to surveys related to The Thai Tourism services and overall experience.

8) Device information and technical data

This includes IP addresses, device types, browser information, unique device IDs, MAC addresses, cookies and tracking data, session logs, timestamps, and pages visited before or after visiting our Platform.

9) Location data

This includes approximate location information inferred from your IP address, mobile network, or GPS data (if enabled). You may adjust your device settings to disable location access, but doing so may affect certain features or recommendations. When you use your mobile device to visit The Thai Tourism Platform, we may collect information about you and your device as outlined above. This may include location data if you have given permission and configured your device to share such data with us or uploaded content (e.g. photos) that includes location information. We use location data as described in this Privacy Policy—for example, to recommend nearby services while you travel or to tailor content to your location. You can adjust your device settings at any time to disable location sharing. Please note that some Platform features may not work correctly if you deactivate this function. For assistance, please consult your device manufacturer or mobile service provider.

We do not currently use any artificial intelligence (AI) services or tools on our Platform. Should we introduce such features in the future, you will be provided with clear terms, privacy information, and the option to give or withhold consent.

3 USE OF PERSONAL DATA

The Thai Tourism will process your personal data for the following purposes:

1) To manage your user account

To facilitate account creation and updates, and manage your preferences on the Platform.

2) To provide The Thai Tourism services to you

To process your bookings, reservations, and rentals; to send booking confirmations and reminders; to verify eligibility for certain activities (e.g., high-risk adventure experiences); to share optional insurance information where relevant; and to coordinate with insurance providers on your behalf, if applicable.

3) To verify identity

To confirm your identity in connection with services you have booked through our Platform.

4) For marketing purposes

To send you marketing content about our offers, promotions, and updates (see Section 5 for details).

5) For feedback and market research

To contact you for reviews, feedback, and participation in surveys related to your experience.

6) To provide customer support

To respond to your inquiries, troubleshoot problems, and offer service-related assistance.

71 To improve our Platform and services

To optimize the performance of our Platform and services based on your preferences and behavior.

8) To comply with legal obligations and for administrative purposes

To process payments, issue invoices, prevent fraud, comply with anti-money laundering laws, fulfill audit or accounting requirements, and defend our legal rights where necessary.

Providing your personal data to The Thai Tourism is voluntary. However, if you do not provide certain required information, we may be unable to offer you some of our services (e.g., creating an account or processing a booking).

4 SHARING OF PERSONAL DATA

The Thai Tourism may share your personal data with the following parties:

1) Operators

We may share your data with Operators (including but not limited to tour agencies, activity providers, hotels, transport providers, insurance companies, and affiliated vendors) so they can fulfill your bookings or reservations.

2) Internal company entities

Your data may be shared within The Thai Tourism Co., Ltd. for purposes such as payment processing, customer support, or operational management.

3) Third-party service providers

We may engage external vendors to support services like hosting, cybersecurity, payment processing, marketing, analytics, or customer support. These providers act on our behalf and under strict confidentiality agreements.

4) Government and regulatory authorities

We may disclose your personal data to public agencies or authorities when legally required, or to comply with investigations, legal claims, court orders, or fraud prevention efforts.

5) Corporate restructuring

In the event of a merger, acquisition, or sale, your data may be transferred to the new entity or its authorized parties, who will continue to honor this Privacy Policy.

6) Other third parties

In other situations, we will only share your data with third parties when you have given your explicit consent, or where permitted by applicable law.

We do not sell your personal data to any third party.
The Thai Tourism may share anonymized or aggregated data with third parties, including advertisers. This data does not personally identify you. However, if third parties combine this with other data they hold, they may be able to identify you. In such cases, the third party’s privacy policy will apply.

5 MARKETING

The Thai Tourism may use your personal data for direct marketing purposes, such as informing you about new deals, exclusive promotions, and seasonal discounts. We may also analyse your preferences and usage trends to personalize offers and recommendations relevant to your travel interests.

We work with external marketing partners and platforms (e.g., advertising agencies and social media platforms) to run marketing campaigns, which may involve sharing limited personal data necessary for campaign execution.
We may send direct marketing communications via post, email, telephone, or mobile notifications. Where required by law, we will obtain your consent before sending such communications.
You may withdraw your consent at any time. All marketing emails from The Thai Tourism include an unsubscribe option. Alternatively, you may contact us at [email protected] to opt out of further communications.

6 DATA SECURITY

The Thai Tourism implements appropriate technical and organizational safeguards to protect your personal data, in accordance with applicable data protection regulations. While we strive to secure your information, we cannot guarantee complete protection against cyber threats during Internet transmission.

Your data may be stored on our secure servers or with trusted third-party service providers. We employ physical and digital protections to prevent unauthorized access, alteration, or loss of your data. Where possible, we anonymize or aggregate data for analytics and performance monitoring.
All payment transactions carried out by us or our authorized payment partners are encrypted using standard online security protocols.
You are responsible for maintaining the confidentiality of your password and any login credentials we provide. Do not share your password with anyone.

7 INTERNATIONAL TRANSFER OF DATA

Your personal data may be transferred to and processed in countries outside your own, including regions with different levels of data protection. In such cases, we ensure that appropriate safeguards are in place to protect your data in line with applicable legal requirements.

8 DATA RETENTION

The Thai Tourism will retain your personal data only for as long as necessary to fulfill the purposes outlined in Section 3, or to comply with legal and regulatory obligations. When your personal data is no longer required, we will securely delete or anonymize it.

9 COOKIES

We use cookies and similar tracking technologies to enhance your experience on The Thai Tourism Platform, improve site performance, and deliver personalized content and services. Cookies may process certain personal data from your browser or device. Further details can be found in our Cookie Policy.

MOBILE APP DATA

This section describes what The Thai Tourism mobile app for Android and iOS actually collects and how it differs from the website.

1) Signing in

The app supports sign-in with an email one-time code (OTP), Google Sign-In, or Apple Sign-In. We process your name, email address and the account identifier provided by the sign-in provider to create and manage your account.

2) Bookings and payments

Booking and traveller details you enter are processed as described in Sections 2 and 3. Card payments are handled by our payment processor, Stripe: your card details are sent from your device directly to Stripe and we do not store your full card number on our servers. We keep records of your bookings and payment status.

3) Photos

If you choose to add photos to a review, the app asks for camera or photo-library access at that moment. Uploading photos is optional and always started by you.

4) Push notifications

To deliver booking updates, the app registers a push notification token together with your device model. Notification delivery uses the Expo push service and Google/Apple notification infrastructure. You can disable notifications in your device settings.

5) What the app does not collect

The app does not request your device location, does not use advertising identifiers, and does not include third-party advertising or analytics SDKs. (When you browse the website, approximate location may be inferred from your IP address as described in Section 2 — the app itself requests no location permission.)

6) Service providers used by the app

Stripe (payment processing), Google (sign-in and notification delivery), Apple (sign-in), Expo (push notifications) and Amazon Web Services (hosting and storage) process data on our behalf as described in Section 4. Some in-app pages link to third-party partner websites (for example travel-insurance partners); Section 11 applies once you leave our Platform.

ACCOUNT DELETION

You can delete your The Thai Tourism account at any time, from inside the app or on the website:

In the app: Profile → Settings → Delete account, then confirm.
On the website: sign in, then Dashboard → Settings → Delete account.
By request: email us from your registered email address at [email protected].

When you delete your account it is deactivated immediately: sign-in is disabled, your password is removed and signed-in sessions can no longer be renewed. If you deleted your account by mistake, you can restore it by verifying a one-time code sent to your registered email address.
If you want your personal data removed beyond deactivation, email us at [email protected] and we will process your erasure request in line with Section 10 and applicable law. Records we are legally required to keep — such as completed booking, payment, invoicing and fraud-prevention records — are retained for as long as those obligations require (see Section 8).
Full instructions, including what is deleted and what may be retained, are published at /account-deletion on this website.

10 YOUR RIGHTS

You have the right to access the personal data we hold about you and to request a copy of it. You may also request correction of inaccurate or incomplete data. Where allowed by local regulations, a reasonable fee may apply for processing such requests.

You have the right to withdraw your consent to the use or disclosure of your personal data for any purposes stated under Sections 3 and 5. Please note that withdrawing consent does not affect our ability to collect, use, or disclose your data where permitted by applicable law.
You may object to the processing of your data for direct marketing purposes at any time. Once objected, your data will no longer be processed for such purposes.
If you reside in a jurisdiction with enhanced privacy rights (e.g., European Union or United States), additional rights may apply. Please refer to Section 12 for more information.
To exercise your rights, please contact us at [email protected]. Upon receiving your request, we may require time to assess and respond, and may inform you of the consequences (e.g., suspension of services if we cannot continue processing necessary data). Depending on the scope of your request, we may be unable to continue offering certain services.
You also have the right to file a complaint with your local data protection authority if you believe your data has been mishandled.

11 LINKS TO THIRD-PARTY WEBSITES

The Thai Tourism Platform may include links to external websites. Once you leave our Platform and access a third-party site, your data is subject to that site's privacy policy—not ours. We are not responsible for any loss or damage you may incur from using or providing data to third-party websites.

12 REGION SPECIFIC PRIVACY RIGHTS

EUROPE This section applies to you if you are located in the European Economic Area (EEA) during your interaction with The Thai Tourism, and we are acting as a data controller.

SPECIAL CATEGORIES OF PERSONAL DATA

The Thai Tourism may collect special categories of personal data, such as health-related information (as detailed in Section 2 of this Privacy Policy). Where required under European data protection laws, including the General Data Protection Regulation (GDPR), we will request your explicit consent before processing such data.

LEGAL BASES FOR USE OF PERSONAL DATA

Under the GDPR, we are required to identify and disclose the specific legal bases on which we rely to process your personal data for each purpose stated in Section 3 of this Privacy Policy. These are outlined below:

Processing Purpose (Section 3)	Legal Basis	Types of Personal Data (as per Section 2)
To manage your user account (3(a))	Legitimate interest, Contract performance, Consent	Identification info, Contact details, Booking info, Travel preferences, Communications
To provide The Thai Tourism services to you (3(b))	Contract performance, Legitimate interest, Consent	Identification info, Booking info, Travel preferences, Health info (if applicable), Communications, Location data
To verify your identity (3(c))	Legal obligation, Contract performance, Legitimate interest	Identification info, Contact details, Booking info
For marketing purposes (3(d))	Consent, Legitimate interest	Identification info, Contact details, Booking info, Travel preferences, Location data
For feedback and market research (3(e))	Legitimate interest	Identification info, Contact details, Travel preferences, Survey responses
To provide customer support (3(f))	Contract performance, Legitimate interest	Identification info, Booking info, Travel preferences, Communications
To improve our Platform and services (3(g))	Legitimate interest	Survey responses, Device info, Technical data
To comply with legal obligations & for administrative use (3(h))	Legal obligation, Contract performance	All personal data types as required

PROFILING AND AUTOMATED DECISION-MAKING

The Thai Tourism may perform profiling—automated analysis of personal data to understand or predict your preferences, behaviors, or interests. This is done to provide you with better, more personalized travel experiences and relevant offers.

We may also use automated decision-making (without human involvement) for certain operational decisions—for example, to streamline customer service or tailor product suggestions based on your past bookings or interests.
We do not make decisions based solely on automated processing that have legal or similarly significant effects on you unless such processing is:

necessary for entering into or performing a contract;
authorized by law;
based on your explicit consent.

EXPORT OUTSIDE OF THE EEA

Your personal data may be transferred outside the European Economic Area (EEA). If such a transfer is made to a country or region that does not offer an equivalent level of data protection, The Thai Tourism will use reasonable efforts to ensure appropriate safeguards are in place. These safeguards may include:

Standard contractual clauses approved by the European Commission; or
Other lawful transfer mechanisms compliant with applicable data protection laws.

YOUR RIGHTS (EUROPE)

In addition to the rights stated in Section 10, you also have the following rights under European data protection law:

You may exercise these rights by contacting us at [email protected]. We do not charge any fee for handling such requests, and we aim to respond within a reasonable timeframe.
If you believe your rights are not being respected, you may file a complaint with your local data protection authority.

Right to erasure – You may request the deletion of your personal data under certain conditions.
Right to restriction of processing – You may request a limitation on how we use your personal data in specific cases.
Right to object – You may object to processing based on our legitimate interests. We will stop processing unless we have compelling legal grounds to continue or need the data for legal claims.
Right to data portability – You may request to receive the personal data you provided in a structured, machine-readable format or to have it transferred to another provider.
Right to withdraw consent – If our processing is based on your consent, you may withdraw it at any time.

UNITED STATES

This section applies if you are based in the United States (US) during your interaction with The Thai Tourism.

SENSITIVE PERSONAL INFORMATION

Some of the data we collect may be classified as “sensitive personal data” under US laws. This may include health-related information. We only collect such data when necessary to provide our services and always in accordance with applicable laws. Your explicit consent will be obtained before collecting sensitive data. If you decline to provide it, we may be unable to offer certain services.

SALE DISCLOSURE

The Thai Tourism does not sell your personal data or transfer it to third parties for their own use. However, we may permit third-party technologies (e.g., cookies) to collect limited data for advertising purposes. See Sections 4 and 9 for more details.

YOUR RIGHTS (US)

Depending on your state of residence, you may have rights under US data privacy laws, including:

To exercise these rights, please email [email protected]. We may require you to verify your identity before acting on your request.

Right to access and receive a copy of your data
Right to update or correct inaccurate data
Right to request deletion of your data
Right to restrict or object to certain processing
Right to data portability
Right to appeal a denial of your request

LOCATION-SPECIFIC INFORMATION

Categories of Personal Data	Purpose (Section 3)	Applicable Users	Categories of Third Parties with Access
Identification and contact info	Account management, booking, identity verification, marketing, support, legal compliance	Bookers	Operators, service providers, government or legal authorities (if required)
Booking info and travel preferences	Booking fulfillment, account setup, service delivery, support, legal compliance	Bookers	Operators, service providers
Sensitive personal data (e.g., health info)	Booking fulfillment, legal compliance	Bookers	Operators, service providers, legal authorities (if required)
Device and technical data (IP, browser, usage)	Account management, analytics, platform improvement, legal compliance	Bookers, visitors	Service providers, analytics vendors, legal authorities (if required)
Communications and survey responses	Account management, feedback, customer support, analytics	Bookers	Operators, service providers
Inferences (e.g., user behavior or preferences)	Personalization, marketing, service enhancement	Bookers	Operators, service providers

13. UPDATES TO THE PRIVACY POLICY

This Privacy Policy is effective as of 01 July 2025 and was last updated on 13 August 2026 (mobile app coverage and account-deletion instructions added). This policy is written in English, and in case of translation discrepancies, the English version shall prevail.

The Thai Tourism Co., Ltd., the operator of The Thai Tourism, reserves the right to update or modify this Privacy Policy at any time. If material changes are made, we will post the updated policy on our website and, where appropriate, notify you via email or platform notification.
We encourage you to review this Privacy Policy periodically to stay informed of how we are protecting your personal data.