Privacy Policy

1. Who we are

Thai Culture Tours (ทัวร์วัฒนธรรมไทย) is a tour operator licensed in Thailand by the Department of Tourism, Tourism Business Licence No. 14/04954. We are responsible (the “data controller”) for the personal data described in this policy.

• Address: 62/40 Moo 3, Bang Kruai–Sai Noi Road, Wat Chalo, Bang Kruai, Nonthaburi 11130, Thailand
• Email: contact@thaiculture.tours
• Phone: +66 65 519 4892 · WhatsApp: +66 65 993 1417

We process personal data in line with Thailand’s Personal Data Protection Act B.E. 2562 (2019) (PDPA) and, for visitors in the European Union or EEA, the General Data Protection Regulation (GDPR).

2. What data we collect

We only collect what you give us or what is needed to deliver your tour:

• Enquiries (website forms, email, WhatsApp, LINE): your name, email address, phone or WhatsApp number if you give it, and the content of your message – tour of interest, travel dates, number of travellers, hotel or pick-up area, preferred language.
• Bookings: the names of the travellers, pick-up place and time, the agreed programme and price, and payment records (amount, date, reference). We do not receive or store card numbers.
• Information you choose to share, such as dietary needs, mobility needs or the ages of children, used only to adapt the tour.
• Technical data: when you visit the site, our web server keeps standard access logs (IP address, browser type, page requested, time) for security and troubleshooting.

We do not use analytics, advertising trackers or profiling, and we do not send newsletters.

3. Why we use it and on what basis

• To answer your enquiry and prepare an offer – steps you asked for before a contract (PDPA s. 24(3); GDPR art. 6(1)(b)).
• To organise and deliver your tour – performance of our contract with you (same legal bases).
• To keep accounting and tax records – legal obligation (PDPA s. 24(6); GDPR art. 6(1)(c)).
• To keep the website secure and working – our legitimate interest (PDPA s. 24(5); GDPR art. 6(1)(f)).
• Health-related details you share (for example an allergy or mobility need) – only with your explicit consent, which you can withdraw at any time.

We never use your data for automated decisions that affect you.

4. Who we share it with

We do not sell or rent personal data. We share it only when needed:

• Your guide, driver, boat operator or host family receive what they need to run your tour (for example lead traveller name, pick-up place and time, phone number, number of travellers).
• Technical service providers that work on our behalf: our hosting provider (website and booking system, servers in the Netherlands), Zoho (email), Resend (sending booking emails) and Web3Forms (backup delivery of website forms).
• Messaging apps such as WhatsApp or LINE, when you choose to contact us there; their own privacy policies apply.
• Booking platforms such as GetYourGuide or Viator, if you booked through them; they share your booking details with us and their privacy policies apply to your account with them.
• Authorities, only where the law requires it.

5. International transfers

We are based in Thailand and our tours take place in Thailand, so data you send us is used in Thailand. Some of our providers store data in the European Union or in other countries. Where data leaves the country where it was collected, we rely on providers that offer appropriate safeguards, such as the European Commission’s standard contractual clauses.

6. How long we keep it

• Enquiries that do not lead to a booking: up to 12 months after our last contact.
• Bookings and payment records: as long as Thai accounting and tax law requires (usually 5 years), then deleted.
• Server access logs: a few weeks, then deleted automatically.

7. Your rights

You can ask us at any time to:

• access your personal data and receive a copy;
• correct inaccurate data;
• delete your data when we no longer need it;
• restrict or object to some uses;
• receive your data in a portable format;
• withdraw consent you gave, without affecting earlier use.

Write to contact@thaiculture.tours; we reply within 30 days. You may also complain to Thailand’s Personal Data Protection Committee (PDPC) or, if you live in the EU/EEA, to the data protection authority of your country.

8. Security

The website and our booking system use encrypted connections (HTTPS). Access to customer data is limited to the people who organise your tour and protected by passwords, and our booking database is backed up daily.

9. Children

Our website is not aimed at children. We only hold children’s details (such as names or ages) when a parent or guardian gives them to us for a booking.

10. Changes

We may update this policy when our services or the law change. The date at the top always shows the latest version.