Privacy Policy
Last updated: 2025
Thai Culture Tours ("we", "our", "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with the General Data Protection Regulation (GDPR – EU 2016/679).
1. Data Controller
Thai Culture Tours
Address: as listed on the Contact page (Belgium)
VAT Number: BE0884981775
Email: contact@thaiculture.tours
2. Personal Data We Collect
We collect and process only the data that you voluntarily provide via the forms on our website:
- Name
- Email address
- Message content (travel preferences, questions, dates, number of people, etc.)
- Language preference (if selected)
We do not intentionally collect sensitive categories of data (such as health data, religious beliefs, or similar).
3. How We Collect Your Data
When you complete and submit a form on our website, your message is transmitted securely through Web3Forms, our trusted form processing provider. Web3Forms is GDPR-compliant and does not sell or use your data for advertising purposes.
4. Purposes of Data Processing
We process your personal data solely for the following purposes:
- To read and respond to your inquiry or message;
- To provide travel recommendations and suggestions for tours or itineraries;
- To prepare and send quotes or personalized trip proposals;
- To follow up with you regarding your request or potential booking.
We do not use your personal data for automated decision-making or profiling that produces legal effects concerning you.
5. Legal Basis for Processing
Our processing of your personal data is based on one or more of the following legal grounds:
- Article 6(1)(b) GDPR – Contract or pre-contractual steps: processing is necessary in order to take steps at your request prior to entering into a contract (for example, responding to your inquiry about a tour);
- Article 6(1)(a) GDPR – Consent: you voluntarily provide your data via the contact form and consent to us using it to respond to you.
6. Data Retention
We retain your data only for as long as necessary for the purposes described above:
- For general inquiries: up to 12 months from the date of your last interaction with us;
- If you become a client and book services: data may be stored for a longer period as required by applicable legal, tax, and accounting obligations.
Once the retention period expires, your personal data will be securely deleted or anonymised.
7. Sharing of Personal Data
We do not sell, trade, or rent your personal data to third parties.
We may share your data only in the following limited cases:
- With Web3Forms, as a technical provider for form submissions;
- With licensed local guides or partners, but only when necessary to prepare or deliver a travel proposal, and only with your knowledge and agreement;
- With public authorities or institutions, if required by law or legitimate legal requests.
8. International Data Transfers
Because Web3Forms may process data on servers located outside the European Union, your personal data may be transferred internationally. Any such transfer is carried out using appropriate safeguards in line with GDPR requirements (such as secure transmission and data protection measures).
9. Your Rights Under GDPR
Under GDPR, you have the following rights regarding your personal data:
- Right of access: to obtain confirmation whether we process your personal data and receive a copy of the data;
- Right to rectification: to request correction of inaccurate or incomplete data;
- Right to erasure ("right to be forgotten"): to request deletion of your data when it is no longer necessary or when you withdraw consent;
- Right to restriction of processing: to limit the processing of your data in certain situations;
- Right to data portability: to receive your data in a structured, commonly used, and machine-readable format;
- Right to object: to object to processing based on legitimate interests;
- Right to withdraw consent: where processing is based on your consent, you can withdraw it at any time, without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, please contact us at: contact@thaiculture.tours.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including but not limited to:
- Secure transmission over HTTPS;
- Restricted access to personal data by authorised staff only;
- Use of reputable service providers and secure infrastructure.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website and will indicate the date of the last update.