Privacy Policy

Last updated: 6 September 2026

Controller:
TIP Tour Information Phuket
Montakarn Longsoh
59/6 Phisitkorani Road, Kathu, Patong, Phuket 83150, Thailand
E-mail: tourinfophuket@gmail.com · Phone / WhatsApp: +66 62 219 3397

We keep this policy short and honest. Our website does not use analytics tools, advertising trackers or marketing cookies. We only process the personal data we need to answer your enquiries and to run the tours and services you book.

1. Data we collect and why

1.1 Visiting the website (server logs)

When you open a page, our hosting provider automatically records technical data: IP address, date and time, requested page, referrer URL, browser and operating system. This is needed to deliver the site, keep it secure and diagnose faults. Log data is deleted or anonymised after a short period and is not combined with other data.
Legal basis: legitimate interest (Art. 6 (1) f GDPR – secure and stable operation of the website).

1.2 Contact form and direct contact

If you use our contact form, we process the details you enter (name, e-mail address, phone number, selected tour, message) to answer your request. Messages sent by e-mail, WhatsApp or LINE are processed in the same way.
Legal basis: pre-contractual measures / performance of a contract (Art. 6 (1) b GDPR) or legitimate interest in answering your enquiry (Art. 6 (1) f GDPR).
Retention: enquiries are deleted once fully handled, unless they lead to a booking (then see 1.3).

1.3 Bookings and payments

When you book a tour, ticket, transfer or rental, we process name, e-mail address, phone number, hotel / pick-up address, number of participants, tour date and – where required by the operator or authorities – nationality and passport details. We use this data to carry out the booking, arrange hotel pick-up, issue tickets and contact you about changes (e.g. weather cancellations).
Legal basis: performance of a contract (Art. 6 (1) b GDPR).
Retention: booking and invoice data are kept as long as required by Thai tax and commercial law and then deleted.

1.4 Customer account

You may create an account to view your bookings. Account data are stored until you delete the account or ask us to do so. Necessary session cookies are set when you log in.

1.5 Product reviews

If you leave a review, we store the review text, the name you enter, your e-mail address (not published) and your IP address (spam prevention). Reviews are published with the name you provided. You can ask us to remove a review at any time.

2. Recipients of your data

We never sell or rent personal data. We share data only where necessary:

• Tour operators, boat companies, drivers, show venues and rental partners in Thailand receive the information they need to provide the service you booked (name, number of guests, pick-up hotel, phone number for the day of the tour).
• Payment providers: online payments are processed by Stripe and PayPal. You enter your payment details directly with these providers; we never see or store full card numbers. Their privacy policies apply: stripe.com/privacy · paypal.com/privacy.
• Hosting: the website is hosted by GoDaddy. Our contract with GoDaddy includes data-processing terms.
• Cloudflare: the site is delivered through the Cloudflare content-delivery and security network. Cloudflare processes technical connection data (IP address, request headers) to protect against attacks and to speed up delivery. See cloudflare.com/privacypolicy.
• Authorities, where we are legally required to disclose data.

Some recipients (Stripe, PayPal, GoDaddy, Cloudflare) process data in the USA or other third countries. Transfers rely on EU standard contractual clauses and, where applicable, the EU–US Data Privacy Framework.

3. Spam protection in the contact form (GoDaddy Captcha)

To protect our contact form against automated spam, we use the captcha service of our hosting provider GoDaddy (Website Security, loaded from captcha.wpsecurity.godaddy.com). When the form is displayed, your browser connects to GoDaddy’s server; the service analyses technical characteristics of the request (IP address, browser information, interaction with the form) to distinguish humans from bots. No profile is created for advertising purposes. Legal basis: legitimate interest in preventing misuse of the form (Art. 6 (1) f GDPR). If you prefer not to use the form, you can always reach us by e-mail, WhatsApp or LINE.

4. Cookies – only what is technically necessary

We do not use tracking, analytics or marketing cookies and therefore do not show a cookie banner. The following technically necessary cookies may be set:

Legal basis: these cookies are strictly necessary to provide the functions you request (Art. 6 (1) f GDPR; § 25 (2) TTDSG).

5. Google Search Console – no visitor tracking

We use Google Search Console to see how our pages appear in Google search results (search terms, positions, technical errors). Search Console does not place any code or cookie on our website and does not collect data about individual visitors. It only reports aggregated data from Google’s own search engine. You are therefore not tracked in any way by using our site.

6. Communication via WhatsApp and LINE

Our website contains links that open WhatsApp or LINE. No data is transferred to these services simply by visiting our site. Only when you click the link and send us a message does the respective messenger process your data under its own terms (WhatsApp: Meta Platforms Ireland Ltd.; LINE: LY Corporation). We use these channels exclusively to answer your enquiry and coordinate your booking. If you prefer, contact us by e-mail instead.

7. External links and embedded content

Our pages may link to external websites (e.g. Wikipedia, operators’ sites). We are not responsible for their content or data processing. We do not embed third-party players or maps that load automatically.

8. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15),
• have inaccurate data corrected (Art. 16),
• have your data deleted (Art. 17) or its processing restricted (Art. 18),
• receive your data in a portable format (Art. 20),
• object to processing based on legitimate interest (Art. 21),
• lodge a complaint with a data-protection supervisory authority, for example the authority of your country of residence.

Thai residents have corresponding rights under the Personal Data Protection Act B.E. 2562 (PDPA).

To exercise your rights, e-mail us at tourinfophuket@gmail.com. We reply within 30 days.

9. Data security

The website is delivered exclusively via HTTPS (TLS encryption). Access to booking data is limited to the persons who need it to fulfil your booking. Payment data are handled solely by the payment providers.

10. Children

Our services are aimed at adults. We do not knowingly collect data from children under 16 without parental consent.

11. Changes

We update this policy when our services or legal requirements change. The current version is always available at tourinformation-phuket.com/privacy-policy/.