Privacy Policy of Thai Travel Store Company Limited
Effective Date: 15th September 2024
At
Thai Travel Store Company Limited ("we," "us," or "our"), we are committed to protecting and respecting your privacy. This Privacy Policy outlines how we collect, use, disclose, and protect your personal data in compliance with applicable privacy and data protection laws, including the
General Data Protection Regulation (GDPR) and Thailand's
Personal Data Protection Act (PDPA).
1.
Information We CollectWe may collect and process the following personal data:
- Personal Identification Information: Name, email address, phone number, postal address, passport information, and other identification details.
- Booking and Travel Information: Booking details, travel preferences, accommodation requests, and related services.
- Payment Information: Credit card details, bank account information, and billing address.
- Communications Data: Emails, messages, and correspondence related to your inquiries, bookings, or feedback.
- Website Usage Data: IP address, browser type, cookies, and browsing history on our website.
- Special Categories of Data: Health-related information or mobility assistance needs (only where necessary for your booking).
2.
How We Collect InformationWe collect personal data through:
- Direct Interactions: When you fill out a booking form, request information, or contact us via email or phone.
- Automated Technologies: Through cookies and tracking technologies on our website.
- Third Parties: Information from payment processors or third-party service providers.
3.
How We Use Your InformationWe use your personal data for the following purposes:
- To Provide Services: Process your bookings, fulfill travel requests, and provide customer support.
- To Communicate: Send booking confirmations, travel updates, newsletters (with your consent), and respond to inquiries.
- To Improve Services: Analyze website usage, improve services, and ensure a seamless customer experience.
- To Comply with Legal Obligations: Meet legal requirements, including fraud prevention and financial reporting.
4.
Legal Basis for ProcessingWe process your data based on the following legal grounds:
- Consent: With your clear consent for data processing.
- Contract: To fulfill a contract (e.g., your travel booking).
- Legal Obligation: To comply with legal requirements (GDPR and PDPA).
- Legitimate Interests: To pursue legitimate business interests, provided they don't override your rights (e.g., improving services).
5.
How We Share Your InformationWe may share your personal data with:
- Service Providers: Third-party suppliers (e.g., tour operators, accommodation providers).
- Legal Authorities: As required by law or to protect our legal rights.
- International Data Transfers: We comply with GDPR and PDPA requirements for international data transfers, ensuring appropriate safeguards, such as Standard Contractual Clauses (SCCs), are in place when transferring data outside of Thailand or the European Economic Area (EEA).
6.
Data SecurityWe take the security of your personal data seriously and implement technical and organizational measures to protect it, including encryption and secure servers.
7.
International Data TransfersAs a company operating in Thailand with a global customer base, your data may be transferred to countries outside of Thailand or the EEA. In such cases, we ensure that appropriate safeguards are in place, including contracts based on
Standard Contractual Clauses (SCCs), to ensure your data is protected under GDPR and PDPA.
8.
Data RetentionWe retain personal data only as long as necessary to fulfill the purposes outlined in this policy or as required by law. Data that is no longer needed will be securely deleted.
9.
Your RightsDepending on where you reside, you may have rights under both the GDPR and PDPA:
- Access: Request a copy of your personal data.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion (Right to be Forgotten): Request deletion of your data (subject to legal obligations).
- Restriction: Request restriction of data processing.
- Objection: Object to data processing for specific purposes.
- Data Portability: Request transfer of your data to another service provider.
- Withdraw Consent: You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
For PDPA Compliance:- Data Breach Notifications: We will notify you and the relevant Thai authorities of any data breaches within 72 hours, where required by law.
To exercise your rights, please contact us at info@thaitravelstore.com
10.
Cookies and Tracking TechnologiesOur website uses cookies to enhance your experience. For more details, please refer to our
Cookie Policy11.
Changes to This Privacy PolicyWe may update this Privacy Policy to reflect changes in our operations or legal requirements. The updated policy will be posted on our website, with the date of the last revision.
12.
Contact UsFor any questions or concerns regarding this Privacy Policy or your data, please contact:
Thai Travel Store Company Limited190/64, Chalongsuk Village, Pracha Uthit 1 Road, Moo 5, Ratsada Sub-district,
Mueang Phuket District, Phuket Province, 83000
Email:
info@thaitravelstore.comWebsite: thaitravelstore.com