“Personal Information” shall mean any information about an individual who can be identified from that information either directly or indirectly, including without limitation, information such as name, address, telephone number, e-mail address, and any other personal information. For the avoidance of doubt, Personal Information shall not include job title, workplace, business address or any other information excluded from the definition of Personal Information under Thai law. When using our website or application, you accept, consent and agree to the terms and conditions of this Policy.
Personal information which identifies you, either directly or indirectly, as an individual that may be collected by the Company may include:
The Company may also collect aggregated data or anonymized data that does not directly identify you. We may combine information we collect about you with information we receive from third parties. In some instances, we may combine other information with Personal Information. If other information is combined with Personal Information or if other information is used to identify an individual, such information will be treated by us as Personal Information.
We may share your Personal Information as follows:
We provide appropriate protections for such sharing of Personal Information as required by applicable law to prohibit third parties from using your Personal Information for their own purposes, and to address the security and confidentiality of your Personal Information. Except as specified above, we will not disclose your Personal Information to third parties without your consent.
We may transfer your Personal Information to the countries outside of Thailand to our Group of Companies and our third party service providers as part of our normal business operations to perform our Services (i.e., our IT service provider), that from the standpoint of the data protection supervisory authority in Thailand, may not have an "adequate standard of personal data protection" as specified by the data protection supervisory authority in Thailand if and when the applicable Thai data protection law enters into force.
Your Personal Information collected, used, or disclosed for the purposes hereunder will be stored only to the extent necessary during the term of your participation in the Services with us, or for the period necessary to fulfil the purposes outlined in this, including during a transition period (e.g. for the compliance of our obligations regarding data retention as established in applicable laws), if any. In principle we will retain your Personal Information as long as required or permitted by applicable law. Afterwards, we will remove your Personal Information from our systems and records and/or take steps to properly anonymize it so that you can no longer be identified from it.
We maintain reasonable physical, electronic, and organizational security measures to protect your Personal Information against accidental or unlawful destruction or accidental loss, alteration, or unauthorized disclosure or access.We use Secure Socket Layer technology to encrypt credit card information during transit. Through your personal account, you also have the ability to save credit card details for faster future bookings and payments. Your card details are encrypted, and you can always log in to your personal account to delete, edit, or add certain credit card details. For security reasons, the number cannot be edited (but the card details can be deleted). When viewing card details, only the last 4 digits of the number will be visible. Please note that we will store the last 4 digits of your credit card securely upon any payment made (this is required to manage any refund requests for that booking).
You have the following rights under the conditions set out under applicable law
To protect your privacy and security, we will verify your identity before responding to such request, and your request will be answered within a reasonable timeframe. We may not be able to allow you to access certain Personal Information in some cases e.g. if your Personal Information is connected with personal information of other persons, or for legal reasons. In such cases, we will provide you with an explanation why you cannot obtain this information. We may also deny your request for deletion or rectification of your Personal Information due to statutory provisions, especially those affecting our accounting processes, processing of claims, for fraud detection or prevention purposes, and mandatory data retention, which may prohibit deletion or anonymization.
We reserve the right to continuously update, amend and change our Policy at any time. Therefore, we recommend that you check any Policy changes periodically and check this Policy before you use the Platform every time. The changes will have immediate effect once announced on the Platform.