Privacy Policy

Effective Date: 25 September 2025

Thank Me Later Co., Ltd. (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, make an inquiry, or book a tour. We comply with Thailand’s Personal Data Protection Act (PDPA) and relevant international standards, including the General Data Protection Regulation (GDPR) for EU/EEA users.

1. Information We Collect
We may collect the following information:
• Name, email address, phone number, mailing address
• Passport number, nationality, date of birth (for bookings and permits)
• Bank transfer payment details (no credit card information is stored)
• Age, weight, height (for equipment fitting and safety purposes)
• Food allergies, health conditions (to ensure safe participation)
• Technical data such as IP address, browser type, device information
• Analytics data via Google Analytics
• Data submitted through contact forms or inquiries
• Comments left on the site, including IP address and browser user agent string (for spam detection)
• Uploaded media (we recommend removing EXIF GPS data before uploading)

2. Legal Bases for Processing
We process your data under the following legal bases:
• Contract: To fulfill bookings, process payments, and provide services
• Legal Obligation: To comply with Thai laws, accounting, and tourism regulations
• Legitimate Interest: To improve our services, maintain website security, and prevent fraud
• Consent: For marketing communications, special category data (health), and optional cookies

3. How We Use Your Information
We use your information to:
• Process bookings and inquiries
• Communicate important updates and confirmations
• Ensure your health and safety during tours
• Handle payments, refunds, and customer support
• Improve our website and user experience
• Comply with legal and regulatory requirements

4. Cookies
We use cookies to enhance your experience. If you leave a comment, you may opt-in to save your name, email, and website in cookies for one year. We use temporary cookies to test browser acceptance, login cookies for two days (or two weeks with “Remember Me”), and screen preference cookies for up to one year. Analytics cookies help us measure site traffic and performance.

5. Embedded Content
Articles on this site may include embedded content such as videos, images, or articles. Embedded content from other websites behaves as if you visited those websites directly. These websites may collect data about you, use cookies, and track your interaction with their content.

6. Who We Share Your Data With
We may share your data with:
• Tour partners and operators to deliver your booked services
• Government agencies when legally required (e.g., permits, insurance)
• Financial institutions for payment verification
• Third-party services such as Google Analytics (for site performance data)
• Automated spam detection services (for comments)

We do not sell your data to third parties.

7. International Transfers
Your data may be transferred and processed outside Thailand. Where necessary, we ensure adequate protection measures, including GDPR-compliant safeguards.

8. Data Retention
We retain personal data as long as necessary to fulfill the purposes outlined here:
• Booking and payment records are kept in accordance with Thai legal requirements (typically 5–10 years)
• Comments and metadata are retained indefinitely to recognize follow-ups
• Registered user profiles are stored until you request deletion

9. Your Rights
Under PDPA and GDPR, you have the right to:
• Access the data we hold about you
• Request corrections or updates
• Request deletion where legally permitted
• Restrict or object to data processing
• Request a copy of your data in portable format
• Withdraw consent for data processing at any time

10. Data Security
We use appropriate technical and organizational measures to protect your information. While we do our best to protect your data, we cannot guarantee absolute security of information transmitted over the internet.

11. Children’s Privacy
Our services are not directed to children under 13. We only collect children’s data (e.g., age, health information) with parental or guardian consent when necessary for tour safety.

12. Changes to This Privacy Policy
We may update this policy from time to time. The latest version will always be posted on this page with the effective date updated.

13. Contact Us
If you have any questions about this Privacy Policy or your personal data, please contact us:
Thank Me Later Co., Ltd.
No. 17/29-30 Moo. 6 Tambon Kathu, Amphur Kathu, Phuket 83120
Email: hello@thankmelater.travel
Phone/WhatsApp: +66 65 464 3555